Hallo alle zusammen,
ich habe seit einiger Zeit öfters blue_screens, da diese zugenommen haben, hab ich etwas gegoogelt und eine Analyse gemacht. Ich bin dann auf das Problem "memory_corruption" gestoßen. Leider sagt mir das ganze nicht soviel, kenn mich mit der ganzen Materie nicht aus.
Wäre für Ratschläge und Infos sehr dankbar.
ich habe seit einiger Zeit öfters blue_screens, da diese zugenommen haben, hab ich etwas gegoogelt und eine Analyse gemacht. Ich bin dann auf das Problem "memory_corruption" gestoßen. Leider sagt mir das ganze nicht soviel, kenn mich mit der ganzen Materie nicht aus.
Wäre für Ratschläge und Infos sehr dankbar.
Microsoft (R) Windows Debugger Version 6.11.0001.402 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\Minidump\Mini030809-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
WARNING: Whitespace at start of path element
WARNING: Whitespace at start of path element
WARNING: Whitespace at start of path element
Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: c:\windows\System32; c:\windows\system\System32; http://www.alexander.com/SymServe
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18145.amd64fre.vistasp1_gdr.080917-1612
Machine Name:
Kernel base = 0xfffff800`01c56000 PsLoadedModuleList = 0xfffff800`01e1bdb0
Debug session time: Sun Mar 8 21:59:58.452 2009 (GMT+1)
System Uptime: 0 days 0:00:53.215
Loading Kernel Symbols
...............................................................
................................................................
..............
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 4E, {99, 63434, 0, 674f5}
Probably caused by : memory_corruption ( nt!MiBadShareCount+4b )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc). If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 0000000000063434, page frame number
Arg3: 0000000000000000, current page state
Arg4: 00000000000674f5, 0
Debugging Details:
------------------
BUGCHECK_STR: 0x4E_99
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: firefox.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff80001d223bb to fffff80001cab350
STACK_TEXT:
fffffa60`03508e18 fffff800`01d223bb : 00000000`0000004e 00000000`00000099 00000000`00063434 00000000`00000000 : nt!KeBugCheckEx
fffffa60`03508e20 fffff800`01c9bb12 : 00000000`00002001 00000000`000418fb fffff880`07d971b8 fffff800`01d10a40 : nt!MiBadShareCount+0x4b
fffffa60`03508e60 fffff800`01f14208 : 00000000`00000001 fffff880`07d99b60 00000000`00002001 00000000`00080000 : nt!MiDeleteSegmentPages+0x372
fffffa60`03508ec0 fffff800`01cc3976 : 00000000`00000002 00000000`00000000 00000000`00000000 00000000`00000770 : nt!MiSegmentDelete+0x118
fffffa60`03508f10 fffff800`01cb21b3 : fffffa80`069fa600 fffffa80`069fa600 00000000`00000000 00000000`00000770 : nt!MiCheckControlArea+0x266
fffffa60`03508f50 fffff960`00295459 : fffff900`00000f11 fffff960`0016589d 00000000`00000000 00000000`00000000 : nt!ObfDereferenceObject+0x103
fffffa60`03508fe0 fffff960`00165fe4 : 00000000`00000f47 fffff900`c4200010 00000000`00000011 00000000`00000001 : win32k!vFreeKernelSection+0x41
fffffa60`03509020 fffff960`00145a2d : fffff900`c4200010 fffffa60`00000000 fffff900`c0085010 00000000`00000000 : win32k!SURFACE::bDeleteSurface+0x344
fffffa60`03509100 fffff960`001687f4 : 00000000`2f050f47 fffff900`c405b4d0 00000000`00000f47 00000000`7efdb000 : win32k!bDeleteSurface+0x31
fffffa60`03509130 fffff800`01caadf3 : fffffa80`0b5ba060 fffffa60`035091e0 00000000`06230820 fffff900`00000000 : win32k!NtGdiDeleteObjectApp+0x94
fffffa60`03509160 00000000`75bb3d09 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0014dad8 fffff800`01ca5170 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x75bb3d09
fffffa60`03509540 fffffa60`03509558 : fffffa60`03509c20 00000000`0014e118 fffffa80`00000018 fffffa60`0350a000 : nt!KiCallUserMode
fffffa60`03509548 fffffa60`03509c20 : 00000000`0014e118 fffffa80`00000018 fffffa60`0350a000 fffffa60`03509db0 : 0xfffffa60`03509558
fffffa60`03509550 00000000`0014e118 : fffffa80`00000018 fffffa60`0350a000 fffffa60`03509db0 00680022`003d0066 : 0xfffffa60`03509c20
fffffa60`03509558 fffffa80`00000018 : fffffa60`0350a000 fffffa60`03509db0 00680022`003d0066 003a0070`00740074 : 0x14e118
fffffa60`03509560 fffffa60`0350a000 : fffffa60`03509db0 00680022`003d0066 003a0070`00740074 40548000`20000000 : 0xfffffa80`00000018
fffffa60`03509568 fffffa60`03509db0 : 00680022`003d0066 003a0070`00740074 40548000`20000000 00000000`00000000 : 0xfffffa60`0350a000
fffffa60`03509570 00680022`003d0066 : 003a0070`00740074 40548000`20000000 00000000`00000000 00000000`00000000 : 0xfffffa60`03509db0
fffffa60`03509578 003a0070`00740074 : 40548000`20000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x680022`003d0066
fffffa60`03509580 40548000`20000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x3a0070`00740074
fffffa60`03509588 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x40548000`20000000
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiBadShareCount+4b
fffff800`01d223bb cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!MiBadShareCount+4b
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 48d1ba35
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x4E_99_nt!MiBadShareCount+4b
BUCKET_ID: X64_0x4E_99_nt!MiBadShareCount+4b
Followup: MachineOwner
---------
2: kd> imv
^ Syntax error in 'imv'
2: kd> lmv
start end module name
fffff800`01c10000 fffff800`01c56000 hal (deferred)
Mapped memory image file: c:\windows\System32\hal.dll
Image path: hal.dll
Image name: hal.dll
Timestamp: Sat Jan 19 08:55:25 2008 (4791ACED)
CheckSum: 00043CEE
ImageSize: 00046000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hal.dll
OriginalFilename: hal.dll
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Hardware Abstraction Layer DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`01c56000 fffff800`0216e000 nt (pdb symbols) c:\symbols\ntkrnlmp.pdb\149C563625CA49CEA2881CEDF5D55CCF2\ntkrnlmp.pdb
Loaded symbol image file: ntkrnlmp.exe
Mapped memory image file: c:\windows\System32\ntoskrnl.exe
Image path: ntkrnlmp.exe
Image name: ntkrnlmp.exe
Timestamp: Thu Sep 18 04:17:25 2008 (48D1BA35)
CheckSum: 0047E2D2
ImageSize: 00518000
File version: 6.0.6001.18145
Product version: 6.0.6001.18145
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntkrnlmp.exe
OriginalFilename: ntkrnlmp.exe
ProductVersion: 6.0.6001.18145
FileVersion: 6.0.6001.18145 (vistasp1_gdr.080917-1612)
FileDescription: NT Kernel & System
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff960`000a0000 fffff960`00351000 win32k (pdb symbols) c:\symbols\win32k.pdb\42BB19DFC615435E8ADEF3DBDDD06AC02\win32k.pdb
Loaded symbol image file: win32k.sys
Mapped memory image file: c:\windows\System32\win32k.sys
Image path: win32k.sys
Image name: win32k.sys
Timestamp: Thu Sep 18 04:27:53 2008 (48D1BCA9)
CheckSum: 002AAB81
ImageSize: 002B1000
File version: 6.0.6001.18145
Product version: 6.0.6001.18145
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: win32k.sys
OriginalFilename: win32k.sys
ProductVersion: 6.0.6001.18145
FileVersion: 6.0.6001.18145 (vistasp1_gdr.080917-1612)
FileDescription: Multi-User Win32 Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff960`004b0000 fffff960`004ba000 TSDDD (deferred)
Mapped memory image file: c:\windows\System32\TSDDD.dll
Image path: TSDDD.dll
Image name: TSDDD.dll
Timestamp: Sat Jan 19 07:42:04 2008 (47919BBC)
CheckSum: 00012267
ImageSize: 0000A000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: framebuf.dll
OriginalFilename: framebuf.dll
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Framebuffer Display Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff960`006a0000 fffff960`006b1000 cdd (deferred)
Mapped memory image file: c:\windows\System32\cdd.dll
Image path: cdd.dll
Image name: cdd.dll
Timestamp: Sat Aug 02 05:40:21 2008 (4893D725)
CheckSum: 0000E6EF
ImageSize: 00011000
File version: 6.0.6001.18114
Product version: 6.0.6001.18114
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cdd.dll
OriginalFilename: cdd.dll
ProductVersion: 6.0.6001.18114
FileVersion: 6.0.6001.18114 (vistasp1_gdr.080801-1507)
FileDescription: Canonical Display Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`0060f000 fffffa60`00619000 kdcom (deferred)
Mapped memory image file: c:\windows\System32\kdcom.dll
Image path: kdcom.dll
Image name: kdcom.dll
Timestamp: Sat Jan 19 08:58:25 2008 (4791ADA1)
CheckSum: 00010852
ImageSize: 0000A000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.A Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: kdcom.dll
OriginalFilename: kdcom.dll
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Kernel Debugger HW Extension DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00619000 fffffa60`00646000 mcupdate (deferred)
Image path: mcupdate.dll
Image name: mcupdate.dll
Timestamp: Sat Jan 19 08:56:17 2008 (4791AD21)
CheckSum: 0002BBE6
ImageSize: 0002D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffffa60`00646000 fffffa60`0065a000 PSHED (deferred)
Mapped memory image file: c:\windows\System32\PSHED.dll
Image path: PSHED.dll
Image name: PSHED.dll
Timestamp: Sat Jan 19 08:58:13 2008 (4791AD95)
CheckSum: 00011D76
ImageSize: 00014000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pshed.dll
OriginalFilename: pshed.dll
