Memory dump

Hi All,

I am having a server which is running with windows 2003 standard os. The server got restarted automatically. The Windbg logs are as below. I have a 0 knowledge about Windbg. Please help me to resolve this issue. Thanks is advance.

Loading Dump File [C:\Users\Abhijit Biranje\Desktop\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*f:\localsymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (8 procs) Free x86 compatible
Product: Server, suite: TerminalServer
Built by: 3790.srv03_sp2_gdr.100216-1301
Machine Name:
Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
Debug session time: Mon Jul 26 17:23:28.855 2010 (UTC + 5:30)
System Uptime: 5 days 0:36:44.953
Loading Kernel Symbols
...............................................................
...........................................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffd900c). Type ".hh dbgerr001" for details
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {44, 0, 80000000, 0}

Page 11f5b4 not present in the dump file. Type ".hh dbgerr004" for details
Page bf6cf not present in the dump file. Type ".hh dbgerr004" for details
Probably caused by : win32k.sys ( win32k!Createpxs+24 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000044, Attempt to free a non-allocated nonpaged pool address
Arg2: 00000000, Starting address
Arg3: 80000000, (reserved)
Arg4: 00000000, 0

Debugging Details:
------------------


FAULTING_IP:
win32k!Createpxs+24
bf8f297a 33c0 xor eax,eax

BUGCHECK_STR: 0xc2_44

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: EXCEL.EXE

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 8085c453 to 80827c83

STACK_TEXT:
9726cbc0 8085c453 000000c2 00000044 00000000 nt!KeBugCheckEx+0x1b
9726cbec 80892541 00000000 bc310900 000003e1 nt!MmGetSizeOfBigPoolAllocation+0x203
9726cc44 bf8f297a 20474942 00000000 9726cc74 nt!ExFreePoolWithTag+0x1fd
9726cc54 bf8f2c34 bf917158 00000000 00000000 win32k!Createpxs+0x24
9726cc74 bf91743a bc155bf0 bf917158 00000000 win32k!AnticipatePost+0x1a
9726cc94 bf8f26c3 bc310900 9726ccf8 bf8f05f1 win32k!Unadvise+0x1b
9726cca0 bf8f05f1 9726cd3c 9726cd44 bc310900 win32k!xxxUnexpectedClientPost+0x5c
9726ccf8 bf8ab905 be77f1f0 be7721f0 bc310900 win32k!xxxDDETrackPostHook+0x1b3
9726cd30 bf8ac24e 00000000 000003e3 058100b6 win32k!_PostMessage+0x102
9726cd4c 808897cc 0125006e 000003e3 058100b6 win32k!NtUserPostMessage+0x5a
9726cd4c 7c82860c 0125006e 000003e3 058100b6 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0013ef1c 00000000 00000000 00000000 00000000 0x7c82860c


STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!Createpxs+24
bf8f297a 33c0 xor eax,eax

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: win32k!Createpxs+24

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4a8417a6

FAILURE_BUCKET_ID: 0xc2_44_win32k!Createpxs+24

BUCKET_ID: 0xc2_44_win32k!Createpxs+24

Followup: MachineOwner
---------

1: kd> lmvm nt
start end module name
80800000 80a5a000 nt (pdb symbols) C:\Program Files\Debugging Tools for Windows (x86)\sym\ntkrpamp.pdb\CFA26600F7CB4BC3BFC72A3D5D2D03481\ntkrpamp.pdb
Loaded symbol image file: ntkrpamp.exe
Image path: ntkrpamp.exe
Image name: ntkrpamp.exe
Timestamp: Tue Feb 16 18:03:49 2010 (4B7A90AD)
CheckSum: 00244C37
ImageSize: 0025A000
File version: 5.2.3790.4666
Product version: 5.2.3790.4666
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntkrpamp.exe
OriginalFilename: ntkrpamp.exe
ProductVersion: 5.2.3790.4666
FileVersion: 5.2.3790.4666 (srv03_sp2_gdr.100216-1301)
FileDescription: NT Kernel & System
LegalCopyright: © Microsoft Corporation. All rights reserved.
..................................................................................................................
Please help me to resolve this issue.

