sbs 2003 bugcheck dump

wcutler · 7th March 2008

I have a sbs 2003 that bsod and received this bugcheck dump. I am not good at reading these so I need some help. Thanks in advance

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {c0000005, 808751c6, f78feac8, f78fe7c4}

Probably caused by : ntkrnlmp.exe ( nt!FsRtlLookupPerStreamContextInternal+4a )

Followup: MachineOwner
---------

0: kd> !analyze -v
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 808751c6, The address that the exception occurred at
Arg3: f78feac8, Exception Record Address
Arg4: f78fe7c4, Context Record Address

Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
nt!FsRtlLookupPerStreamContextInternal+4a
808751c6 395008 cmp dword ptr [eax+8],edx

EXCEPTION_RECORD: f78feac8 -- (.exr 0xfffffffff78feac8)
ExceptionAddress: 808751c6 (nt!FsRtlLookupPerStreamContextInternal+0x0000004a)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000008
Attempt to read from address 00000008

CONTEXT: f78fe7c4 -- (.cxr 0xfffffffff78fe7c4)
eax=00000000 ebx=88409cd8 ecx=ec8aedcc edx=8a0cdba8 esi=ec8aeda0 edi=00000000
eip=808751c6 esp=f78feb90 ebp=f78feb9c iopl=0 nv up ei pl nz ac po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010213
nt!FsRtlLookupPerStreamContextInternal+0x4a:
808751c6 395008 cmp dword ptr [eax+8],edx ds:0023:00000008=00000000
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE

CURRENT_IRQL: 1

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

READ_ADDRESS: 00000008

BUGCHECK_STR: 0x7E

EXCEPTION_STR: 0x0

LAST_CONTROL_TRANSFER: from f7320884 to 808751c6

STACK_TEXT:
f78feb9c f7320884 ec8aeda0 8a0cdba8 00000000 nt!FsRtlLookupPerStreamContextInternal+0x4a
f78fec00 f7332f43 8a0cdba8 8a07e0b0 00000000 fltMgr!FltpGetStreamListCtrl+0x5a
f78fec1c f731b337 8a0cdba8 8a07e0b0 f78fecc0 fltMgr!FltpCleanupStreamListCtrlForFileObjectClose+0x17
f78fec78 f731cf2a 008fecc0 87f53b94 f78fecc0 fltMgr!FltpPerformPreCallbacks+0x141
f78fec8c f731d8d2 f78fecc0 00000000 8a081020 fltMgr!FltpPassThroughInternal+0x32
f78feca8 f731dce3 f78fecc0 8a07e0b0 8a1c5a60 fltMgr!FltpPassThrough+0x1c2
f78fecd8 80840153 8a081020 87f539e0 87f539f0 fltMgr!FltpDispatch+0x10d
f78fecec 8092ea48 00000000 00000000 00000000 nt!IofCallDriver+0x45
f78fed24 80929991 0007e0b0 80a7ff00 8a07e098 nt!IopDeleteFile+0x13a
f78fed40 808410de 8a07e0b0 00000000 87bba318 nt!ObpRemoveObjectRoutine+0xdc
f78fed60 80826a3f 80a7e540 87bba318 808b3ff4 nt!ObfDereferenceObject+0x67
f78fed8c 80861242 e418f640 00000000 8ab83db0 nt!MiSegmentDelete+0xd3
f78fedac 80920833 00000000 00000000 00000000 nt!MiDereferenceSegmentThread+0xa6
f78feddc 8083fe9f 808097a3 00000000 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

FOLLOWUP_IP:
nt!FsRtlLookupPerStreamContextInternal+4a
808751c6 395008 cmp dword ptr [eax+8],edx

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!FsRtlLookupPerStreamContextInternal+4a

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 45ec14ca

STACK_COMMAND: .cxr 0xfffffffff78fe7c4 ; kb

FAILURE_BUCKET_ID: 0x7E_nt!FsRtlLookupPerStreamContextInternal+4a

BUCKET_ID: 0x7E_nt!FsRtlLookupPerStreamContextInternal+4a

Followup: MachineOwner
---------

cpc2004 · 8th March 2008

The debug report is incomplete as there have no module list. Please attach the complete debug report. From the stack trace, I believe it is hardware error. Usuallly for hardware problem, I want 4 to 5 debug reports to confirm it is hardware error. Attach more debug reoprts here.

wcutler · 11th March 2008

I only have this one dump - hasn't had any more issue but we were concern about this one. This is what i got. I'm not sure what other info you need.
I ran !analyze –v only. Is there something else that I need to run?