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Platform Specific Hardware Error Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`0065a000 fffffa60`006b7000 CLFS (deferred)
Mapped memory image file: c:\windows\System32\CLFS.SYS
Image path: CLFS.SYS
Image name: CLFS.SYS
Timestamp: Sat Jan 19 06:53:58 2008 (47919076)
CheckSum: 0006703C
ImageSize: 0005D000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: clfs.sys
OriginalFilename: Clfs.Sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Common Log File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`006b7000 fffffa60`00769000 CI (deferred)
Mapped memory image file: c:\windows\System32\CI.dll
Image path: CI.dll
Image name: CI.dll
Timestamp: Fri Feb 22 06:20:54 2008 (47BE5BB6)
CheckSum: 000612B8
ImageSize: 000B2000
File version: 6.0.6001.18023
Product version: 6.0.6001.18023
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ci.dll
OriginalFilename: ci.dll
ProductVersion: 6.0.6001.18023
FileVersion: 6.0.6001.18023 (vistasp1_gdr.080221-1537)
FileDescription: Code Integrity Module
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00769000 fffffa60`007c6000 storport (deferred)
Mapped memory image file: c:\windows\System32\drivers\Storport.sys
Image path: storport.sys
Image name: storport.sys
Timestamp: Sat Jan 19 07:29:09 2008 (479198B5)
CheckSum: 0002A26D
ImageSize: 0005D000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: storport.sys
OriginalFilename: storport.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Microsoft Storage Port Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`007c6000 fffffa60`007e8000 nvstor64 (deferred)
Mapped memory image file: c:\windows\System32\drivers\nvstor64.sys
Image path: nvstor64.sys
Image name: nvstor64.sys
Timestamp: Thu Aug 09 20:11:52 2007 (46BB58E8)
CheckSum: 0002B0E7
ImageSize: 00022000
File version: 5.10.2600.998
Product version: 5.10.2600.998
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: NVIDIA Corporation
ProductName: NVIDIA nForce(TM) SATA Driver
InternalName: NVIDIA nForce(TM) SATA Driver
OriginalFilename: nvstor.sys
ProductVersion: 5.10.2600.0998
FileVersion: 5.10.2600.0998 built by: WinDDK
FileDescription: NVIDIA® nForce(TM) Sata Performance Driver
LegalCopyright: Copyright(C) 2001-2007 NVIDIA Corporation
fffffa60`00804000 fffffa60`008de000 Wdf01000 (deferred)
Mapped memory image file: c:\windows\System32\drivers\Wdf01000.sys
Image path: Wdf01000.sys
Image name: Wdf01000.sys
Timestamp: Sat Jan 19 07:33:27 2008 (479199B7)
CheckSum: 000D946B
ImageSize: 000DA000
File version: 1.7.6001.0
Product version: 1.7.6001.0
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wdf01000.sys
OriginalFilename: wdf01000.sys
ProductVersion: 1.7.6001.0
FileVersion: 1.7.6001.0 (longhorn_rtm.080118-1840)
FileDescription: WDF Dynamic
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`008de000 fffffa60`008ec000 WDFLDR (deferred)
Mapped memory image file: c:\windows\System32\drivers\WdfLdr.sys
Image path: WDFLDR.SYS
Image name: WDFLDR.SYS
Timestamp: Sat Jan 19 07:32:33 2008 (47919981)
CheckSum: 00018BBD
ImageSize: 0000E000
File version: 1.7.6001.0
Product version: 1.7.6001.0
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wdfldr.sys
OriginalFilename: wdfldr.sys
ProductVersion: 1.7.6001.0
FileVersion: 1.7.6001.0 (longhorn_rtm.080118-1840)
FileDescription: WDFLDR
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`008ec000 fffffa60`00901000 partmgr (deferred)
Mapped memory image file: c:\windows\System32\drivers\partmgr.sys
Image path: partmgr.sys
Image name: partmgr.sys
Timestamp: Sat Jan 19 07:29:14 2008 (479198BA)
CheckSum: 0001E741
ImageSize: 00015000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: partmgr.sys
OriginalFilename: partmgr.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Partition Management Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00901000 fffffa60`00915000 volmgr (deferred)
Mapped memory image file: c:\windows\System32\drivers\volmgr.sys
Image path: volmgr.sys
Image name: volmgr.sys
Timestamp: Sat Jan 19 07:29:12 2008 (479198B8)
CheckSum: 0001A150
ImageSize: 00014000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volmgr.sys
OriginalFilename: volmgr.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Volume Manager Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00915000 fffffa60`0097b000 volmgrx (deferred)
Mapped memory image file: c:\windows\System32\drivers\volmgrx.sys
Image path: volmgrx.sys
Image name: volmgrx.sys
Timestamp: Sat Jan 19 07:29:45 2008 (479198D9)
CheckSum: 000736D8
ImageSize: 00066000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volmgrx.sys
OriginalFilename: volmgrx.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Volume Manager Extension Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`0097b000 fffffa60`00982000 pciide (deferred)
Mapped memory image file: c:\windows\System32\drivers\pciide.sys
Image path: pciide.sys
Image name: pciide.sys
Timestamp: Thu Nov 02 10:38:14 2006 (4549BC86)
CheckSum: 00004CBC
ImageSize: 00007000
File version: 6.0.6000.16386
Product version: 6.0.6000.16386
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pciide.sys
OriginalFilename: pciide.sys
ProductVersion: 6.0.6000.16386
FileVersion: 6.0.6000.16386 (vista_rtm.061101-2205)
FileDescription: Generic PCI IDE Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00982000 fffffa60`00992000 PCIIDEX (deferred)
Mapped memory image file: c:\windows\System32\drivers\pciidex.sys
Image path: PCIIDEX.SYS
Image name: PCIIDEX.SYS
Timestamp: Sat Jan 19 07:28:53 2008 (479198A5)
CheckSum: 000105D1
ImageSize: 00010000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pciidex.sys
OriginalFilename: pciidex.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: PCI IDE Bus Driver Extension
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00992000 fffffa60`009a5000 mountmgr (deferred)
Mapped memory image file: c:\windows\System32\drivers\mountmgr.sys
Image path: mountmgr.sys
Image name: mountmgr.sys
Timestamp: Sat Jan 19 07:28:01 2008 (47919871)
CheckSum: 000157AE
ImageSize: 00013000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mountmgr.sys
OriginalFilename: mountmgr.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Mount Point Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`009a5000 fffffa60`009ad000 atapi (deferred)
Mapped memory image file: c:\windows\System32\drivers\atapi.sys
Image path: atapi.sys
Image name: atapi.sys
Timestamp: Sat Jan 19 07:28:49 2008 (479198A1)
CheckSum: 0000905D
ImageSize: 00008000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: atapi.sys
OriginalFilename: atapi.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: ATAPI IDE Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`009ad000 fffffa60`009d1000 ataport (deferred)
Mapped memory image file: c:\windows\System32\drivers\ataport.sys
Image path: ataport.SYS
Image name: ataport.SYS
Timestamp: Sat Jan 19 07:28:52 2008 (479198A4)
CheckSum: 0002D9AD
ImageSize: 00024000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ataport.sys
OriginalFilename: ataport.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: ATAPI Driver Extension
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`009d1000 fffffa60`009e1000 nvstor (deferred)
Mapped memory image file: c:\windows\System32\drivers\nvstor.sys
Image path: nvstor.sys
Image name: nvstor.sys
Timestamp: Wed Jun 06 22:34:00 2007 (46671A38)
CheckSum: 00010EFD
ImageSize: 00010000
File version: 5.10.2600.833
Product version: 5.10.2600.833
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: NVIDIA Corporation
ProductName: NVIDIA nForce(TM) SATA Driver
InternalName: NVIDIA nForce(TM) SATA Driver
OriginalFilename: nvstor.sys
ProductVersion: 5.10.2600.0833
FileVersion: 5.10.2600.0833 (NT.070222-1720)
FileDescription: NVIDIA® nForce(TM) Sata Performance Driver
LegalCopyright: Copyright(C) 2001-2007 NVIDIA Corporation
fffffa60`009e1000 fffffa60`009f4000 intelppm (deferred)
Mapped memory image file: c:\windows\System32\drivers\intelppm.sys
Image path: intelppm.sys
Image name: intelppm.sys
Timestamp: Sat Jan 19 06:52:45 2008 (4791902D)
CheckSum: 0000BEEB
ImageSize: 00013000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: intelppm.sys
OriginalFilename: intelppm.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Processor Device Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00a04000 fffffa60`00b38000 spnv (deferred)
Image path: spnv.sys
Image name: spnv.sys
Timestamp: Thu Mar 06 01:34:27 2008 (47CF3C13)
CheckSum: 000DA3DE
ImageSize: 00134000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffffa60`00b38000 fffffa60`00b41000 WMILIB (deferred)
Mapped memory image file: c:\windows\System32\drivers\wmilib.sys
Image path: WMILIB.SYS
Image name: WMILIB.SYS
Timestamp: Sat Jan 19 07:33:45 2008 (479199C9)
CheckSum: 0000994C
ImageSize: 00009000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WmiLib.sys
OriginalFilename: WmiLib.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: WMILIB WMI support library Dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00b41000 fffffa60`00b6f000 SCSIPORT (deferred)
Mapped memory image file: c:\windows\System32\drivers\scsiport.sys
Image path: SCSIPORT.SYS
Image name: SCSIPORT.SYS
Timestamp: Sat Jan 19 07:28:52 2008 (479198A4)
CheckSum: 0002E61E