 

Blue Screen in windows 2003 server

Hi all,

I am having a windows 2003 standard server which restarts automatically. I checked on internet about Windbg to check memory.dmp file but i dont have any knowledge about the same. Please find the below out put of Windgb and help me to resolve this issue.

1: kd> !analyze -v;r;kv;lmtn;
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000044, Attempt to free a non-allocated nonpaged pool address
Arg2: 00000000, Starting address
Arg3: 80000000, (reserved)
Arg4: 00000000, 0

Debugging Details:
------------------


FAULTING_IP:
win32k!Createpxs+24
bf8f297a 33c0 xor eax,eax

BUGCHECK_STR: 0xc2_44

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: EXCEL.EXE

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 8085c453 to 80827c83

STACK_TEXT:
9726cbc0 8085c453 000000c2 00000044 00000000 nt!KeBugCheckEx+0x1b
9726cbec 80892541 00000000 bc310900 000003e1 nt!MmGetSizeOfBigPoolAllocation+0x203
9726cc44 bf8f297a 20474942 00000000 9726cc74 nt!ExFreePoolWithTag+0x1fd
9726cc54 bf8f2c34 bf917158 00000000 00000000 win32k!Createpxs+0x24
9726cc74 bf91743a bc155bf0 bf917158 00000000 win32k!AnticipatePost+0x1a
9726cc94 bf8f26c3 bc310900 9726ccf8 bf8f05f1 win32k!Unadvise+0x1b
9726cca0 bf8f05f1 9726cd3c 9726cd44 bc310900 win32k!xxxUnexpectedClientPost+0x5c
9726ccf8 bf8ab905 be77f1f0 be7721f0 bc310900 win32k!xxxDDETrackPostHook+0x1b3
9726cd30 bf8ac24e 00000000 000003e3 058100b6 win32k!_PostMessage+0x102
9726cd4c 808897cc 0125006e 000003e3 058100b6 win32k!NtUserPostMessage+0x5a
9726cd4c 7c82860c 0125006e 000003e3 058100b6 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0013ef1c 00000000 00000000 00000000 00000000 0x7c82860c


STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!Createpxs+24
bf8f297a 33c0 xor eax,eax