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {c0000005, 808751c6, f78feac8, f78fe7c4}

Probably caused by : ntkrnlmp.exe ( nt!FsRtlLookupPerStreamContextInternal+4a )

Followup: MachineOwner
---------

0: kd> !analyze -v
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 808751c6, The address that the exception occurred at
Arg3: f78feac8, Exception Record Address
Arg4: f78fe7c4, Context Record Address

Debugging Details:
------------------

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
nt!FsRtlLookupPerStreamContextInternal+4a
808751c6 395008 cmp dword ptr [eax+8],edx

EXCEPTION_RECORD: f78feac8 -- (.exr 0xfffffffff78feac8)
ExceptionAddress: 808751c6 (nt!FsRtlLookupPerStreamContextInternal+0x0000004a)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000008
Attempt to read from address 00000008

CONTEXT: f78fe7c4 -- (.cxr 0xfffffffff78fe7c4)
eax=00000000 ebx=88409cd8 ecx=ec8aedcc edx=8a0cdba8 esi=ec8aeda0 edi=00000000
eip=808751c6 esp=f78feb90 ebp=f78feb9c iopl=0 nv up ei pl nz ac po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010213
nt!FsRtlLookupPerStreamContextInternal+0x4a:
808751c6 395008 cmp dword ptr [eax+8],edx ds:0023:00000008=00000000
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE

CURRENT_IRQL: 1

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

READ_ADDRESS: 00000008

BUGCHECK_STR: 0x7E

EXCEPTION_STR: 0x0

LAST_CONTROL_TRANSFER: from f7320884 to 808751c6

STACK_TEXT:
f78feb9c f7320884 ec8aeda0 8a0cdba8 00000000 nt!FsRtlLookupPerStreamContextInternal+0x4a
f78fec00 f7332f43 8a0cdba8 8a07e0b0 00000000 fltMgr!FltpGetStreamListCtrl+0x5a
f78fec1c f731b337 8a0cdba8 8a07e0b0 f78fecc0 fltMgr!FltpCleanupStreamListCtrlForFileObjectClose+0x17
f78fec78 f731cf2a 008fecc0 87f53b94 f78fecc0 fltMgr!FltpPerformPreCallbacks+0x141
f78fec8c f731d8d2 f78fecc0 00000000 8a081020 fltMgr!FltpPassThroughInternal+0x32
f78feca8 f731dce3 f78fecc0 8a07e0b0 8a1c5a60 fltMgr!FltpPassThrough+0x1c2
f78fecd8 80840153 8a081020 87f539e0 87f539f0 fltMgr!FltpDispatch+0x10d
f78fecec 8092ea48 00000000 00000000 00000000 nt!IofCallDriver+0x45
f78fed24 80929991 0007e0b0 80a7ff00 8a07e098 nt!IopDeleteFile+0x13a
f78fed40 808410de 8a07e0b0 00000000 87bba318 nt!ObpRemoveObjectRoutine+0xdc
f78fed60 80826a3f 80a7e540 87bba318 808b3ff4 nt!ObfDereferenceObject+0x67
f78fed8c 80861242 e418f640 00000000 8ab83db0 nt!MiSegmentDelete+0xd3
f78fedac 80920833 00000000 00000000 00000000 nt!MiDereferenceSegmentThread+0xa6
f78feddc 8083fe9f 808097a3 00000000 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

FOLLOWUP_IP:
nt!FsRtlLookupPerStreamContextInternal+4a
808751c6 395008 cmp dword ptr [eax+8],edx

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!FsRtlLookupPerStreamContextInternal+4a