ImageSize: 0002E000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: scsiport.sys
OriginalFilename: scsiport.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: SCSI Port Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00b6f000 fffffa60`00bc5000 acpi (deferred)
Mapped memory image file: c:\windows\System32\drivers\acpi.sys
Image path: acpi.sys
Image name: acpi.sys
Timestamp: Sat Jan 19 07:02:45 2008 (47919285)
CheckSum: 00058740
ImageSize: 00056000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ACPI.sys
OriginalFilename: ACPI.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: ACPI Driver for NT
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00bc5000 fffffa60`00bcf000 msisadrv (deferred)
Mapped memory image file: c:\windows\System32\drivers\msisadrv.sys
Image path: msisadrv.sys
Image name: msisadrv.sys
Timestamp: Sat Jan 19 07:02:50 2008 (4791928A)
CheckSum: 0000AD81
ImageSize: 0000A000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: msisadrv.sys
OriginalFilename: msisadrv.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: ISA Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00bcf000 fffffa60`00bff000 pci (deferred)
Mapped memory image file: c:\windows\System32\drivers\pci.sys
Image path: pci.sys
Image name: pci.sys
Timestamp: Sat Jan 19 07:02:57 2008 (47919291)
CheckSum: 0002E1DA
ImageSize: 00030000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pci.sys
OriginalFilename: pci.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: NT Plug and Play PCI Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00c0a000 fffffa60`00c50000 fltmgr (deferred)
Mapped memory image file: c:\windows\System32\drivers\fltMgr.sys
Image path: fltmgr.sys
Image name: fltmgr.sys
Timestamp: Sat Jan 19 06:54:10 2008 (47919082)
CheckSum: 00052A4F
ImageSize: 00046000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fltMgr.sys
OriginalFilename: fltMgr.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Microsoft Filesystem Filter Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00c50000 fffffa60`00c64000 fileinfo (deferred)
Mapped memory image file: c:\windows\System32\drivers\fileinfo.sys
Image path: fileinfo.sys
Image name: fileinfo.sys
Timestamp: Sat Jan 19 07:05:23 2008 (47919323)
CheckSum: 0002031C
ImageSize: 00014000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: FileInfo.sys
OriginalFilename: FileInfo.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: FileInfo Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00c64000 fffffa60`00ce9000 ksecdd (deferred)
Mapped memory image file: c:\windows\System32\drivers\ksecdd.sys
Image path: ksecdd.sys
Image name: ksecdd.sys
Timestamp: Sat Jan 19 07:16:38 2008 (479195C6)
CheckSum: 0008C18C
ImageSize: 00085000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ksecdd.sys
OriginalFilename: ksecdd.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Kernel Security Support Provider Interface
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00ce9000 fffffa60`00d39000 msrpc (deferred)
Mapped memory image file: c:\windows\System32\drivers\msrpc.sys
Image path: msrpc.sys
Image name: msrpc.sys
Timestamp: Sat Jan 19 07:27:01 2008 (47919835)
CheckSum: 000568B6
ImageSize: 00050000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: krpcdd.sys
OriginalFilename: krpcdd.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Kernel Remote Procedure Call Provider
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00d39000 fffffa60`00d91000 NETIO (deferred)
Mapped memory image file: c:\windows\System32\drivers\netio.sys
Image path: NETIO.SYS
Image name: NETIO.SYS
Timestamp: Sat Jan 19 07:37:27 2008 (47919AA7)
CheckSum: 00062189
ImageSize: 00058000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: netio.sys
OriginalFilename: netio.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Network I/O Subsystem
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00d91000 fffffa60`00dbd000 CLASSPNP (deferred)
Mapped memory image file: c:\windows\System32\drivers\Classpnp.sys
Image path: CLASSPNP.SYS
Image name: CLASSPNP.SYS
Timestamp: Sat Jan 19 07:28:53 2008 (479198A5)
CheckSum: 0003398B
ImageSize: 0002C000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Classpnp.sys
OriginalFilename: Classpnp.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: SCSI Class System Dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00df2000 fffffa60`00dff000 fdc (deferred)
Mapped memory image file: c:\windows\System32\drivers\fdc.sys
Image path: fdc.sys
Image name: fdc.sys
Timestamp: Sat Jan 19 07:28:45 2008 (4791989D)
CheckSum: 00010F0C
ImageSize: 0000D000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fdc.sys
OriginalFilename: fdc.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Floppy Disk Controller Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00e09000 fffffa60`00fcc000 ndis (deferred)
Mapped memory image file: c:\windows\System32\drivers\ndis.sys
Image path: ndis.sys
Image name: ndis.sys
Timestamp: Sat Jan 19 07:37:13 2008 (47919A99)
CheckSum: 000BF30F
ImageSize: 001C3000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDIS.SYS
OriginalFilename: NDIS.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: NDIS 6.0 wrapper driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00fcc000 fffffa60`00ff5000 fvevol (deferred)
Mapped memory image file: c:\windows\System32\drivers\fvevol.sys
Image path: fvevol.sys
Image name: fvevol.sys
Timestamp: Sat Jan 19 06:52:29 2008 (4791901D)
CheckSum: 00030106
ImageSize: 00029000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: FVEVOL.SYS
OriginalFilename: FVEVOL.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: BitLocker Drive Encryption Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`00ff5000 fffffa60`00ffe000 tunmp (deferred)
Mapped memory image file: c:\windows\System32\drivers\TUNMP.SYS
Image path: tunmp.sys
Image name: tunmp.sys
Timestamp: Sat Jan 19 07:36:30 2008 (47919A6E)
CheckSum: 0000DBCB
ImageSize: 00009000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tunmp.sys
OriginalFilename: tunmp.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Microsoft Tunnel Interface Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`01000000 fffffa60`0100c000 tunnel (deferred)
Mapped memory image file: c:\windows\System32\drivers\tunnel.sys
Image path: tunnel.sys
Image name: tunnel.sys
Timestamp: Sat Jan 19 07:36:44 2008 (47919A7C)
CheckSum: 00009336
ImageSize: 0000C000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tunnel.sys
OriginalFilename: tunnel.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Microsoft Tunnel Interface Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`0100f000 fffffa60`01183000 tcpip (deferred)
Mapped memory image file: c:\windows\System32\drivers\tcpip.sys
Image path: tcpip.sys
Image name: tcpip.sys
Timestamp: Sat Apr 26 08:33:23 2008 (4812CCB3)
CheckSum: 0015ED82
ImageSize: 00174000
File version: 6.0.6001.18063
Product version: 6.0.6001.18063
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tcpip.sys
OriginalFilename: tcpip.sys
ProductVersion: 6.0.6001.18063
FileVersion: 6.0.6001.18063 (vistasp1_gdr.080425-1930)
FileDescription: TCP/IP Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`01183000 fffffa60`011af000 fwpkclnt (deferred)
Mapped memory image file: c:\windows\System32\drivers\FWPKCLNT.SYS
Image path: fwpkclnt.sys
Image name: fwpkclnt.sys
Timestamp: Sat Jan 19 07:36:43 2008 (47919A7B)
CheckSum: 0002AB85
ImageSize: 0002C000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fwpkclnt.sys
OriginalFilename: fwpkclnt.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: FWP/IPsec Kernel-Mode API
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`011af000 fffffa60`011db000 ecache (deferred)
Mapped memory image file: c:\windows\System32\drivers\ecache.sys
Image path: ecache.sys
Image name: ecache.sys
Timestamp: Sat Jan 19 07:30:39 2008 (4791990F)
CheckSum: 0002BD24
ImageSize: 0002C000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ecache.sys
OriginalFilename: ecache.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Special Memory Device Cache
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`011db000 fffffa60`011e5000 crcdisk (deferred)
Mapped memory image file: c:\windows\System32\drivers\crcdisk.sys
Image path: crcdisk.sys
Image name: crcdisk.sys
Timestamp: Sat Jan 19 07:30:12 2008 (479198F4)
CheckSum: 0001435C
ImageSize: 0000A000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: crcdisk.sys
OriginalFilename: crcdisk.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Disk Block Verification Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`01204000 fffffa60`01388000 Ntfs (deferred)
Mapped memory image file: c:\windows\System32\drivers\ntfs.sys
Image path: Ntfs.sys
Image name: Ntfs.sys
Timestamp: Sat Jan 19 06:55:29 2008 (479190D1)
CheckSum: 001871E2
ImageSize: 00184000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntfs.sys
OriginalFilename: ntfs.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: NT File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`01388000 fffffa60`013cc000 volsnap (deferred)
Mapped memory image file: c:\windows\System32\drivers\volsnap.sys
Image path: volsnap.sys
Image name: volsnap.sys
Timestamp: Sat Jan 19 07:29:47 2008 (479198DB)
CheckSum: 0004D804
ImageSize: 00044000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volsnap.sys