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: win32k!Createpxs+24

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4a8417a6

FAILURE_BUCKET_ID: 0xc2_44_win32k!Createpxs+24

BUCKET_ID: 0xc2_44_win32k!Createpxs+24

Followup: MachineOwner
---------

eax=f772713c ebx=00000000 ecx=00000002 edx=00000000 esi=f7727120 edi=00000000
eip=80827c83 esp=9726cba8 ebp=9726cbc0 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
80827c83 5d pop ebp
ChildEBP RetAddr Args to Child
9726cbc0 8085c453 000000c2 00000044 00000000 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
9726cbec 80892541 00000000 bc310900 000003e1 nt!MmGetSizeOfBigPoolAllocation+0x203 (FPO: [Non-Fpo])
9726cc44 bf8f297a 20474942 00000000 9726cc74 nt!ExFreePoolWithTag+0x1fd (FPO: [Non-Fpo])
9726cc54 bf8f2c34 bf917158 00000000 00000000 win32k!Createpxs+0x24 (FPO: [Non-Fpo])
9726cc74 bf91743a bc155bf0 bf917158 00000000 win32k!AnticipatePost+0x1a (FPO: [Non-Fpo])
9726cc94 bf8f26c3 bc310900 9726ccf8 bf8f05f1 win32k!Unadvise+0x1b (FPO: [Non-Fpo])
9726cca0 bf8f05f1 9726cd3c 9726cd44 bc310900 win32k!xxxUnexpectedClientPost+0x5c (FPO: [Non-Fpo])
9726ccf8 bf8ab905 be77f1f0 be7721f0 bc310900 win32k!xxxDDETrackPostHook+0x1b3 (FPO: [Non-Fpo])
9726cd30 bf8ac24e 00000000 000003e3 058100b6 win32k!_PostMessage+0x102 (FPO: [Non-Fpo])
9726cd4c 808897cc 0125006e 000003e3 058100b6 win32k!NtUserPostMessage+0x5a (FPO: [Non-Fpo])
9726cd4c 7c82860c 0125006e 000003e3 058100b6 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ 9726cd64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0013ef1c 00000000 00000000 00000000 00000000 0x7c82860c
start end module name
80800000 80a5a000 nt ntkrpamp.exe Tue Feb 16 18:03:49 2010 (4B7A90AD)
80a5a000 80a86000 hal halmacpi.dll Sat Feb 17 11:18:26 2007 (45D6972A)
bf800000 bf9d1000 win32k win32k.sys Thu Aug 13 19:09:50 2009 (4A8417A6)
bf9d1000 bf9e8000 dxg dxg.sys Sat Feb 17 11:44:39 2007 (45D69D4F)
bf9e8000 bfa16200 G200ed G200ed.dll Wed Apr 19 01:51:56 2006 (44454A64)
bfa1b000 bfacbf00 vdtw30 vdtw30.dll Sat Jun 30 01:55:35 2007 (46856ABF)
bffa0000 bffea000 ATMFD ATMFD.DLL Sat Feb 17 19:29:31 2007 (45D70A43)
f3f7c000 f3f7fe80 pdcrypt1 pdcrypt1.sys Sat Feb 10 06:03:28 2007 (45CD12D8)
f4050000 f4053300 pdrframe pdrframe.sys Sat Feb 10 06:03:23 2007 (45CD12D3)
f4298000 f42dbc00 WDICA WDICA.SYS Sat Jun 30 01:56:07 2007 (46856ADF)
f42dc000 f4307000 RDPWD RDPWD.SYS Sat Feb 17 11:14:38 2007 (45D69646)
f4323000 f4326600 icareduc icareduc.sys Sat Feb 10 06:02:11 2007 (45CD128B)
f469f000 f46c6800 mfehidk mfehidk.sys Thu Nov 23 04:23:25 2006 (4564D4E5)
f474f000 f475a000 TDTCP TDTCP.SYS Sat Feb 17 11:14:32 2007 (45D69640)
f475f000 f476ef00 mfeavfk mfeavfk.sys Thu Nov 23 04:25:05 2006 (4564D549)