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 45ec14ca

STACK_COMMAND: .cxr 0xfffffffff78fe7c4 ; kb

FAILURE_BUCKET_ID: 0x7E_nt!FsRtlLookupPerStreamContextInternal+4a

BUCKET_ID: 0x7E_nt!FsRtlLookupPerStreamContextInternal+4a

Followup: MachineOwner
---------

**PeteC** · 11th March 2008

Run the dump through our Dump Data Collection tool to get the complete log.

wcutler · 11th March 2008

Here is the complete data using the dump data collection tool
Thanks

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINDOWS\Minidump\Mini030708-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: LanManNt, suite: SmallBusiness TerminalServer SmallBusinessRestricted SingleUserTS
Built by: 3790.srv03_sp2_gdr.070304-2240
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af9c8
Debug session time: Fri Mar 7 11:55:44.789 2008 (GMT-5)
System Uptime: 3 days 16:41:33.367
Loading Kernel Symbols
........................................................................... ................................................
Loading User Symbols
Loading unloaded module list
.................................
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {c0000005, 808751c6, f78feac8, f78fe7c4}

Probably caused by : ntkrnlmp.exe ( nt!FsRtlLookupPerStreamContextInternal+4a )

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn;.logclose;q
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 808751c6, The address that the exception occurred at
Arg3: f78feac8, Exception Record Address
Arg4: f78fe7c4, Context Record Address

Debugging Details:
------------------

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
nt!FsRtlLookupPerStreamContextInternal+4a
808751c6 395008 cmp dword ptr [eax+8],edx

EXCEPTION_RECORD: f78feac8 -- (.exr 0xfffffffff78feac8)
.exr 0xfffffffff78feac8
ExceptionAddress: 808751c6 (nt!FsRtlLookupPerStreamContextInternal+0x0000004a)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000008
Attempt to read from address 00000008

CONTEXT: f78fe7c4 -- (.cxr 0xfffffffff78fe7c4)
.cxr 0xfffffffff78fe7c4
eax=00000000 ebx=88409cd8 ecx=ec8aedcc edx=8a0cdba8 esi=ec8aeda0 edi=00000000
eip=808751c6 esp=f78feb90 ebp=f78feb9c iopl=0 nv up ei pl nz ac po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010213
nt!FsRtlLookupPerStreamContextInternal+0x4a:
808751c6 395008 cmp dword ptr [eax+8],edx ds:0023:00000008=00000000
.cxr
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE

CURRENT_IRQL: 1

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

READ_ADDRESS: 00000008

BUGCHECK_STR: 0x7E

EXCEPTION_STR: 0x0

LAST_CONTROL_TRANSFER: from f7320884 to 808751c6

STACK_TEXT:
f78feb9c f7320884 ec8aeda0 8a0cdba8 00000000 nt!FsRtlLookupPerStreamContextInternal+0x4a
f78fec00 f7332f43 8a0cdba8 8a07e0b0 00000000 fltMgr!FltpGetStreamListCtrl+0x5a
f78fec1c f731b337 8a0cdba8 8a07e0b0 f78fecc0 fltMgr!FltpCleanupStreamListCtrlForFileObjectClose+0x17
f78fec78 f731cf2a 008fecc0 87f53b94 f78fecc0 fltMgr!FltpPerformPreCallbacks+0x141
f78fec8c f731d8d2 f78fecc0 00000000 8a081020 fltMgr!FltpPassThroughInternal+0x32
f78feca8 f731dce3 f78fecc0 8a07e0b0 8a1c5a60 fltMgr!FltpPassThrough+0x1c2
f78fecd8 80840153 8a081020 87f539e0 87f539f0 fltMgr!FltpDispatch+0x10d
f78fecec 8092ea48 00000000 00000000 00000000 nt!IofCallDriver+0x45
f78fed24 80929991 0007e0b0 80a7ff00 8a07e098 nt!IopDeleteFile+0x13a
f78fed40 808410de 8a07e0b0 00000000 87bba318 nt!ObpRemoveObjectRoutine+0xdc
f78fed60 80826a3f 80a7e540 87bba318 808b3ff4 nt!ObfDereferenceObject+0x67
f78fed8c 80861242 e418f640 00000000 8ab83db0 nt!MiSegmentDelete+0xd3
f78fedac 80920833 00000000 00000000 00000000 nt!MiDereferenceSegmentThread+0xa6
f78feddc 8083fe9f 808097a3 00000000 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