OriginalFilename: volsnap.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Volume Shadow Copy Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`013cc000 fffffa60`013d4000 spldr (deferred)
Mapped memory image file: c:\windows\System32\drivers\spldr.sys
Image path: spldr.sys
Image name: spldr.sys
Timestamp: Fri Jun 22 02:57:56 2007 (467B1E94)
CheckSum: 0000FB4D
ImageSize: 00008000
File version: 6.0.6001.16606
Product version: 6.0.6001.16606
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: spldr.sys
OriginalFilename: spldr.sys
ProductVersion: 6.0.6001.16606
FileVersion: 6.0.6001.16606 (lh_security(sepbld-s).070621-1658)
FileDescription: loader for security processor
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`013d4000 fffffa60`013e6000 mup (deferred)
Mapped memory image file: c:\windows\System32\drivers\mup.sys
Image path: mup.sys
Image name: mup.sys
Timestamp: Sat Jan 19 06:54:18 2008 (4791908A)
CheckSum: 0001BB47
ImageSize: 00012000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MUP.SYS
OriginalFilename: MUP.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Multiple UNC Provider driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`013e6000 fffffa60`013fa000 disk (deferred)
Mapped memory image file: c:\windows\System32\drivers\disk.sys
Image path: disk.sys
Image name: disk.sys
Timestamp: Sat Jan 19 07:29:02 2008 (479198AE)
CheckSum: 0001E740
ImageSize: 00014000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: disk.sys
OriginalFilename: disk.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: PnP Disk Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`03a02000 fffffa60`0430a300 nvlddmkm (deferred)
Mapped memory image file: c:\windows\System32\drivers\nvlddmkm.sys
Image path: nvlddmkm.sys
Image name: nvlddmkm.sys
Timestamp: Wed Sep 17 20:18:49 2008 (48D14A09)
CheckSum: 0090B39C
ImageSize: 00908300
File version: 7.15.11.7813
Product version: 7.15.11.7813
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: NVIDIA Corporation
ProductName: NVIDIA Compatible Windows Vista Kernel Mode Driver, Version 178.13
InternalName: nvlddmkm.sys, NV_LDDM:6000, NV_LDDM_DDK_BUILD:61101
OriginalFilename: nvlddmkm.sys
ProductVersion: 7.15.11.7813
FileVersion: 7.15.11.7813
FileDescription: NVIDIA Compatible Windows Vista Kernel Mode Driver, Version 178.13
LegalCopyright: (C) NVIDIA Corporation. All rights reserved.
fffffa60`0430b000 fffffa60`043ea000 dxgkrnl (deferred)
Mapped memory image file: c:\windows\System32\drivers\dxgkrnl.sys
Image path: dxgkrnl.sys
Image name: dxgkrnl.sys
Timestamp: Sat Aug 02 03:19:59 2008 (4893B63F)
CheckSum: 000E5D5E
ImageSize: 000DF000
File version: 6.0.6001.18114
Product version: 6.0.6001.18114
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dxgkrnl.sys
OriginalFilename: dxgkrnl.sys
ProductVersion: 6.0.6001.18114
FileVersion: 6.0.6001.18114 (vistasp1_gdr.080801-1507)
FileDescription: DirectX Graphics Kernel
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`043ea000 fffffa60`043f9000 watchdog (deferred)
Mapped memory image file: c:\windows\System32\drivers\watchdog.sys
Image path: watchdog.sys
Image name: watchdog.sys
Timestamp: Sat Jan 19 07:07:23 2008 (4791939B)
CheckSum: 0000BD94
ImageSize: 0000F000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: watchdog.sys
OriginalFilename: watchdog.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Watchdog Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`0440b000 fffffa60`04428000 serial (deferred)
Mapped memory image file: c:\windows\System32\drivers\serial.sys
Image path: serial.sys
Image name: serial.sys
Timestamp: Sat Jan 19 07:28:41 2008 (47919899)
CheckSum: 0001A92E
ImageSize: 0001D000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: serial.sys
OriginalFilename: serial.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Serial Device Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04428000 fffffa60`04434000 serenum (deferred)
Mapped memory image file: c:\windows\System32\drivers\serenum.sys
Image path: serenum.sys
Image name: serenum.sys
Timestamp: Sat Jan 19 07:28:36 2008 (47919894)
CheckSum: 000156DF
ImageSize: 0000C000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: serenum.sys
OriginalFilename: serenum.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Serial Port Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04434000 fffffa60`04450000 parport (deferred)
Mapped memory image file: c:\windows\System32\drivers\parport.sys
Image path: parport.sys
Image name: parport.sys
Timestamp: Sat Jan 19 07:28:36 2008 (47919894)
CheckSum: 00024705
ImageSize: 0001C000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: parport.sys
OriginalFilename: parport.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Parallel Port Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04450000 fffffa60`0445b000 usbohci (deferred)
Mapped memory image file: c:\windows\System32\drivers\usbohci.sys
Image path: usbohci.sys
Image name: usbohci.sys
Timestamp: Sat Jan 19 07:33:56 2008 (479199D4)
CheckSum: 00014EDD
ImageSize: 0000B000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: USBOHCI.sys
OriginalFilename: USBOHCI.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: OHCI USB Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`0445b000 fffffa60`044a1000 USBPORT (deferred)
Mapped memory image file: c:\windows\System32\drivers\usbport.sys
Image path: USBPORT.SYS
Image name: USBPORT.SYS
Timestamp: Sat Jan 19 07:34:00 2008 (479199D8)
CheckSum: 00047A81
ImageSize: 00046000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbport.sys
OriginalFilename: usbport.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: USB 1.1 & 2.0 Port Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`044a1000 fffffa60`044b2000 usbehci (deferred)
Mapped memory image file: c:\windows\System32\drivers\usbehci.sys
Image path: usbehci.sys
Image name: usbehci.sys
Timestamp: Sat Jan 19 07:33:57 2008 (479199D5)
CheckSum: 00012DBE
ImageSize: 00011000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: USBEHCI.sys
OriginalFilename: USBEHCI.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: EHCI eUSB Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`044b2000 fffffa60`044ce000 cdrom (deferred)
Mapped memory image file: c:\windows\System32\drivers\cdrom.sys
Image path: cdrom.sys
Image name: cdrom.sys
Timestamp: Sat Jan 19 07:29:04 2008 (479198B0)
CheckSum: 00021C5B
ImageSize: 0001C000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cdrom.sys
OriginalFilename: cdrom.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: SCSI CD-ROM Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`044ce000 fffffa60`044dfa00 ohci1394 (deferred)
Mapped memory image file: c:\windows\System32\drivers\ohci1394.sys
Image path: ohci1394.sys
Image name: ohci1394.sys
Timestamp: Sat Jan 19 07:34:08 2008 (479199E0)
CheckSum: 0001D7F3
ImageSize: 00011A00
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ohci1394.sys
OriginalFilename: ohci1394.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: 1394 OpenHCI Port Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`044e0000 fffffa60`044eff00 1394BUS (deferred)
Mapped memory image file: c:\windows\System32\drivers\1394bus.sys
Image path: 1394BUS.SYS
Image name: 1394BUS.SYS
Timestamp: Sat Jan 19 07:34:04 2008 (479199DC)
CheckSum: 000129D0
ImageSize: 0000FF00
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: 1394bus.sys
OriginalFilename: 1394bus.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: 1394 Bus Device Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`044f0000 fffffa60`04503000 HDAudBus (deferred)
Mapped memory image file: c:\windows\System32\drivers\hdaudbus.sys
Image path: HDAudBus.sys
Image name: HDAudBus.sys
Timestamp: Wed Nov 28 00:24:06 2007 (474CA716)
CheckSum: 00016CCD
ImageSize: 00013000
File version: 6.0.6001.17036
Product version: 6.0.6001.17036
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hdaudbus.sys
OriginalFilename: hdaudbus.sys
ProductVersion: 6.0.6001.17036
FileVersion: 6.0.6001.17036 (LH_Client.071120-1644)
FileDescription: High Definition Audio Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04503000 fffffa60`04526000 rasl2tp (deferred)
Mapped memory image file: c:\windows\System32\drivers\rasl2tp.sys
Image path: rasl2tp.sys
Image name: rasl2tp.sys
Timestamp: Sat Jan 19 07:37:33 2008 (47919AAD)
CheckSum: 00024247
ImageSize: 00023000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rasl2tp.sys
OriginalFilename: rasl2tp.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: RAS L2TP mini-port/call-manager driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04526000 fffffa60`04532000 ndistapi (deferred)
Mapped memory image file: c:\windows\System32\drivers\ndistapi.sys
Image path: ndistapi.sys
Image name: ndistapi.sys
Timestamp: Sat Jan 19 07:37:22 2008 (47919AA2)
CheckSum: 0000CA62
ImageSize: 0000C000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISTAPI.SYS
OriginalFilename: NDISTAPI.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: NDIS 3.0 connection wrapper driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04532000 fffffa60`04563000 ndiswan (deferred)
Mapped memory image file: c:\windows\System32\drivers\ndiswan.sys
Image path: ndiswan.sys
Image name: ndiswan.sys