f476f000 f477d020 mfeapfk mfeapfk.sys Thu Nov 23 04:24:19 2006 (4564D51B)
f4e47000 f4e7a000 mrxdav mrxdav.sys Mon Dec 17 16:19:07 2007 (47665423)
f505a000 f50bc000 srv srv.sys Thu Dec 10 21:13:46 2009 (4B211732)
f5134000 f5185000 HTTP HTTP.sys Fri Nov 06 18:21:22 2009 (4AF41BCA)
f54cd000 f5523d00 cdm cdm.sys Sat Jun 30 01:53:51 2007 (46856A57)
f5554000 f5556980 ctxsmcdrv ctxsmcdrv.sys Sat Feb 10 06:03:41 2007 (45CD12E5)
f57cc000 f57f2500 CtxSbx CtxSbx.sys Sat Jun 30 02:24:25 2007 (46857181)
f5873000 f5876e80 ctxpidmn ctxpidmn.sys Sat Jun 30 02:23:06 2007 (46857132)
f5ae7000 f5b01000 dump_lsi_sas dump_lsi_sas.sys Wed Aug 17 02:29:43 2005 (430253BF)
f5b01000 f5b16000 Cdfs Cdfs.SYS Sat Feb 17 11:57:08 2007 (45D6A03C)
f5b48000 f5b59000 Fips Fips.SYS Sat Feb 17 11:56:33 2007 (45D6A019)
f5b59000 f5bcf000 mrxsmb mrxsmb.sys Wed Feb 24 21:24:48 2010 (4B854BC8)
f5bf7000 f5c27000 rdbss rdbss.sys Wed Feb 24 21:24:03 2010 (4B854B9B)
f5c27000 f5c51000 afd afd.sys Thu Aug 14 16:16:56 2008 (48A40D20)
f5c51000 f5c82000 netbt netbt.sys Sat Feb 17 11:58:57 2007 (45D6A0A9)
f5cd2000 f5cdfd80 CtxAltStr CtxAltStr.sys Sat Jun 30 02:17:29 2007 (46856FE1)
f5d22000 f5db6000 tcpip tcpip.sys Sat Aug 15 15:23:38 2009 (4A8685A2)
f5fd7000 f5ff0000 ipsec ipsec.sys Sat Feb 17 11:59:28 2007 (45D6A0C8)
f6010000 f6025000 usbhub usbhub.sys Sat Feb 17 11:43:05 2007 (45D69CF1)
f6068000 f60c7000 update update.sys Mon May 28 17:45:16 2007 (465AC7D4)
f6127000 f6131000 Dxapi Dxapi.sys Tue Mar 25 12:36:01 2003 (3E7FFFD9)
f6137000 f6141000 dump_diskdump dump_diskdump.sys Sat Feb 17 11:37:44 2007 (45D69BB0)
f6157000 f6160000 kbdhid kbdhid.sys Sat Feb 17 11:35:42 2007 (45D69B36)
f6167000 f619e000 rdpdr rdpdr.sys Sat Feb 17 11:21:00 2007 (45D697C4)
f61c6000 f61d8000 raspptp raspptp.sys Sat Feb 17 11:59:20 2007 (45D6A0C0)
f61d8000 f61f1000 ndiswan ndiswan.sys Sat Feb 17 11:59:22 2007 (45D6A0C2)
f61f1000 f6205000 rasl2tp rasl2tp.sys Sat Feb 17 11:59:02 2007 (45D6A0AE)
f6205000 f622c000 ks ks.sys Sat Feb 17 12:00:40 2007 (45D6A110)
f622c000 f6240000 redbook redbook.sys Sat Feb 17 11:37:26 2007 (45D69B9E)
f6240000 f6255000 cdrom cdrom.sys Sat Feb 17 11:37:48 2007 (45D69BB4)
f6255000 f626a000 serial serial.sys Sat Feb 17 11:36:46 2007 (45D69B76)
f626a000 f6286000 VIDEOPRT VIDEOPRT.SYS Sat Feb 17 11:40:30 2007 (45D69C56)
f6286000 f62b6e80 G200em G200em.sys Wed Apr 19 01:52:35 2006 (44454A8B)
f62b7000 f62e1000 USBPORT USBPORT.SYS Sat Feb 17 11:42:59 2007 (45D69CEB)
f62e1000 f6303d80 b57xp32 b57xp32.sys Tue Oct 18 04:01:57 2005 (4354265D)
f6344000 f634a780 ctxrmpn ctxrmpn.sys Sat Feb 10 06:21:45 2007 (45CD1721)
f6bf3000 f6bf3860 BANTExt BANTExt.sys Thu May 28 08:13:29 1998 (356CCF51)
f6f6f000 f6f72ea0 cdfdrv cdfdrv.sys Mon Oct 09 21:57:49 2006 (452A7885)
f6fe5000 f6fee000 watchdog watchdog.sys Sat Feb 17 11:41:45 2007 (45D69CA1)
f6ff5000 f7000000 ptilink ptilink.sys Sat Feb 17 11:36:38 2007 (45D69B6E)
f7005000 f700f000 ndisuio ndisuio.sys Sat Feb 17 11:28:25 2007 (45D69981)
f7015000 f7022000 netbios netbios.sys Sat Feb 17 11:28:29 2007 (45D69985)
f7025000 f7034000 termdd termdd.sys Sat Feb 17 11:14:32 2007 (45D69640)
f7045000 f7054000 raspppoe raspppoe.sys Sat Feb 17 11:29:23 2007 (45D699BB)
f7055000 f7060000 TDI TDI.SYS Sat Feb 17 11:31:19 2007 (45D69A2F)
f70f9000 f7118000 Mup Mup.sys Sat Feb 17 11:57:41 2007 (45D6A05D)
f7118000 f7157000 NDIS NDIS.sys Sat Feb 17 11:58:49 2007 (45D6A0A1)
f7157000 f71ec000 Ntfs Ntfs.sys Sat Feb 17 11:57:23 2007 (45D6A04B)
f71ec000 f7212000 KSecDD KSecDD.sys Mon Jun 15 23:15:11 2009 (4A3688A7)
f7212000 f7231f80 symsnap symsnap.sys Thu Dec 13 01:01:49 2007 (47603725)
f7232000 f7257000 fltmgr fltmgr.sys Sat Feb 17 11:21:08 2007 (45D697CC)
f7257000 f726a000 CLASSPNP CLASSPNP.SYS Sat Feb 17 11:58:16 2007 (45D6A080)
f726a000 f7288000 storport storport.sys Sat Feb 17 11:37:48 2007 (45D69BB4)
f7288000 f72a2000 lsi_sas lsi_sas.sys Wed Aug 17 02:29:43 2005 (430253BF)
f72a2000 f72bf000 atapi atapi.sys Sat Feb 17 11:37:34 2007 (45D69BA6)
f72bf000 f72e9000 volsnap volsnap.sys Sat Feb 17 11:38:23 2007 (45D69BD7)
f72e9000 f7315000 dmio dmio.sys Sat Feb 17 11:40:44 2007 (45D69C64)
f7315000 f733c000 ftdisk ftdisk.sys Sat Feb 17 11:38:05 2007 (45D69BC5)
f733c000 f7352000 pci pci.sys Sat Feb 17 11:29:03 2007 (45D699A7)
f7352000 f7386000 ACPI ACPI.sys Sat Feb 17 11:28:47 2007 (45D69997)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 12:43:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Sat Feb 17 11:28:57 2007 (45D699A1)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Sat Feb 17 11:37:32 2007 (45D69BA4)
f74b7000 f74c7000 MountMgr MountMgr.sys Sat Feb 17 11:35:35 2007 (45D69B2F)
f74c7000 f74d2000 PartMgr PartMgr.sys Sat Feb 17 11:59:25 2007 (45D6A0C5)
f74d7000 f74e7000 disk disk.sys Sat Feb 17 11:37:51 2007 (45D69BB7)
f74e7000 f74f3000 Dfs Dfs.sys Sat Feb 17 11:21:17 2007 (45D697D5)
f74f7000 f7501000 crcdisk crcdisk.sys Sat Feb 17 11:39:50 2007 (45D69C2E)
f7577000 f7582000 kbdclass kbdclass.sys Sat Feb 17 11:35:39 2007 (45D69B33)
f7597000 f75a6000 intelppm intelppm.sys Sat Feb 17 11:18:30 2007 (45D6972E)
f75a7000 f75b0000 mssmbios mssmbios.sys Sat Feb 17 11:29:12 2007 (45D699B0)
f75b7000 f75c1000 dwvkbd dwvkbd.sys Thu Apr 12 02:53:28 2007 (461D51D0)
f75c7000 f75d0000 ndistapi ndistapi.sys Sat Feb 17 11:29:19 2007 (45D699B7)
f75e7000 f75f5000 NDProxy NDProxy.SYS Sat Feb 17 11:29:21 2007 (45D699B9)
f75f7000 f7601000 serenum serenum.sys Sat Feb 17 11:36:44 2007 (45D69B74)
f7607000 f7614000 Npfs Npfs.SYS Sat Feb 17 11:20:36 2007 (45D697AC)
f7617000 f7623000 vga vga.sys Sat Feb 17 11:40:30 2007 (45D69C56)
f7627000 f7632000 Msfs Msfs.SYS Sat Feb 17 11:20:33 2007 (45D697A9)
f7637000 f7642060 mfetdik mfetdik.sys Thu Nov 23 04:24:10 2006 (4564D512)
f7647000 f7655000 HIDCLASS HIDCLASS.SYS Tue Mar 25 12:40:17 2003 (3E8000D9)
f7677000 f7681000 mouclass mouclass.sys Tue Mar 25 12:33:09 2003 (3E7FFF2D)
f7687000 f7694000 wanarp wanarp.sys Sat Feb 17 11:29:17 2007 (45D699B5)
f7697000 f76a5000 msgpc msgpc.sys Sat Feb 17 11:28:37 2007 (45D6998D)
f76a7000 f76b0000 raspti raspti.sys Sat Feb 17 11:29:23 2007 (45D699BB)
f76b7000 f76c0000 hidusb hidusb.sys Tue Mar 25 12:40:17 2003 (3E8000D9)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 12:38:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 12:37:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 12:34:46 2003 (3E7FFF8E)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 12:38:08 2003 (3E800058)
f775f000 f7767000 RDPCDD RDPCDD.sys Tue Mar 25 12:33:05 2003 (3E7FFF29)
f776f000 f7777000 rasacd rasacd.sys Tue Mar 25 12:41:50 2003 (3E800136)
f7777000 f777ed80 usbccgp usbccgp.sys Sat Feb 17 11:43:08 2007 (45D69CF4)
f777f000 f7787000 mouhid mouhid.sys Tue Mar 25 12:33:12 2003 (3E7FFF30)
f7787000 f778e000 dxgthk dxgthk.sys Tue Mar 25 12:35:52 2003 (3E7FFFD0)
f77af000 f77b5a20 mfebopk mfebopk.sys Thu Nov 23 04:25:32 2006 (4564D564)
f77c7000 f77cef80 v2imount v2imount.sys Thu Dec 13 00:37:19 2007 (47603167)
f77e7000 f77ec180 usbuhci usbuhci.sys Sat Feb 17 11:43:02 2007 (45D69CEE)
f77ef000 f77f5b80 usbehci usbehci.sys Sat Feb 17 11:42:56 2007 (45D69CE8)
f77f7000 f77ff000 audstub audstub.sys Tue Mar 25 12:39:12 2003 (3E800098)
f77ff000 f7807000 Fs_Rec Fs_Rec.SYS Tue Mar 25 12:38:36 2003 (3E800074)
f7807000 f780e000 Null Null.SYS Tue Mar 25 12:33:05 2003 (3E7FFF29)
f780f000 f7816000 Beep Beep.SYS Tue Mar 25 12:33:04 2003 (3E7FFF28)
f7817000 f781d300 HIDPARSE HIDPARSE.SYS Sat Feb 17 11:42:35 2007 (45D69CD3)
f781f000 f7827000 mnmdd mnmdd.SYS Tue Mar 25 12:37:53 2003 (3E800049)
f7999000 f799a280 swenum swenum.sys Sat Feb 17 11:35:56 2007 (45D69B44)
f799b000 f799c580 USBD USBD.SYS Tue Mar 25 12:40:39 2003 (3E8000EF)
f7a97000 f7a98000 icacdd icacdd.sys Sat Feb 10 06:02:02 2007 (45CD1282)
f7aac000 f7aace80 DamewareMini DamewareMini.sys Mon Mar 17 00:11:51 2008 (47DD69EF)

Unloaded modules:
f7005000 f7013000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
f7657000 f7660000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
f5ffd000 f6010000 i8042prt.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000
f6fc5000 f6fcf000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000A000
f6fd5000 f6fe0000 Fdc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000