FOLLOWUP_IP:
nt!FsRtlLookupPerStreamContextInternal+4a
808751c6 395008 cmp dword ptr [eax+8],edx

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!FsRtlLookupPerStreamContextInternal+4a

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 45ec14ca

STACK_COMMAND: .cxr 0xfffffffff78fe7c4 ; kb

FAILURE_BUCKET_ID: 0x7E_nt!FsRtlLookupPerStreamContextInternal+4a

BUCKET_ID: 0x7E_nt!FsRtlLookupPerStreamContextInternal+4a

Followup: MachineOwner
---------

eax=00000000 ebx=88409cd8 ecx=ec8aedcc edx=8a0cdba8 esi=ec8aeda0 edi=00000000
eip=808751c6 esp=f78feb90 ebp=f78feb9c iopl=0 nv up ei pl nz ac po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010213
nt!FsRtlLookupPerStreamContextInternal+0x4a:
808751c6 395008 cmp dword ptr [eax+8],edx ds:0023:00000008=00000000
ChildEBP RetAddr Args to Child
f78feb9c f7320884 ec8aeda0 8a0cdba8 00000000 nt!FsRtlLookupPerStreamContextInternal+0x4a (FPO: [Non-Fpo])
f78fec00 f7332f43 8a0cdba8 8a07e0b0 00000000 fltMgr!FltpGetStreamListCtrl+0x5a (FPO: [Non-Fpo])
f78fec1c f731b337 8a0cdba8 8a07e0b0 f78fecc0 fltMgr!FltpCleanupStreamListCtrlForFileObjectClose+0x17 (FPO: [Non-Fpo])
f78fec78 f731cf2a 008fecc0 87f53b94 f78fecc0 fltMgr!FltpPerformPreCallbacks+0x141 (FPO: [Non-Fpo])
f78fec8c f731d8d2 f78fecc0 00000000 8a081020 fltMgr!FltpPassThroughInternal+0x32 (FPO: [Non-Fpo])
f78feca8 f731dce3 f78fecc0 8a07e0b0 8a1c5a60 fltMgr!FltpPassThrough+0x1c2 (FPO: [Non-Fpo])
f78fecd8 80840153 8a081020 87f539e0 87f539f0 fltMgr!FltpDispatch+0x10d (FPO: [Non-Fpo])
f78fecec 8092ea48 00000000 00000000 00000000 nt!IofCallDriver+0x45 (FPO: [Non-Fpo])
f78fed24 80929991 0007e0b0 80a7ff00 8a07e098 nt!IopDeleteFile+0x13a (FPO: [Non-Fpo])
f78fed40 808410de 8a07e0b0 00000000 87bba318 nt!ObpRemoveObjectRoutine+0xdc (FPO: [Non-Fpo])
f78fed60 80826a3f 80a7e540 87bba318 808b3ff4 nt!ObfDereferenceObject+0x67 (FPO: [Non-Fpo])
f78fed8c 80861242 e418f640 00000000 8ab83db0 nt!MiSegmentDelete+0xd3 (FPO: [Non-Fpo])
f78fedac 80920833 00000000 00000000 00000000 nt!MiDereferenceSegmentThread+0xa6 (FPO: [Non-Fpo])
f78feddc 8083fe9f 808097a3 00000000 00000000 nt!PspSystemThreadStartup+0x2e (FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
80800000 80a7a000 nt ntkrnlmp.exe Mon Mar 05 07:02:02 2007 (45EC14CA)
80a7a000 80aa6000 hal halmacpi.dll Fri Feb 16 23:48:26 2007 (45D6972A)
b552f000 b5541720 NAVENG NAVENG.SYS Thu Feb 28 19:21:51 2008 (47C75E2F)
b5542000 b561af80 NAVEX15 NAVEX15.SYS Thu Feb 28 19:20:50 2008 (47C75DF2)
b75ba000 b75e5000 RDPWD RDPWD.SYS Fri Feb 16 23:44:38 2007 (45D69646)
b7715000 b7720000 TDTCP TDTCP.SYS Fri Feb 16 23:44:32 2007 (45D69640)
b7815000 b7818580 KAPFA KAPFA.SYS Fri May 11 11:31:45 2007 (46449A71)
b9297000 b929d300 VirtFile VirtFile.sys Mon Feb 12 09:44:42 2007 (45D08B6A)
b93f7000 b9447000 HTTP HTTP.sys Sat Feb 17 00:28:12 2007 (45D6A07C)