Timestamp: Sat Jan 19 07:37:33 2008 (47919AAD)
CheckSum: 00032DAB
ImageSize: 00031000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISWAN.SYS
OriginalFilename: NDISWAN.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: MS PPP Framing Driver (Strong Encryption)
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04563000 fffffa60`04573000 raspppoe (deferred)
Mapped memory image file: c:\windows\System32\drivers\raspppoe.sys
Image path: raspppoe.sys
Image name: raspppoe.sys
Timestamp: Sat Jan 19 07:37:30 2008 (47919AAA)
CheckSum: 00011662
ImageSize: 00010000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: raspppoe.sys
OriginalFilename: raspppoe.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: RAS PPPoE mini-port/call-manager driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04573000 fffffa60`04591000 raspptp (deferred)
Mapped memory image file: c:\windows\System32\drivers\raspptp.sys
Image path: raspptp.sys
Image name: raspptp.sys
Timestamp: Sat Jan 19 07:37:34 2008 (47919AAE)
CheckSum: 0001E8BF
ImageSize: 0001E000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RASPPTP.SYS
OriginalFilename: RASPPTP.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Peer-to-Peer Tunneling Protocol
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04591000 fffffa60`045a9000 rassstp (deferred)
Mapped memory image file: c:\windows\System32\drivers\rassstp.sys
Image path: rassstp.sys
Image name: rassstp.sys
Timestamp: Sat Jan 19 07:37:42 2008 (47919AB6)
CheckSum: 00021F4E
ImageSize: 00018000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rassstp.sys
OriginalFilename: rassstp.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: RAS SSTP Miniport Call Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`045a9000 fffffa60`045e4000 portcls (deferred)
Mapped memory image file: c:\windows\System32\drivers\portcls.sys
Image path: portcls.sys
Image name: portcls.sys
Timestamp: Sat Jan 19 07:33:58 2008 (479199D6)
CheckSum: 0004398B
ImageSize: 0003B000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: portcls.sys
OriginalFilename: portcls.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Port Class (Class Driver for Port/Miniport Devices)
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`045e4000 fffffa60`045ee000 Fs_Rec (deferred)
Mapped memory image file: c:\windows\System32\drivers\fs_rec.sys
Image path: Fs_Rec.SYS
Image name: Fs_Rec.SYS
Timestamp: Sat Jan 19 06:53:41 2008 (47919065)
CheckSum: 0000F90C
ImageSize: 0000A000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fs_rec.sys
OriginalFilename: fs_rec.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: File System Recognizer Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`045ee000 fffffa60`045fc000 vga (deferred)
Mapped memory image file: c:\windows\System32\drivers\vga.sys
Image path: vga.sys
Image name: vga.sys
Timestamp: Sat Jan 19 07:32:21 2008 (47919975)
CheckSum: 00007D47
ImageSize: 0000E000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vga.sys
OriginalFilename: vga.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: VGA/Super VGA Video Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04606000 fffffa60`0476ce80 nvmfdx64 (deferred)
Mapped memory image file: c:\windows\System32\drivers\nvmfdx64.sys
Image path: nvmfdx64.sys
Image name: nvmfdx64.sys
Timestamp: Sat Oct 13 01:16:04 2007 (47100034)
CheckSum: 00173641
ImageSize: 00166E80
File version: 1.0.1.6767
Product version: 1.0.1.6767
File flags: 0 (Mask 3F)
File OS: 4 Unknown Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04e2
CompanyName: NVIDIA Corporation
ProductName: NVIDIA Networking Driver
InternalName: nvmfdx64
OriginalFilename: nvmfdx64.SYS
ProductVersion: 1.00.01.06767
FileVersion: 1.00.01.06767
FileDescription: NVIDIA MCP Networking Function Driver.
LegalCopyright: Copyright © 2001-2007 NVIDIA Corporation
fffffa60`0476d000 fffffa60`047b1000 a8b55fqn (deferred)
Image path: a8b55fqn.SYS
Image name: a8b55fqn.SYS
Timestamp: Wed Dec 03 19:18:47 2008 (4936CD87)
CheckSum: 0004E379
ImageSize: 00044000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffffa60`047b1000 fffffa60`047b9000 ASACPI (deferred)
Mapped memory image file: c:\windows\System32\drivers\ASACPI.sys
Image path: ASACPI.sys
Image name: ASACPI.sys
Timestamp: Tue Oct 31 03:09:12 2006 (4546B048)
CheckSum: 000089FB
ImageSize: 00008000
File version: 1043.4.0.0
Product version: 1043.4.0.0
File flags: 28 (Mask 3F) Private Special
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName:
ProductName: ATK0110 ACPI Utility
InternalName: ATK0110
OriginalFilename: ATK0110
ProductVersion: 1043, 4, 0, 0
FileVersion: 1043, 4, 0, 0
PrivateBuild: 1043, 4, 0, 0
SpecialBuild: 1043, 4, 0, 0
FileDescription: ATK0110 ACPI Utility
LegalCopyright: ATK0110 ACPI Utility
LegalTrademarks: ATK0110 ACPI Utility
Comments: ATK0110 ACPI Utility
fffffa60`047b9000 fffffa60`047f1000 msiscsi (deferred)
Mapped memory image file: c:\windows\System32\drivers\msiscsi.sys
Image path: msiscsi.sys
Image name: msiscsi.sys
Timestamp: Sat Jan 19 07:30:31 2008 (47919907)
CheckSum: 00037F21
ImageSize: 00038000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: iSCSI Version : Min - 0, Max - 0
OriginalFilename: msiscsi.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Microsoft iSCSI Initiator Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`047f1000 fffffa60`047fe000 TDI (deferred)
Mapped memory image file: c:\windows\System32\drivers\tdi.sys
Image path: TDI.SYS
Image name: TDI.SYS
Timestamp: Sat Jan 19 07:38:11 2008 (47919AD3)
CheckSum: 00011EE5
ImageSize: 0000D000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tdi.sys
OriginalFilename: tdi.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: TDI Wrapper
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04800000 fffffa60`04807b80 HIDPARSE (deferred)
Mapped memory image file: c:\windows\System32\drivers\hidparse.sys
Image path: HIDPARSE.SYS
Image name: HIDPARSE.SYS
Timestamp: Sat Jan 19 07:33:51 2008 (479199CF)
CheckSum: 0001084B
ImageSize: 00007B80
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hidparse.sys
OriginalFilename: hidparse.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Hid Parsing Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04808000 fffffa60`048a2000 rdpdr (deferred)
Mapped memory image file: c:\windows\System32\drivers\rdpdr.sys
Image path: rdpdr.sys
Image name: rdpdr.sys
Timestamp: Sat Jan 19 07:43:38 2008 (47919C1A)
CheckSum: 0005CA26
ImageSize: 0009A000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RDPDR.SYS
OriginalFilename: RDPDR.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Microsoft RDP Device redirector
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`048a2000 fffffa60`048b4000 termdd (deferred)
Mapped memory image file: c:\windows\System32\drivers\termdd.sys
Image path: termdd.sys
Image name: termdd.sys
Timestamp: Sat Jan 19 07:42:03 2008 (47919BBB)
CheckSum: 00017FC1
ImageSize: 00012000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: termdd.sys
OriginalFilename: termdd.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Terminal Server Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`048b4000 fffffa60`048c2000 kbdclass (deferred)
Mapped memory image file: c:\windows\System32\drivers\kbdclass.sys
Image path: kbdclass.sys
Image name: kbdclass.sys
Timestamp: Sat Jan 19 07:28:05 2008 (47919875)
CheckSum: 0000AF5D
ImageSize: 0000E000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: kbdclass.sys
OriginalFilename: kbdclass.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Keyboard Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`048c2000 fffffa60`048ce000 mouclass (deferred)
Mapped memory image file: c:\windows\System32\drivers\mouclass.sys
Image path: mouclass.sys
Image name: mouclass.sys
Timestamp: Sat Jan 19 07:28:05 2008 (47919875)
CheckSum: 00017BB4
ImageSize: 0000C000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mouclass.sys
OriginalFilename: mouclass.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Mouse Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`048ce000 fffffa60`048cf480 swenum (deferred)
Mapped memory image file: c:\windows\System32\drivers\swenum.sys
Image path: swenum.sys
Image name: swenum.sys
Timestamp: Thu Nov 02 10:37:33 2006 (4549BC5D)
CheckSum: 0000447A
ImageSize: 00001480
File version: 6.0.6000.16386
Product version: 6.0.6000.16386
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: swenum.sys
OriginalFilename: swenum.sys
ProductVersion: 6.0.6000.16386
FileVersion: 6.0.6000.16386 (vista_rtm.061101-2205)
FileDescription: Plug and Play Software Device Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`048d0000 fffffa60`04904000 ks (deferred)
Mapped memory image file: c:\windows\System32\drivers\ks.sys
Image path: ks.sys
Image name: ks.sys
Timestamp: Sat Jan 19 07:28:24 2008 (47919888)
CheckSum: 0003A13C
ImageSize: 00034000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ks.sys
OriginalFilename: ks.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Kernel CSA Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04904000 fffffa60`0490f000 mssmbios (deferred)
Mapped memory image file: c:\windows\System32\drivers\mssmbios.sys
Image path: mssmbios.sys
Image name: mssmbios.sys
Timestamp: Sat Jan 19 07:02:54 2008 (4791928E)
CheckSum: 0000EECB