b9717000 b9774000 srv srv.sys Sat Feb 17 00:27:20 2007 (45D6A048)
b979c000 b97cf000 mrxdav mrxdav.sys Fri Feb 16 23:50:49 2007 (45D697B9)
b9b6f000 b9b78900 LMIRfsDriver LMIRfsDriver.sys Tue Mar 27 04:24:44 2007 (4608E2DC)
b9c69000 b9c98d80 exifs exifs.sys Fri Apr 02 02:08:21 2004 (406D1165)
b9dd9000 b9dec000 dump_HpCISSs2 dump_HpCISSs2.sys Thu Jun 21 22:33:49 2007 (467B431D)
b9dec000 b9e01000 Cdfs Cdfs.SYS Sat Feb 17 00:27:08 2007 (45D6A03C)
b9e29000 b9e47000 EraserUtilRebootDrv EraserUtilRebootDrv.sys Thu Jan 17 20:44:27 2008 (4790128B)
b9e47000 b9ea7000 eeCtrl eeCtrl.sys Thu Jan 17 20:44:27 2008 (4790128B)
b9ea7000 b9eb8000 Fips Fips.SYS Sat Feb 17 00:26:33 2007 (45D6A019)
b9eb8000 b9f2e000 mrxsmb mrxsmb.sys Sat Feb 17 00:28:15 2007 (45D6A07F)
b9f2e000 b9f5e000 rdbss rdbss.sys Sat Feb 17 00:27:37 2007 (45D6A059)
b9f5e000 b9f7db00 SYMEVENT SYMEVENT.SYS Wed Aug 22 17:00:57 2007 (46CCB219)
b9f7e000 b9fe7000 SPBBCDrv SPBBCDrv.sys Tue Jul 31 03:58:59 2007 (46AEF9D3)
b9fe7000 ba011000 afd afd.sys Sat Feb 17 00:28:16 2007 (45D6A080)
ba0b1000 ba0e2000 netbt netbt.sys Sat Feb 17 00:28:57 2007 (45D6A0A9)
ba0e2000 ba172000 tcpip tcpip.sys Tue Oct 30 12:34:10 2007 (47276B12)
ba172000 ba18b000 ipsec ipsec.sys Sat Feb 17 00:29:28 2007 (45D6A0C8)
ba297000 ba2a8000 SRTSPX SRTSPX.SYS Thu Aug 02 16:46:20 2007 (46B250AC)
ba2a8000 ba2f2000 SRTSP SRTSP.SYS Thu Aug 02 16:46:21 2007 (46B250AD)
ba3fa000 ba401000 dxgthk dxgthk.sys Tue Mar 25 02:05:52 2003 (3E7FFFD0)
ba40a000 ba41f000 usbhub usbhub.sys Sat Feb 17 00:13:05 2007 (45D69CF1)
ba46f000 ba479000 dump_diskdump dump_diskdump.sys Sat Feb 17 00:07:44 2007 (45D69BB0)
ba4af000 ba4bc000 netbios netbios.sys Fri Feb 16 23:58:29 2007 (45D69985)
ba4bf000 ba4c2500 scsichng scsichng.sys Wed May 03 15:08:19 2006 (44590DB3)
ba4e7000 ba546000 update update.sys Mon May 28 07:15:16 2007 (465AC7D4)
ba546000 ba57d000 rdpdr rdpdr.sys Fri Feb 16 23:51:00 2007 (45D697C4)
ba57d000 ba58f000 raspptp raspptp.sys Sat Feb 17 00:29:20 2007 (45D6A0C0)
ba58f000 ba5a8000 ndiswan ndiswan.sys Sat Feb 17 00:29:22 2007 (45D6A0C2)
ba5a8000 ba5bc000 rasl2tp rasl2tp.sys Sat Feb 17 00:29:02 2007 (45D6A0AE)
ba5bc000 ba5e3000 ks ks.sys Sat Feb 17 00:30:40 2007 (45D6A110)
ba5e3000 ba5f7000 redbook redbook.sys Sat Feb 17 00:07:26 2007 (45D69B9E)
ba5f7000 ba60c000 cdrom cdrom.sys Sat Feb 17 00:07:48 2007 (45D69BB4)
ba60c000 ba621000 serial serial.sys Sat Feb 17 00:06:46 2007 (45D69B76)
ba621000 ba634000 i8042prt i8042prt.sys Sat Feb 17 00:30:40 2007 (45D6A110)
ba634000 ba654000 hpqilo2 hpqilo2.sys Mon Jul 16 16:36:14 2007 (469BE4CE)
ba654000 ba670000 VIDEOPRT VIDEOPRT.SYS Sat Feb 17 00:10:30 2007 (45D69C56)
ba670000 ba7d8000 ati2mtag ati2mtag.sys Wed Apr 05 22:03:52 2006 (44348518)
ba7d8000 ba802000 USBPORT USBPORT.SYS Sat Feb 17 00:12:59 2007 (45D69CEB)
ba802000 ba82d000 q57xp32 q57xp32.sys Sun Jul 22 16:42:23 2007 (46A3CF3F)
ba878000 ba886000 NDProxy NDProxy.SYS Fri Feb 16 23:59:21 2007 (45D699B9)
ba888000 ba891000 mssmbios mssmbios.sys Fri Feb 16 23:59:12 2007 (45D699B0)
ba898000 ba8a7000 termdd termdd.sys Fri Feb 16 23:44:32 2007 (45D69640)
ba8a8000 ba8b1000 raspti raspti.sys Fri Feb 16 23:59:23 2007 (45D699BB)
ba8b8000 ba8c3000 ptilink ptilink.sys Sat Feb 17 00:06:38 2007 (45D69B6E)
ba8c8000 ba8d3000 TDI TDI.SYS Sat Feb 17 00:01:19 2007 (45D69A2F)
ba8d8000 ba8e7000 raspppoe raspppoe.sys Fri Feb 16 23:59:23 2007 (45D699BB)
ba8e8000 ba8f1000 ndistapi ndistapi.sys Fri Feb 16 23:59:19 2007 (45D699B7)
ba8f8000 ba902000 serenum serenum.sys Sat Feb 17 00:06:44 2007 (45D69B74)
ba908000 ba912000 mouclass mouclass.sys Tue Mar 25 02:03:09 2003 (3E7FFF2D)
bf800000 bf9cf000 win32k win32k.sys Thu Mar 01 08:59:28 2007 (45E6EA50)
bf9cf000 bf9e6000 dxg dxg.sys Sat Feb 17 00:14:39 2007 (45D69D4F)
bf9e6000 bfa29000 ati2dvag ati2dvag.dll Wed Apr 05 22:04:15 2006 (4434852F)
bfa29000 bfa68000 ati2cqag ati2cqag.dll Wed Apr 05 20:57:18 2006 (4434757E)
bfa68000 bfa9e000 atikvmag atikvmag.dll Wed Apr 05 21:25:29 2006 (44347C19)
bffa0000 bffea000 ATMFD ATMFD.DLL Sat Feb 17 07:59:31 2007 (45D70A43)
f7200000 f721f000 Mup Mup.sys Sat Feb 17 00:27:41 2007 (45D6A05D)
f721f000 f725e000 NDIS NDIS.sys Sat Feb 17 00:28:49 2007 (45D6A0A1)
f725e000 f72f3000 Ntfs Ntfs.sys Sat Feb 17 00:27:23 2007 (45D6A04B)
f72f3000 f7319000 KSecDD KSecDD.sys Fri Feb 16 23:46:32 2007 (45D696B8)
f7319000 f733e000 fltMgr fltMgr.sys Fri Feb 16 23:51:08 2007 (45D697CC)
f733e000 f7351000 CLASSPNP CLASSPNP.SYS Sat Feb 17 00:28:16 2007 (45D6A080)
f7351000 f736f000 storport storport.sys Sat Feb 17 00:07:48 2007 (45D69BB4)
f736f000 f7382000 HpCISSs2 HpCISSs2.sys Thu Jun 21 22:33:49 2007 (467B431D)
f7382000 f739f000 atapi atapi.sys Sat Feb 17 00:07:34 2007 (45D69BA6)
f739f000 f73c9000 volsnap volsnap.sys Sat Feb 17 00:08:23 2007 (45D69BD7)
f73c9000 f73f5000 dmio dmio.sys Sat Feb 17 00:10:44 2007 (45D69C64)
f73f5000 f741c000 ftdisk ftdisk.sys Sat Feb 17 00:08:05 2007 (45D69BC5)
f741c000 f7432000 pci pci.sys Fri Feb 16 23:59:03 2007 (45D699A7)
f7432000 f7466000 ACPI ACPI.sys Fri Feb 16 23:58:47 2007 (45D69997)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 02:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Fri Feb 16 23:58:57 2007 (45D699A1)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Sat Feb 17 00:07:32 2007 (45D69BA4)
f74b7000 f74c7000 MountMgr MountMgr.sys Sat Feb 17 00:05:35 2007 (45D69B2F)
f74c7000 f74d2000 PartMgr PartMgr.sys Sat Feb 17 00:29:25 2007 (45D6A0C5)
f74d7000 f74e7000 disk disk.sys Sat Feb 17 00:07:51 2007 (45D69BB7)
f74e7000 f74f2980 vsp vsp.sys Fri Jan 19 18:02:44 2007 (45B15C24)