ImageSize: 0000B000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: smbios.sys
OriginalFilename: smbios.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: System Management BIOS Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`0490f000 fffffa60`0491f000 umbus (deferred)
Mapped memory image file: c:\windows\System32\drivers\umbus.sys
Image path: umbus.sys
Image name: umbus.sys
Timestamp: Sat Jan 19 07:34:16 2008 (479199E8)
CheckSum: 0001333F
ImageSize: 00010000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: umbus.sys
OriginalFilename: umbus.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: User-Mode Bus Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`0491f000 fffffa60`0492a000 flpydisk (deferred)
Mapped memory image file: c:\windows\System32\drivers\flpydisk.sys
Image path: flpydisk.sys
Image name: flpydisk.sys
Timestamp: Sat Jan 19 07:28:45 2008 (4791989D)
CheckSum: 0001588D
ImageSize: 0000B000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: floppy.sys
OriginalFilename: floppy.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Floppy Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`0492a000 fffffa60`04971000 usbhub (deferred)
Mapped memory image file: c:\windows\System32\drivers\usbhub.sys
Image path: usbhub.sys
Image name: usbhub.sys
Timestamp: Sat Jan 19 07:34:13 2008 (479199E5)
CheckSum: 00043573
ImageSize: 00047000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbhub.sys
OriginalFilename: usbhub.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Default Hub Driver for USB
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04971000 fffffa60`04985000 NDProxy (deferred)
Mapped memory image file: c:\windows\System32\drivers\ndproxy.sys
Image path: NDProxy.SYS
Image name: NDProxy.SYS
Timestamp: Sat Jan 19 07:37:26 2008 (47919AA6)
CheckSum: 0001366B
ImageSize: 00014000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ndproxy.sys
OriginalFilename: ndproxy.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: NDIS Proxy
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04985000 fffffa60`049ce000 HdAudio (deferred)
Mapped memory image file: c:\windows\System32\drivers\HdAudio.sys
Image path: HdAudio.sys
Image name: HdAudio.sys
Timestamp: Thu Nov 02 02:48:10 2006 (45494E5A)
CheckSum: 0004D075
ImageSize: 00049000
File version: 6.0.5840.16387
Product version: 6.0.5840.16387
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: HDAudio.sys
OriginalFilename: HDAudio.sys
ProductVersion: 6.0.5840.16387
FileVersion: 6.0.5840.16387 (vbl_media_core.060510-1016)
FileDescription: High Definition Audio Function Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`049ce000 fffffa60`049f1000 drmk (deferred)
Mapped memory image file: c:\windows\System32\drivers\drmk.sys
Image path: drmk.sys
Image name: drmk.sys
Timestamp: Sat Jan 19 08:20:04 2008 (4791A4A4)
CheckSum: 00022D56
ImageSize: 00023000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: drmk.sys
OriginalFilename: drmk.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Microsoft Kernel DRM Descrambler Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`049f1000 fffffa60`049f6180 ksthunk (deferred)
Mapped memory image file: c:\windows\System32\drivers\ksthunk.sys
Image path: ksthunk.sys
Image name: ksthunk.sys
Timestamp: Sat Jan 19 07:28:14 2008 (4791987E)
CheckSum: 0000A913
ImageSize: 00005180
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ksthunk.sys
OriginalFilename: ksthunk.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Kernel Streaming WOW Thunk Service
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`049f7000 fffffa60`04a00000 Null (deferred)
Mapped memory image file: c:\windows\System32\drivers\null.sys
Image path: Null.SYS
Image name: Null.SYS
Timestamp: Thu Nov 02 10:37:15 2006 (4549BC4B)
CheckSum: 0000B49D
ImageSize: 00009000
File version: 6.0.6000.16386
Product version: 6.0.6000.16386
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: null.sys
OriginalFilename: null.sys
ProductVersion: 6.0.6000.16386
FileVersion: 6.0.6000.16386 (vista_rtm.061101-2205)
FileDescription: NULL Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04c05000 fffffa60`04c2a000 VIDEOPRT (deferred)
Mapped memory image file: c:\windows\System32\drivers\videoprt.sys
Image path: VIDEOPRT.SYS
Image name: VIDEOPRT.SYS
Timestamp: Sat Jan 19 07:32:25 2008 (47919979)
CheckSum: 00027AC2
ImageSize: 00025000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: videoprt.sys
OriginalFilename: videoprt.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Video Port Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04c2a000 fffffa60`04c33000 RDPCDD (deferred)
Mapped memory image file: c:\windows\System32\drivers\RDPCDD.sys
Image path: RDPCDD.sys
Image name: RDPCDD.sys
Timestamp: Sat Jan 19 07:42:04 2008 (47919BBC)
CheckSum: 0000B335
ImageSize: 00009000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RDPCDD.SYS
OriginalFilename: RDPCDD.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: RDP Miniport
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04c33000 fffffa60`04c3c000 rdpencdd (deferred)
Mapped memory image file: c:\windows\System32\drivers\RDPENCDD.sys
Image path: rdpencdd.sys
Image name: rdpencdd.sys
Timestamp: Sat Jan 19 07:42:03 2008 (47919BBB)
CheckSum: 00003BDB
ImageSize: 00009000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RDPCDD.SYS
OriginalFilename: RDPCDD.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: RDP Miniport
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04c3c000 fffffa60`04c47000 Msfs (deferred)
Mapped memory image file: c:\windows\System32\drivers\msfs.sys
Image path: Msfs.SYS
Image name: Msfs.SYS
Timestamp: Sat Jan 19 06:53:55 2008 (47919073)
CheckSum: 00008E66
ImageSize: 0000B000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MSFS.SYS
OriginalFilename: MSFS.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Mailslot driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04c47000 fffffa60`04c58000 Npfs (deferred)
Mapped memory image file: c:\windows\System32\drivers\npfs.sys
Image path: Npfs.SYS
Image name: Npfs.SYS
Timestamp: Sat Jan 19 06:53:57 2008 (47919075)
CheckSum: 00019013
ImageSize: 00011000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: npfs.sys
OriginalFilename: npfs.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: NPFS Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04c58000 fffffa60`04c61000 rasacd (deferred)
Mapped memory image file: c:\windows\System32\drivers\rasacd.sys
Image path: rasacd.sys
Image name: rasacd.sys
Timestamp: Sat Jan 19 07:37:30 2008 (47919AAA)
CheckSum: 0000DB26
ImageSize: 00009000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rasacd.sys
OriginalFilename: rasacd.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: RAS Automatic Connection Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04c61000 fffffa60`04c7e000 tdx (deferred)
Mapped memory image file: c:\windows\System32\drivers\tdx.sys
Image path: tdx.sys
Image name: tdx.sys
Timestamp: Sat Jan 19 07:36:53 2008 (47919A85)
CheckSum: 0001DEFA
ImageSize: 0001D000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tdx.sys
OriginalFilename: tdx.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: TDI Translation Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04c7e000 fffffa60`04c99000 smb (deferred)
Mapped memory image file: c:\windows\System32\drivers\smb.sys
Image path: smb.sys
Image name: smb.sys
Timestamp: Sat Jan 19 07:36:17 2008 (47919A61)
CheckSum: 000247F0
ImageSize: 0001B000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: smb.sys
OriginalFilename: smb.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: SMB Transport driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04c99000 fffffa60`04d06000 afd (deferred)
Mapped memory image file: c:\windows\System32\drivers\afd.sys
Image path: afd.sys
Image name: afd.sys
Timestamp: Sat Jan 19 07:38:15 2008 (47919AD7)
CheckSum: 000655C3
ImageSize: 0006D000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: afd.sys
OriginalFilename: afd.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Ancillary Function Driver for WinSock
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04d06000 fffffa60`04d4a000 netbt (deferred)
Mapped memory image file: c:\windows\System32\drivers\netbt.sys
Image path: netbt.sys
Image name: netbt.sys
Timestamp: Sat Jan 19 07:36:24 2008 (47919A68)
CheckSum: 0003D49E
ImageSize: 00044000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: netbt.sys
OriginalFilename: netbt.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: MBT Transport driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04d4a000 fffffa60`04d55000 ws2ifsl (deferred)
Mapped memory image file: c:\windows\System32\drivers\ws2ifsl.sys
Image path: ws2ifsl.sys
Image name: ws2ifsl.sys
Timestamp: Sat Jan 19 07:37:46 2008 (47919ABA)
CheckSum: 0000D9D5
ImageSize: 0000B000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ws2ifsl.sys
OriginalFilename: ws2ifsl.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Winsock2 IFS Layer
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04d55000 fffffa60`04d73000 pacer (deferred)
Mapped memory image file: c:\windows\System32\drivers\pacer.sys
Image path: pacer.sys
Image name: pacer.sys
Timestamp: Sat Apr 05 03:55:46 2008 (47F6DC22)