f74f7000 f7503000 Dfs Dfs.sys Fri Feb 16 23:51:17 2007 (45D697D5)
f7507000 f7511000 crcdisk crcdisk.sys Sat Feb 17 00:09:50 2007 (45D69C2E)
f7547000 f7554000 Npfs Npfs.SYS Fri Feb 16 23:50:36 2007 (45D697AC)
f7557000 f7561000 ndisuio ndisuio.sys Fri Feb 16 23:58:25 2007 (45D69981)
f7577000 f7580000 kbdhid kbdhid.sys Sat Feb 17 00:05:42 2007 (45D69B36)
f7587000 f7590000 usbscan usbscan.sys Sat Feb 17 00:03:09 2007 (45D69A9D)
f75b7000 f75c1000 Dxapi Dxapi.sys Tue Mar 25 02:06:01 2003 (3E7FFFD9)
f75c7000 f75d5000 msgpc msgpc.sys Fri Feb 16 23:58:37 2007 (45D6998D)
f75d7000 f75e2000 cpqcidrv cpqcidrv.sys Fri Jun 22 13:55:11 2007 (467C1B0F)
f75f7000 f7602000 Msfs Msfs.SYS Fri Feb 16 23:50:33 2007 (45D697A9)
f7607000 f7610000 hidusb hidusb.sys Tue Mar 25 02:10:17 2003 (3E8000D9)
f7617000 f7623000 vga vga.sys Sat Feb 17 00:10:30 2007 (45D69C56)
f7657000 f7660000 watchdog watchdog.sys Sat Feb 17 00:11:45 2007 (45D69CA1)
f7667000 f7674000 wanarp wanarp.sys Fri Feb 16 23:59:17 2007 (45D699B5)
f7687000 f7696000 intelppm intelppm.sys Fri Feb 16 23:48:30 2007 (45D6972E)
f7697000 f76a2000 kbdclass kbdclass.sys Sat Feb 17 00:05:39 2007 (45D69B33)
f76a7000 f76b5000 HIDCLASS HIDCLASS.SYS Tue Mar 25 02:10:17 2003 (3E8000D9)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 02:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 02:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 02:04:46 2003 (3E7FFF8E)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 02:08:08 2003 (3E800058)
f775f000 f7767000 Fs_Rec Fs_Rec.SYS Tue Mar 25 02:08:36 2003 (3E800074)
f7767000 f776e000 Null Null.SYS Tue Mar 25 02:03:05 2003 (3E7FFF29)
f776f000 f7776000 Beep Beep.SYS Tue Mar 25 02:03:04 2003 (3E7FFF28)
f7777000 f777f000 mnmdd mnmdd.SYS Tue Mar 25 02:07:53 2003 (3E800049)
f777f000 f7787000 RDPCDD RDPCDD.sys Tue Mar 25 02:03:05 2003 (3E7FFF29)
f7787000 f778f000 rasacd rasacd.sys Tue Mar 25 02:11:50 2003 (3E800136)
f77cf000 f77d5500 tpfilter tpfilter.sys Wed Jan 31 14:08:43 2007 (45C0F74B)
f77d7000 f77def00 halfinch halfinch.sys Fri Jan 12 07:42:41 2007 (45A79051)
f77df000 f77e4180 usbuhci usbuhci.sys Sat Feb 17 00:13:02 2007 (45D69CEE)
f77e7000 f77edb80 usbehci usbehci.sys Sat Feb 17 00:12:56 2007 (45D69CE8)
f77f7000 f77ff000 audstub audstub.sys Tue Mar 25 02:09:12 2003 (3E800098)
f780f000 f7816d80 usbccgp usbccgp.sys Sat Feb 17 00:13:08 2007 (45D69CF4)
f7817000 f781d300 HIDPARSE HIDPARSE.SYS Sat Feb 17 00:12:35 2007 (45D69CD3)
f781f000 f7827000 mouhid mouhid.sys Tue Mar 25 02:03:12 2003 (3E7FFF30)
f79b5000 f79b6280 swenum swenum.sys Sat Feb 17 00:05:56 2007 (45D69B44)
f79b7000 f79b8580 USBD USBD.SYS Tue Mar 25 02:10:39 2003 (3E8000EF)
f79ff000 f7a00780 RaInfo RaInfo.sys Mon Apr 09 18:37:22 2007 (461ACE32)
f7aa6000 f7aa6c80 lmimirr lmimirr.sys Tue Apr 10 17:32:11 2007 (461C106B)