CheckSum: 0001C364
ImageSize: 0001E000
File version: 6.0.6001.18046
Product version: 6.0.6001.18046
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pacer.sys
OriginalFilename: pacer.sys
ProductVersion: 6.0.6001.18046
FileVersion: 6.0.6001.18046 (vistasp1_gdr.080404-1506)
FileDescription: QoS Packet Scheduler
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04d73000 fffffa60`04d82000 netbios (deferred)
Mapped memory image file: c:\windows\System32\drivers\netbios.sys
Image path: netbios.sys
Image name: netbios.sys
Timestamp: Sat Jan 19 07:36:35 2008 (47919A73)
CheckSum: 00015AAA
ImageSize: 0000F000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NETBIOS.SYS
OriginalFilename: NETBIOS.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: NetBIOS interface driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04d82000 fffffa60`04d9d000 wanarp (deferred)
Mapped memory image file: c:\windows\System32\drivers\wanarp.sys
Image path: wanarp.sys
Image name: wanarp.sys
Timestamp: Sat Jan 19 07:37:35 2008 (47919AAF)
CheckSum: 00024097
ImageSize: 0001B000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WANARP.SYS
OriginalFilename: WANARP.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: MS Remote Access and Routing ARP Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04d9d000 fffffa60`04deb000 rdbss (deferred)
Mapped memory image file: c:\windows\System32\drivers\rdbss.sys
Image path: rdbss.sys
Image name: rdbss.sys
Timestamp: Sat Jan 19 06:55:09 2008 (479190BD)
CheckSum: 0004C836
ImageSize: 0004E000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rdbss.sys
OriginalFilename: RDBSS.Sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Redirected Drive Buffering SubSystem Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04deb000 fffffa60`04df7000 nsiproxy (deferred)
Mapped memory image file: c:\windows\System32\drivers\nsiproxy.sys
Image path: nsiproxy.sys
Image name: nsiproxy.sys
Timestamp: Sat Jan 19 07:36:45 2008 (47919A7D)
CheckSum: 00013617
ImageSize: 0000C000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: nsiproxy.sys
OriginalFilename: nsiproxy.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: NSI Proxy
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04e0d000 fffffa60`04e83000 csc (deferred)
Mapped memory image file: c:\windows\System32\drivers\csc.sys
Image path: csc.sys
Image name: csc.sys
Timestamp: Sat Jan 19 06:55:39 2008 (479190DB)
CheckSum: 000747A5
ImageSize: 00076000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: csc.sys
OriginalFilename: CSC.Sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Windows Client Side Caching Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04e83000 fffffa60`04e9f000 usbccgp (deferred)
Mapped memory image file: c:\windows\System32\drivers\usbccgp.sys
Image path: usbccgp.sys
Image name: usbccgp.sys
Timestamp: Sat Jan 19 07:34:04 2008 (479199DC)
CheckSum: 000229C9
ImageSize: 0001C000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: USBCCGP.SYS
OriginalFilename: USBCCGP.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: USB Common Class Generic Parent Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04e9f000 fffffa60`04ea0e00 USBD (deferred)
Mapped memory image file: c:\windows\System32\drivers\usbd.sys
Image path: USBD.SYS
Image name: USBD.SYS
Timestamp: Sat Jan 19 07:33:53 2008 (479199D1)
CheckSum: 00010C2B
ImageSize: 00001E00
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbd.sys
OriginalFilename: usbd.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Universal Serial Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04ea1000 fffffa60`04ebe000 dfsc (deferred)
Mapped memory image file: c:\windows\System32\drivers\dfsc.sys
Image path: dfsc.sys
Image name: dfsc.sys
Timestamp: Sat Jan 19 06:54:16 2008 (47919088)
CheckSum: 00020190
ImageSize: 0001D000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dfsclient.sys
OriginalFilename: dfsclient.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: DFS Namespace Client Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04ebe000 fffffa60`04ec4000 AsIO (deferred)
Image path: AsIO.sys
Image name: AsIO.sys
Timestamp: Thu Oct 14 11:53:21 2004 (416E4C91)
CheckSum: 0000E986
ImageSize: 00006000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffffa60`04ec4000 fffffa60`04ecd000 hidusb (deferred)
Mapped memory image file: c:\windows\System32\drivers\hidusb.sys
Image path: hidusb.sys
Image name: hidusb.sys
Timestamp: Sat Jan 19 07:33:54 2008 (479199D2)
CheckSum: 00004B9C
ImageSize: 00009000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: HIDUSB.SYS
OriginalFilename: HIDUSB.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: USB Miniport Driver for Input Devices
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04ecd000 fffffa60`04edf000 HIDCLASS (deferred)
Mapped memory image file: c:\windows\System32\drivers\hidclass.sys
Image path: HIDCLASS.SYS
Image name: HIDCLASS.SYS
Timestamp: Sat Jan 19 07:33:52 2008 (479199D0)
CheckSum: 0001B17C
ImageSize: 00012000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hidclass.sys
OriginalFilename: hidclass.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Hid Class Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04edf000 fffffa60`04eea000 mouhid (deferred)
Mapped memory image file: c:\windows\System32\drivers\mouhid.sys
Image path: mouhid.sys
Image name: mouhid.sys
Timestamp: Sat Jan 19 07:28:10 2008 (4791987A)
CheckSum: 0000DA7D
ImageSize: 0000B000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mouhid.sys
OriginalFilename: mouhid.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: HID Mouse Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04eea000 fffffa60`04ef4000 kbdhid (deferred)
Mapped memory image file: c:\windows\System32\drivers\kbdhid.sys
Image path: kbdhid.sys
Image name: kbdhid.sys
Timestamp: Sat Jan 19 07:28:10 2008 (4791987A)
CheckSum: 0000B39B
ImageSize: 0000A000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: kbdhid.sys
OriginalFilename: kbdhid.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: HID Keyboard Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04ef4000 fffffa60`04f10000 cdfs (deferred)
Mapped memory image file: c:\windows\System32\drivers\cdfs.sys
Image path: cdfs.sys
Image name: cdfs.sys
Timestamp: Sat Jan 19 06:53:45 2008 (47919069)
CheckSum: 0001CCC4
ImageSize: 0001C000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cdfs.sys
OriginalFilename: cdfs.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: CD-ROM File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04f10000 fffffa60`04f1e000 crashdmp (deferred)
Mapped memory image file: c:\windows\System32\drivers\crashdmp.sys
Image path: crashdmp.sys
Image name: crashdmp.sys
Timestamp: Sat Jan 19 07:28:59 2008 (479198AB)
CheckSum: 0001572C
ImageSize: 0000E000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: crashdmp.sys
OriginalFilename: crashdmp.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Crash Dump Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04f1e000 fffffa60`04f28000 dump_storport (deferred)
Image path: dump_storport.sys
Image name: dump_storport.sys
Timestamp: Sat Jan 19 07:28:58 2008 (479198AA)
CheckSum: 0001013B
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffffa60`04f28000 fffffa60`04f4a000 dump_nvstor64 (deferred)
Mapped memory image file: c:\windows\System32\drivers\nvstor64.sys
Image path: dump_nvstor64.sys
Image name: dump_nvstor64.sys
Timestamp: Thu Aug 09 20:11:52 2007 (46BB58E8)
CheckSum: 0002B0E7
ImageSize: 00022000
File version: 5.10.2600.998
Product version: 5.10.2600.998
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: NVIDIA Corporation
ProductName: NVIDIA nForce(TM) SATA Driver
InternalName: NVIDIA nForce(TM) SATA Driver
OriginalFilename: nvstor.sys
ProductVersion: 5.10.2600.0998
FileVersion: 5.10.2600.0998 built by: WinDDK
FileDescription: NVIDIA® nForce(TM) Sata Performance Driver
LegalCopyright: Copyright(C) 2001-2007 NVIDIA Corporation
fffffa60`04f4a000 fffffa60`04f5d000 dump_dumpfve (deferred)
Mapped memory image file: c:\windows\System32\drivers\dumpfve.sys
Image path: dump_dumpfve.sys
Image name: dump_dumpfve.sys
Timestamp: Sat Jan 19 06:52:25 2008 (47919019)
CheckSum: 00019561
ImageSize: 00013000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dumpfve.sys
OriginalFilename: dumpfve.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Bitlocker Drive Encryption Crashdump Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04f5d000 fffffa60`04f69000 Dxapi (deferred)
Mapped memory image file: c:\windows\System32\drivers\dxapi.sys
Image path: Dxapi.sys
Image name: Dxapi.sys
Timestamp: Sat Jan 19 07:08:00 2008 (479193C0)
CheckSum: 00007785
ImageSize: 0000C000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dxapi.sys
OriginalFilename: dxapi.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: DirectX API Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04f69000 fffffa60`04f7c000 monitor (deferred)
Mapped memory image file: c:\windows\System32\drivers\monitor.sys
Image path: monitor.sys
Image name: monitor.sys
Timestamp: Sat Jan 19 07:32:34 2008 (47919982)
CheckSum: 0001BE53
ImageSize: 00013000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: monitor.sys
OriginalFilename: monitor.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Monitor Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04f7c000 fffffa60`04f9e000 luafv (deferred)
Mapped memory image file: c:\windows\System32\drivers\luafv.sys
Image path: luafv.sys
Image name: luafv.sys
Timestamp: Sat Jan 19 06:59:06 2008 (479191AA)
CheckSum: 0001E74E
ImageSize: 00022000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: luafv.sys
OriginalFilename: luafv.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: LUA File Virtualization Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04f9e000 fffffa60`04fc6000 mrxsmb (deferred)
Mapped memory image file: c:\windows\System32\drivers\mrxsmb.sys
Image path: mrxsmb.sys
Image name: mrxsmb.sys
Timestamp: Sat Jan 19 06:55:21 2008 (479190C9)
CheckSum: 0002781F
ImageSize: 00028000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MRxSmb.sys
OriginalFilename: MRXSMB.Sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Windows NT SMB Minirdr
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`04fc6000 fffffa60`04fd5000 tcpipreg (deferred)
Mapped memory image file: c:\windows\System32\drivers\tcpipreg.sys
Image path: tcpipreg.sys
Image name: tcpipreg.sys
Timestamp: Sat Jan 19 07:37:01 2008 (47919A8D)
CheckSum: 000099A4
ImageSize: 0000F000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tcpipreg.sys
OriginalFilename: tcpipreg.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: TCP/IP Registry Compatibility Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`08c0c000 fffffa60`08ca6000 spsys (deferred)
Mapped memory image file: c:\windows\System32\drivers\spsys.sys
Image path: spsys.sys
Image name: spsys.sys
Timestamp: Fri Jun 22 03:02:05 2007 (467B1F8D)
CheckSum: 00090ABB
ImageSize: 0009A000
File version: 6.0.6001.16606
Product version: 6.0.6001.16606
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: spsys.sys
OriginalFilename: spsys.sys
ProductVersion: 6.0.6001.16606
FileVersion: 6.0.6001.16606 (lh_security(sepbld-s).070621-1658)
FileDescription: security processor
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`08ca6000 fffffa60`08cba000 lltdio (deferred)
Mapped memory image file: c:\windows\System32\drivers\lltdio.sys
Image path: lltdio.sys
Image name: lltdio.sys
Timestamp: Sat Jan 19 07:35:48 2008 (47919A44)
CheckSum: 000186DE
ImageSize: 00014000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: LLTDIO.SYS
OriginalFilename: LLTDIO.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Link-Layer Topology Mapper I/O Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`08cba000 fffffa60`08cd2000 rspndr (deferred)
Mapped memory image file: c:\windows\System32\drivers\rspndr.sys
Image path: rspndr.sys
Image name: rspndr.sys
Timestamp: Sat Jan 19 07:35:48 2008 (47919A44)
CheckSum: 000132AD
ImageSize: 00018000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RSPNDR.SYS
OriginalFilename: RSPNDR.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Link-Layer Topology Responder Driver for NDIS 6
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`08cd2000 fffffa60`08d6d000 HTTP (deferred)
Mapped memory image file: c:\windows\System32\drivers\http.sys
Image path: HTTP.sys
Image name: HTTP.sys
Timestamp: Sat Jan 19 07:36:22 2008 (47919A66)
CheckSum: 000A03B9
ImageSize: 0009B000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: http.sys
OriginalFilename: http.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: HTTP Protocol Stack
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`08d6d000 fffffa60`08d95000 srvnet (deferred)
Mapped memory image file: c:\windows\System32\drivers\srvnet.sys
Image path: srvnet.sys
Image name: srvnet.sys
Timestamp: Sat Jan 19 06:56:38 2008 (47919116)
CheckSum: 00029BCB
ImageSize: 00028000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SRVNET.SYS
OriginalFilename: SRVNET.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Server Network driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`08d95000 fffffa60`08db3000 bowser (deferred)
Mapped memory image file: c:\windows\System32\drivers\bowser.sys
Image path: bowser.sys
Image name: bowser.sys
Timestamp: Sat Jan 19 06:54:51 2008 (479190AB)
CheckSum: 00021CAB
ImageSize: 0001E000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: browser.sys
OriginalFilename: browser.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: NT Lan Manager Datagram Receiver Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`08db3000 fffffa60`08dcd000 mpsdrv (deferred)
Mapped memory image file: c:\windows\System32\drivers\mpsdrv.sys
Image path: mpsdrv.sys
Image name: mpsdrv.sys
Timestamp: Sat Jan 19 07:35:28 2008 (47919A30)
CheckSum: 000167F0
ImageSize: 0001A000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mpsdrv.sys
OriginalFilename: mpsdrv.sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Microsoft Protection Service Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`08dcd000 fffffa60`08df4000 mrxdav (deferred)
Mapped memory image file: c:\windows\System32\drivers\mrxdav.sys
Image path: mrxdav.sys
Image name: mrxdav.sys
Timestamp: Sat Jan 19 06:55:28 2008 (479190D0)
CheckSum: 0002C95B
ImageSize: 00027000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MRxDav.sys
OriginalFilename: MRxDAV.Sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Windows NT WebDav Minirdr
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`09005000 fffffa60`0904e000 mrxsmb10 (deferred)
Mapped memory image file: c:\windows\System32\drivers\mrxsmb10.sys
Image path: mrxsmb10.sys
Image name: mrxsmb10.sys
Timestamp: Wed Aug 27 03:26:08 2008 (48B4AD30)
CheckSum: 0005060C
ImageSize: 00049000
File version: 6.0.6001.18130
Product version: 6.0.6001.18130
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MRxSmb0.sys
OriginalFilename: MRXSMB0.Sys
ProductVersion: 6.0.6001.18130
FileVersion: 6.0.6001.18130 (vistasp1_gdr.080826-1505)
FileDescription: Longhorn SMB Downlevel SubRdr
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`0904e000 fffffa60`0906d000 mrxsmb20 (deferred)
Mapped memory image file: c:\windows\System32\drivers\mrxsmb20.sys
Image path: mrxsmb20.sys
Image name: mrxsmb20.sys
Timestamp: Sat Jan 19 06:55:19 2008 (479190C7)
CheckSum: 00024B87
ImageSize: 0001F000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MRxSmb20.sys
OriginalFilename: MRXSMB20.Sys
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Longhorn SMB 2.0 Redirector
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`0906d000 fffffa60`0909e000 srv2 (deferred)
Mapped memory image file: c:\windows\System32\drivers\srv2.sys
Image path: srv2.sys
Image name: srv2.sys
Timestamp: Sat Jan 19 06:56:40 2008 (47919118)
CheckSum: 00034EB3
ImageSize: 00031000
File version: 6.0.6001.18000
Product version: 6.0.6001.18000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SRV2.SYS
OriginalFilename: SRV2.SYS
ProductVersion: 6.0.6001.18000
FileVersion: 6.0.6001.18000 (longhorn_rtm.080118-1840)
FileDescription: Smb 2.0 Server driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`0909e000 fffffa60`09132000 srv (deferred)
Mapped memory image file: c:\windows\System32\drivers\srv.sys
Image path: srv.sys
Image name: srv.sys
Timestamp: Tue Dec 16 04:42:00 2008 (49472388)
CheckSum: 0007C3C2
ImageSize: 00094000
File version: 6.0.6001.18185
Product version: 6.0.6001.18185
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SRV.SYS
OriginalFilename: SRV.SYS
ProductVersion: 6.0.6001.18185
FileVersion: 6.0.6001.18185 (vistasp1_gdr.081215-1506)
FileDescription: Server driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`09132000 fffffa60`091e8000 peauth (deferred)
Mapped memory image file: c:\windows\System32\drivers\PEAuth.sys
Image path: peauth.sys
Image name: peauth.sys
Timestamp: Mon Oct 23 13:57:00 2006 (453CAE0C)
CheckSum: 000AE0B2
ImageSize: 000B6000
File version: 6.0.5840.16385
Product version: 6.0.5840.16385
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: PEAuth.sys
OriginalFilename: PEAuth.sys
ProductVersion: 6.0.5840.16385
FileVersion: 6.0.5840.16385 (VISTA_RTM_CLIENT_akaDMD.061022-1800)
FileDescription: Protected Environment Authentication and Authorization Export Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffffa60`091e8000 fffffa60`091f3000 secdrv (deferred)
Mapped memory image file: c:\windows\System32\drivers\secdrv.sys
Image path: secdrv.SYS
Image name: secdrv.SYS
Timestamp: Wed Sep 13 15:18:38 2006 (4508052E)
CheckSum: 00010B40
ImageSize: 0000B000
File version: 4.3.86.0
Product version: 4.3.86.0
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04e4
CompanyName: Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.
ProductName: Macrovision SECURITY Driver
InternalName: SECDRV
OriginalFilename: SECDRV.SYS
ProductVersion: SECURITY Driver 4.03.086 2006/09/13
FileVersion: 4.03.086
FileDescription: Macrovision SECURITY Driver
LegalCopyright: © 2006 Macrovision Corporation
Comments: StringFileInfo: U.S. English
Unloaded modules:
fffffa60`011e5000 fffffa60`011f3000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`011f3000 fffffa60`011fd000 dump_storpor
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`00dbd000 fffffa60`00ddf000 dump_nvstor6
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`00ddf000 fffffa60`00df2000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`045ee000 fffffa60`045f8000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000