Unloaded modules:
b5733000 b5746000 NAVENG.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b5746000 b581f000 NAVEX15.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b58d3000 b58e6000 NAVENG.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b58e6000 b59bf000 NAVEX15.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b5aa3000 b5ab6000 NAVENG.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b5ab6000 b5b8f000 NAVEX15.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b5c43000 b5c56000 NAVENG.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b5c56000 b5d2f000 NAVEX15.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b5ebf000 b5ed2000 NAVENG.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b5ed2000 b5fab000 NAVEX15.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b605f000 b6072000 NAVENG.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b6072000 b614b000 NAVEX15.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b624f000 b6262000 NAVENG.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b6262000 b633b000 NAVEX15.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b6417000 b642a000 NAVENG.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b642a000 b6503000 NAVEX15.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b65b7000 b65ca000 NAVENG.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b65ca000 b66a3000 NAVEX15.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b6883000 b6896000 NAVENG.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b6896000 b696f000 NAVEX15.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b71b6000 b71c9000 NAVENG.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b71c9000 b72a2000 NAVEX15.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f77ef000 f77f6000 VirtFile.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b72f2000 b7305000 NAVENG.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b7305000 b73de000 NAVEX15.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b7406000 b7419000 NAVENG.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b7419000 b74f2000 NAVEX15.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ba1ab000 ba1be000 NAVENG.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ba1be000 ba297000 NAVEX15.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ba49f000 ba4ad000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f77ff000 f7807000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7537000 f7541000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7527000 f7532000 Fdc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt