GELÖST Bluescreen ohne Fehlermeldung

[Punkt]

Hallo erstmal!

Hab mich gereggt nachdem ich ein schier unlösbares Problem habe.
In meinem jugendlichen Leichtsinn habe ich mich dem Laptop eines Bekannten
angenommen. Ich höre mich noch sagen "...kann ja mal drüber schauen...".

Nach der Anmeldung im System gibt einen Bluescreen und dann meistens (anscheinend
je nach lust und laune) einen reboot.
Das ganze passiert im normalfall so schnell das ich es nicht schaffe den
Automatischen reboot auszuschlaten.

Im abgesicherten modus habe ich das Problem überhaupt nicht, da habe ich auch den
reboot deaktiviert scheint aber nicht zu helfen...

Ich habe in nem anderen thread gelesen das ihr anhand vom windebugger
weiterhelfen könnt.

Mit hilfe vom debugger komme ich zum entschluss das FDC1ANT.sys der übeltäter ist
allerdings bringt mich das nicht weiter weil mir google nicht sagen kann wozu er gut ist...

hier noch das log:

Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: c:\; http://www.alexander.com/SymServe
Windows Vista Kernel Version 6000 UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6000.16386.x86fre.vista_rtm.061101-2205
Kernel base = 0x81c00000 PsLoadedModuleList = 0x81d11db0
Debug session time: Thu Mar 13 23:05:15.021 2008 (GMT+5)
System Uptime: 0 days 0:05:40.624
WARNING: Process directory table base 03C014E0 doesn't match CR3 00122000
WARNING: Process directory table base 03C014E0 doesn't match CR3 00122000
Loading Kernel Symbols
.........................................................................................................................................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffda00c).  Type ".hh dbgerr001" for details
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7F, {8, 8014a000, 0, 0}

*** ERROR: Module load completed but symbols could not be loaded for FDC1ANT.SYS
*** ERROR: Module load completed but symbols could not be loaded for SRTSP.SYS
*** ERROR: Module load completed but symbols could not be loaded for NAVEX15.SYS

PEB is paged out (Peb.Ldr = 7ffda00c).  Type ".hh dbgerr001" for details

PEB is paged out (Peb.Ldr = 7ffda00c).  Type ".hh dbgerr001" for details
Probably caused by : FDC1ANT.SYS ( FDC1ANT+123d )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 00000008, EXCEPTION_DOUBLE_FAULT
Arg2: 8014a000
Arg3: 00000000
Arg4: 00000000

Debugging Details:
------------------


PEB is paged out (Peb.Ldr = 7ffda00c).  Type ".hh dbgerr001" for details

PEB is paged out (Peb.Ldr = 7ffda00c).  Type ".hh dbgerr001" for details

BUGCHECK_STR:  0x7f_8

TSS:  00000028 -- (.tss 0x28)
eax=9d8f01e0 ebx=00000000 ecx=9d8f0210 edx=6578652e esi=9d8f0230 edi=9d8f023d
eip=81c85523 esp=9d8eff70 ebp=9d8f01c0 iopl=0         nv up ei ng nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010282
nt!_output_l+0x1b:
81c85523 57              push    edi
Resetting default scope

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  explorer.exe

CURRENT_IRQL:  0

TRAP_FRAME:  9d8f1008 -- (.trap 0xffffffff9d8f1008)
ErrCode = 00000000
eax=8ffac0a0 ebx=81cf5928 ecx=dde10096 edx=dde10097 esi=00000100 edi=00000006
eip=81c91569 esp=9d8f107c ebp=81cf5928 iopl=0         nv up ei ng nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010286
nt!ExpInterlockedPopEntrySListFault:
81c91569 8b18            mov     ebx,dword ptr [eax]  ds:0023:8ffac0a0=05b039e8
Resetting default scope

LAST_CONTROL_TRANSFER:  from 81c83fa1 to 81c85523

STACK_TEXT:  
9d8f01c0 81c83fa1 9d8f01e0 8aa511ce 00000000 nt!_output_l+0x1b
9d8f0200 8aa5123d 9d8f023c 8aa511ce 00000444 nt!sprintf+0x4f
WARNING: Stack unwind information not available. Following frames may be wrong.
9d8f027c 8aa52f90 8378f500 90f2be00 81c27ecf FDC1ANT+0x123d
9d8f02a0 81c2031f 90542d9c 90542d7c 90eabac0 FDC1ANT+0x2f90
9d8f02bc 81c2a6b1 00000043 90eabac0 90542da8 nt!IoPageRead+0x176
9d8f0378 81caaf05 8ffac0a0 00000000 00000000 nt!MiDispatchFault+0xce9
9d8f03f0 81c8fa74 00000000 8ffac0a0 00000000 nt!MmAccessFault+0x1119
9d8f03f0 81c91569 00000000 8ffac0a0 00000000 nt!KiTrap0E+0xdc
9d8f0480 81ce725d 00000001 8d2e2b38 00000024 nt!ExpInterlockedPopEntrySListFault
9d8f04d4 81e43a62 00000001 00000024 20206553 nt!ExAllocatePoolWithTag+0x252
9d8f050c 8aa50423 8d2e2b38 00000001 9d8f056c nt!SeQueryInformationToken+0x5b
9d8f0618 8aa5289e 9d8f0650 11e2a000 8378f500 FDC1ANT+0x423
9d8f067c 8aa52f90 8378f500 834f5808 81c27ecf FDC1ANT+0x289e
9d8f06a0 81c2031f 90577bcc 90577bac 90eabac0 FDC1ANT+0x2f90
9d8f06bc 81c2a6b1 00000043 90eabac0 90577bd8 nt!IoPageRead+0x176
9d8f0778 81caaf05 8ffac0a0 00000000 00000000 nt!MiDispatchFault+0xce9
9d8f07f0 81c8fa74 00000000 8ffac0a0 00000000 nt!MmAccessFault+0x1119
9d8f07f0 81c91569 00000000 8ffac0a0 00000000 nt!KiTrap0E+0xdc
9d8f0880 81ce725d 00000001 8d2e2b38 00000024 nt!ExpInterlockedPopEntrySListFault
9d8f08d4 81e43a62 00000001 00000024 20206553 nt!ExAllocatePoolWithTag+0x252
9d8f090c 8aa50423 8d2e2b38 00000001 9d8f096c nt!SeQueryInformationToken+0x5b
9d8f0a18 8aa5289e 9d8f0a50 11e2a000 8378f500 FDC1ANT+0x423
9d8f0a7c 8aa52f90 8378f500 90f4c890 81c27ecf FDC1ANT+0x289e
9d8f0aa0 81c2031f 9057591c 905758fc 90eabac0 FDC1ANT+0x2f90
9d8f0abc 81c2a6b1 00000043 90eabac0 90575928 nt!IoPageRead+0x176
9d8f0b78 81caaf05 8ffac0a0 00000000 00000000 nt!MiDispatchFault+0xce9
9d8f0bf0 81c8fa74 00000000 8ffac0a0 00000000 nt!MmAccessFault+0x1119
9d8f0bf0 81c91569 00000000 8ffac0a0 00000000 nt!KiTrap0E+0xdc
9d8f0c80 81ce725d 00000001 8d2e2b38 00000024 nt!ExpInterlockedPopEntrySListFault
9d8f0cd4 81e43a62 00000001 00000024 20206553 nt!ExAllocatePoolWithTag+0x252
9d8f0d0c 8aa50423 8d2e2b38 00000001 9d8f0d6c nt!SeQueryInformationToken+0x5b
9d8f0e18 8aa5289e 9d8f0e50 11e2a000 8378f500 FDC1ANT+0x423
9d8f0e7c 8aa52f90 8378f500 90ed63a8 81c27ecf FDC1ANT+0x289e
9d8f0ea0 81c2031f 9057503c 9057501c 90eabac0 FDC1ANT+0x2f90
9d8f0ebc 81c2a6b1 00000043 90eabac0 90575048 nt!IoPageRead+0x176
9d8f0f78 81caaf05 8ffac0a0 00000000 00000000 nt!MiDispatchFault+0xce9
9d8f0ff0 81c8fa74 00000000 8ffac0a0 00000000 nt!MmAccessFault+0x1119
9d8f0ff0 81c91569 00000000 8ffac0a0 00000000 nt!KiTrap0E+0xdc
9d8f1080 81ce725d 00000001 8d2e2b38 00000024 nt!ExpInterlockedPopEntrySListFault
9d8f10d4 81e43a62 00000001 00000024 20206553 nt!ExAllocatePoolWithTag+0x252
9d8f110c 8aa50423 8d2e2b38 00000001 9d8f116c nt!SeQueryInformationToken+0x5b
9d8f1218 8aa5289e 9d8f1250 11e2a000 8378f500 FDC1ANT+0x423
9d8f127c 8aa52f90 8378f500 90ea6a08 81c27ecf FDC1ANT+0x289e
9d8f12a0 81c2031f 903a2f5c 903a2f3c 90eabac0 FDC1ANT+0x2f90
9d8f12bc 81c2a6b1 00000043 90eabac0 903a2f68 nt!IoPageRead+0x176
9d8f1378 81caaf05 8ffac0a0 00000000 00000000 nt!MiDispatchFault+0xce9
9d8f13f0 81c8fa74 00000000 8ffac0a0 00000000 nt!MmAccessFault+0x1119
9d8f13f0 81c91569 00000000 8ffac0a0 00000000 nt!KiTrap0E+0xdc
9d8f1480 81ce725d 00000001 8d2e2b38 00000024 nt!ExpInterlockedPopEntrySListFault
9d8f14d4 81e43a62 00000001 00000024 20206553 nt!ExAllocatePoolWithTag+0x252
9d8f150c 8aa50423 8d2e2b38 00000001 9d8f156c nt!SeQueryInformationToken+0x5b
9d8f1618 8aa5289e 9d8f1650 11e2a000 8378f500 FDC1ANT+0x423
9d8f167c 8aa52f90 8378f500 8335a008 81c27ecf FDC1ANT+0x289e
9d8f16a0 81c2031f 90572324 90572304 90eabac0 FDC1ANT+0x2f90
9d8f16bc 81c2a6b1 00000043 90eabac0 90572330 nt!IoPageRead+0x176
9d8f1778 81caaf05 8ffac0a0 00000000 00000000 nt!MiDispatchFault+0xce9
9d8f17f0 81c8fa74 00000000 8ffac0a0 00000000 nt!MmAccessFault+0x1119
9d8f17f0 81c91569 00000000 8ffac0a0 00000000 nt!KiTrap0E+0xdc
9d8f1880 81ce725d 00000001 8d2e2b38 00000024 nt!ExpInterlockedPopEntrySListFault
9d8f18d4 81e43a62 00000001 00000024 20206553 nt!ExAllocatePoolWithTag+0x252
9d8f190c 8aa50423 8d2e2b38 00000001 9d8f196c nt!SeQueryInformationToken+0x5b
9d8f1a18 8aa5289e 9d8f1a50 11e2a000 8378f500 FDC1ANT+0x423
9d8f1a7c 8aa52f90 8378f500 902bd880 81c27ecf FDC1ANT+0x289e
9d8f1aa0 81c2031f 90e51a2c 90e51a0c 90eabac0 FDC1ANT+0x2f90
9d8f1abc 81c2a6b1 00000043 90eabac0 90e51a38 nt!IoPageRead+0x176
9d8f1b78 81caaf05 8ffac0a0 00000000 00000000 nt!MiDispatchFault+0xce9
9d8f1bf0 81c8fa74 00000000 8ffac0a0 00000000 nt!MmAccessFault+0x1119
9d8f1bf0 81c91569 00000000 8ffac0a0 00000000 nt!KiTrap0E+0xdc
9d8f1c80 81ce725d 00000001 8d2e2b38 00000024 nt!ExpInterlockedPopEntrySListFault
9d8f1cd4 81e43a62 00000001 00000024 20206553 nt!ExAllocatePoolWithTag+0x252
9d8f1d0c 8aa50423 8d2e2b38 00000001 9d8f1d6c nt!SeQueryInformationToken+0x5b
9d8f1e18 8aa5289e 9d8f1e50 11e2a000 8378f500 FDC1ANT+0x423
9d8f1e7c 8aa52f90 8378f500 9027f4a0 81c27ecf FDC1ANT+0x289e
9d8f1ea0 81c2031f 832255e4 832255c4 90eabac0 FDC1ANT+0x2f90
9d8f1ebc 81c2a6b1 00000043 90eabac0 832255f0 nt!IoPageRead+0x176


STACK_COMMAND:  .tss 0x28 ; kb

MODULE_NAME: FDC1ANT

IMAGE_NAME:  FDC1ANT.SYS

FOLLOWUP_NAME:  MachineOwner

DEBUG_FLR_IMAGE_TIMESTAMP:  45bb5387

FOLLOWUP_IP: 
FDC1ANT+123d
8aa5123d 83c40c          add     esp,0Ch

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  FDC1ANT+123d

FAILURE_BUCKET_ID:  TRAP_FRAME_RECURSION

BUCKET_ID:  TRAP_FRAME_RECURSION

Followup: MachineOwner
---------

kd> lmv
start    end        module name
80201000 80203900   compbatt   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\compbatt.sys
    Image name: compbatt.sys
    Timestamp:        Thu Nov 02 13:05:03 2006 (4549ADB7)
    CheckSum:         0000F08F
    ImageSize:        00002900
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
80204000 8020d000   WMILIB     (deferred)             
    Image path: \SystemRoot\system32\drivers\WMILIB.SYS
    Image name: WMILIB.SYS
    Timestamp:        Thu Nov 02 13:24:53 2006 (4549B25D)
    CheckSum:         00004EA9
    ImageSize:        00009000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8020d000 8021a000   WDFLDR     (deferred)             
    Image path: \SystemRoot\system32\drivers\WDFLDR.SYS
    Image name: WDFLDR.SYS
    Timestamp:        Thu Nov 02 13:24:05 2006 (4549B22D)
    CheckSum:         000124C2
    ImageSize:        0000D000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8021a000 80255000   CLFS       (deferred)             
    Image path: \SystemRoot\system32\CLFS.SYS
    Image name: CLFS.SYS
    Timestamp:        Thu Nov 02 13:00:52 2006 (4549ACBC)
    CheckSum:         00041B8F
    ImageSize:        0003B000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
80255000 8025d000   BOOTVID    (deferred)             
    Image path: \SystemRoot\system32\BOOTVID.dll
    Image name: BOOTVID.dll
    Timestamp:        Thu Nov 02 14:09:29 2006 (4549BCD1)
    CheckSum:         0000C572
    ImageSize:        00008000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8025d000 80266000   PSHED      (deferred)             
    Image path: \SystemRoot\system32\PSHED.dll
    Image name: PSHED.dll
    Timestamp:        Thu Nov 02 14:12:51 2006 (4549BD9B)
    CheckSum:         0001395B
    ImageSize:        00009000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
80266000 802c6000   mcupdate_GenuineIntel   (deferred)             
    Image path: \SystemRoot\system32\mcupdate_GenuineIntel.dll
    Image name: mcupdate_GenuineIntel.dll
    Timestamp:        Tue Apr 24 08:10:05 2007 (462D7C15)
    CheckSum:         00065549
    ImageSize:        00060000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
802c6000 802ce000   kdcom      (deferred)             
    Image path: kdcom.dll
    Image name: kdcom.dll
    Timestamp:        Thu Nov 02 14:12:20 2006 (4549BD7C)
    CheckSum:         00009994
    ImageSize:        00008000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
80404000 8040b000   pciide     (deferred)             
    Image path: \SystemRoot\system32\drivers\pciide.sys
    Image name: pciide.sys
    Timestamp:        Thu Nov 02 13:21:35 2006 (4549B197)
    CheckSum:         000100AE
    ImageSize:        00007000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     pciide.sys
    OriginalFilename: pciide.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  Generic PCI IDE Bus Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
8040b000 8041b000   mountmgr   (deferred)             
    Image path: \SystemRoot\System32\drivers\mountmgr.sys
    Image name: mountmgr.sys
    Timestamp:        Thu Nov 02 13:21:06 2006 (4549B17A)
    CheckSum:         0000F0B3
    ImageSize:        00010000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8041b000 80425000   BATTC      (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\BATTC.SYS
    Image name: BATTC.SYS
    Timestamp:        Thu Nov 02 13:05:00 2006 (4549ADB4)
    CheckSum:         0000A38F
    ImageSize:        0000A000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
80425000 80434000   volmgr     (deferred)             
    Image path: \SystemRoot\system32\drivers\volmgr.sys
    Image name: volmgr.sys
    Timestamp:        Thu Nov 02 13:21:44 2006 (4549B1A0)
    CheckSum:         00015FAA
    ImageSize:        0000F000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
80434000 80459000   pci        (deferred)             
    Image path: \SystemRoot\system32\drivers\pci.sys
    Image name: pci.sys
    Timestamp:        Thu Nov 02 13:05:13 2006 (4549ADC1)
    CheckSum:         0002E8CB
    ImageSize:        00025000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     pci.sys
    OriginalFilename: pci.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  NT Plug and Play PCI Enumerator
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
80459000 80461000   msisadrv   (deferred)             
    Image path: \SystemRoot\system32\drivers\msisadrv.sys
    Image name: msisadrv.sys
    Timestamp:        Thu Nov 02 13:05:08 2006 (4549ADBC)
    CheckSum:         0000D703
    ImageSize:        00008000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
80461000 804a4000   acpi       (deferred)             
    Image path: \SystemRoot\system32\drivers\acpi.sys
    Image name: acpi.sys
    Timestamp:        Thu Nov 02 13:05:03 2006 (4549ADB7)
    CheckSum:         00047E42
    ImageSize:        00043000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
804a4000 8051f000   Wdf01000   (deferred)             
    Image path: \SystemRoot\system32\drivers\Wdf01000.sys
    Image name: Wdf01000.sys
    Timestamp:        Thu Nov 02 13:24:18 2006 (4549B23A)
    CheckSum:         0007DC5C
    ImageSize:        0007B000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8051f000 80600000   CI         (deferred)             
    Image path: \SystemRoot\system32\CI.dll
    Image name: CI.dll
    Timestamp:        Thu Nov 02 14:12:45 2006 (4549BD95)
    CheckSum:         000A28B7
    ImageSize:        000E1000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
80602000 8060b000   crcdisk    (deferred)             
    Image path: \SystemRoot\system32\drivers\crcdisk.sys
    Image name: crcdisk.sys
    Timestamp:        Thu Nov 02 13:22:27 2006 (4549B1CB)
    CheckSum:         00006D96
    ImageSize:        00009000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8060b000 80613000   spldr      (deferred)             
    Image path: \SystemRoot\System32\Drivers\spldr.sys
    Image name: spldr.sys
    Timestamp:        Thu Oct 26 03:10:44 2006 (453FE7EC)
    CheckSum:         0000BC5E
    ImageSize:        00008000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
80613000 80717000   ndis       (deferred)             
    Image path: \SystemRoot\system32\drivers\ndis.sys
    Image name: ndis.sys
    Timestamp:        Thu Nov 02 13:27:33 2006 (4549B2FD)
    CheckSum:         000889FD
    ImageSize:        00104000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
80717000 80727000   fileinfo   (deferred)             
    Image path: \SystemRoot\system32\drivers\fileinfo.sys
    Image name: fileinfo.sys
    Timestamp:        Thu Nov 02 13:06:47 2006 (4549AE1F)
    CheckSum:         0001C10F
    ImageSize:        00010000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
80727000 80758000   fltmgr     (deferred)             
    Image path: \SystemRoot\system32\drivers\fltmgr.sys
    Image name: fltmgr.sys
    Timestamp:        Thu Nov 02 13:00:58 2006 (4549ACC2)
    CheckSum:         00035410
    ImageSize:        00031000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
80758000 80776000   ataport    (deferred)             
    Image path: \SystemRoot\system32\drivers\ataport.SYS
    Image name: ataport.SYS
    Timestamp:        Thu Nov 02 13:21:34 2006 (4549B196)
    CheckSum:         0002A0B2
    ImageSize:        0001E000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
80776000 8077e000   atapi      (deferred)             
    Image path: \SystemRoot\system32\drivers\atapi.sys
    Image name: atapi.sys
    Timestamp:        Thu Nov 02 13:21:34 2006 (4549B196)
    CheckSum:         00005F2B
    ImageSize:        00008000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8077e000 807c8000   volmgrx    (deferred)             
    Image path: \SystemRoot\System32\drivers\volmgrx.sys
    Image name: volmgrx.sys
    Timestamp:        Thu Nov 02 13:21:54 2006 (4549B1AA)
    CheckSum:         0004955F
    ImageSize:        0004A000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
807c8000 807f2000   pcmcia     (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\pcmcia.sys
    Image name: pcmcia.sys
    Timestamp:        Thu Nov 02 13:05:13 2006 (4549ADC1)
    CheckSum:         00035D9A
    ImageSize:        0002A000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
807f2000 80800000   PCIIDEX    (deferred)             
    Image path: \SystemRoot\system32\drivers\PCIIDEX.SYS
    Image name: PCIIDEX.SYS
    Timestamp:        Thu Nov 02 13:21:34 2006 (4549B196)
    CheckSum:         0001200C
    ImageSize:        0000E000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
81a0c000 81a1b000   mup        (deferred)             
    Image path: \SystemRoot\System32\Drivers\mup.sys
    Image name: mup.sys
    Timestamp:        Thu Nov 02 13:01:04 2006 (4549ACC8)
    CheckSum:         00019B87
    ImageSize:        0000F000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
81a1b000 81a2a000   partmgr    (deferred)             
    Image path: \SystemRoot\System32\drivers\partmgr.sys
    Image name: partmgr.sys
    Timestamp:        Thu Nov 02 13:21:47 2006 (4549B1A3)
    CheckSum:         00015E29
    ImageSize:        0000F000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
81a2a000 81a94000   ksecdd     (deferred)             
    Image path: \SystemRoot\System32\Drivers\ksecdd.sys
    Image name: ksecdd.sys
    Timestamp:        Thu Nov 02 13:13:45 2006 (4549AFC1)
    CheckSum:         00064045
    ImageSize:        0006A000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
81a94000 81b9c000   Ntfs       (deferred)             
    Image path: \SystemRoot\System32\Drivers\Ntfs.sys
    Image name: Ntfs.sys
    Timestamp:        Thu Nov 02 13:01:39 2006 (4549ACEB)
    CheckSum:         001119DE
    ImageSize:        00108000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     ntfs.sys
    OriginalFilename: ntfs.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  NT File System Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
81b9c000 81bd5000   NETIO      (deferred)             
    Image path: \SystemRoot\system32\drivers\NETIO.SYS
    Image name: NETIO.SYS
    Timestamp:        Thu Nov 02 13:28:01 2006 (4549B319)
    CheckSum:         0003D74B
    ImageSize:        00039000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
81bd5000 81c00000   msrpc      (deferred)             
    Image path: \SystemRoot\system32\drivers\msrpc.sys
    Image name: msrpc.sys
    Timestamp:        unavailable (FFFFFFFE)
    CheckSum:         missing
    ImageSize:        0002B000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
81c00000 81fa1000   nt         (pdb symbols)          c:\symbols\ntkrpamp.pdb\FD50D285751D4684938604B2CC1B41682\ntkrpamp.pdb
    Loaded symbol image file: ntkrpamp.exe
    Image path: ntkrpamp.exe
    Image name: ntkrpamp.exe
    Timestamp:        Thu Nov 02 13:06:16 2006 (4549AE00)
    CheckSum:         00360858
    ImageSize:        003A1000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        1.0 App
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     ntkrpamp.exe
    OriginalFilename: ntkrpamp.exe
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  NT Kernel & System
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
81fa1000 81fd5000   hal        (deferred)             
    Image path: halmacpi.dll
    Image name: halmacpi.dll
    Timestamp:        Thu Nov 02 13:00:18 2006 (4549AC9A)
    CheckSum:         00027A6F
    ImageSize:        00034000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
83b73000 83b94000   CLASSPNP   (deferred)             
    Image path: \SystemRoot\system32\drivers\CLASSPNP.SYS
    Image name: CLASSPNP.SYS
    Timestamp:        Thu Nov 02 13:21:34 2006 (4549B196)
    CheckSum:         00028767
    ImageSize:        00021000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
83b94000 83ba5000   disk       (deferred)             
    Image path: \SystemRoot\system32\drivers\disk.sys
    Image name: disk.sys
    Timestamp:        Thu Nov 02 13:21:40 2006 (4549B19C)
    CheckSum:         00016517
    ImageSize:        00011000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
83ba5000 83bca000   ecache     (deferred)             
    Image path: \SystemRoot\System32\drivers\ecache.sys
    Image name: ecache.sys
    Timestamp:        Thu Nov 02 13:22:42 2006 (4549B1DA)
    CheckSum:         0002A2CD
    ImageSize:        00025000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
83bca000 83c00000   volsnap    (deferred)             
    Image path: \SystemRoot\system32\drivers\volsnap.sys
    Image name: volsnap.sys
    Timestamp:        Thu Nov 02 13:22:11 2006 (4549B1BB)
    CheckSum:         0003CABF
    ImageSize:        00036000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
84415000 8441c000   WCPU       (deferred)             
    Image path: \??\C:\Program Files\P4G\WCPU.sys
    Image name: WCPU.sys
    Timestamp:        Thu Dec 21 14:50:33 2006 (458A5FF1)
    CheckSum:         0000E408
    ImageSize:        00007000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
844b5000 844c5000   lltdio     (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\lltdio.sys
    Image name: lltdio.sys
    Timestamp:        Thu Nov 02 13:26:48 2006 (4549B2D0)
    CheckSum:         00010AFF
    ImageSize:        00010000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
84525000 84535000   NDProxy    (deferred)             
    Image path: \SystemRoot\System32\Drivers\NDProxy.SYS
    Image name: NDProxy.SYS
    Timestamp:        Thu Nov 02 13:28:08 2006 (4549B320)
    CheckSum:         000109C4
    ImageSize:        00010000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
84538000 84555000   EraserUtilRebootDrv   (deferred)             
    Image path: \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
    Image name: EraserUtilRebootDrv.sys
    Timestamp:        Thu Mar 29 04:21:40 2007 (460AFF8C)
    CheckSum:         0001DBAD
    ImageSize:        0001D000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
84a03000 84a0c000   tunmp      (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\tunmp.sys
    Image name: tunmp.sys
    Timestamp:        Thu Jun 07 07:26:53 2007 (466773F5)
    CheckSum:         0000774F
    ImageSize:        00009000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
84a0c000 84a19000   umbus      (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\umbus.sys
    Image name: umbus.sys
    Timestamp:        Thu Nov 02 13:25:24 2006 (4549B27C)
    CheckSum:         0000A198
    ImageSize:        0000D000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
84a1c000 84a28000   vga        (deferred)             
    Image path: \SystemRoot\System32\drivers\vga.sys
    Image name: vga.sys
    Timestamp:        Thu Nov 02 13:23:56 2006 (4549B224)
    CheckSum:         0000AE5E
    ImageSize:        0000C000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
84a28000 84a31000   Fs_Rec     (deferred)             
    Image path: \SystemRoot\System32\Drivers\Fs_Rec.SYS
    Image name: Fs_Rec.SYS
    Timestamp:        unavailable (FFFFFFFE)
    CheckSum:         missing
    ImageSize:        00009000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
84a51000 84a62000   SRTSPX     (deferred)             
    Image path: \SystemRoot\System32\Drivers\SRTSPX.SYS
    Image name: SRTSPX.SYS
    Timestamp:        Fri Jan 12 06:41:05 2007 (45A6EE39)
    CheckSum:         000097B9
    ImageSize:        00011000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
84a64000 84a65700   USBD       (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\USBD.SYS
    Image name: USBD.SYS
    Timestamp:        Thu Nov 02 13:25:00 2006 (4549B264)
    CheckSum:         000034E1
    ImageSize:        00001700
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0000.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     usbd.sys
    OriginalFilename: usbd.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  Universal Serial Bus Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
84a66000 84a67380   swenum     (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\swenum.sys
    Image name: swenum.sys
    Timestamp:        Thu Nov 02 13:21:15 2006 (4549B183)
    CheckSum:         00007AE5
    ImageSize:        00001380
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
84a74000 84a75780   SYMDNS     (deferred)             
    Image path: \SystemRoot\System32\Drivers\SYMDNS.SYS
    Image name: SYMDNS.SYS
    Timestamp:        Tue Oct 24 04:56:34 2006 (453D5DBA)
    CheckSum:         0000CA7E
    ImageSize:        00001780
    File version:     7.1.0.23
    Product version:  7.1.0.0
    File flags:       0 (Mask 4F)
    File OS:          40004 NT Win32
    File type:        5.0 VXD
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Symantec Corporation
    ProductName:      Symantec Security Drivers
    InternalName:     SYMDNS
    OriginalFilename: SYMDNS
    ProductVersion:   7.1
    FileVersion:      7.1.0.23
    FileDescription:  DNS Filter Driver
    LegalCopyright:   Copyright 2002 - 2006 Symantec Corporation
    LegalTrademarks:  Copyright 2002 - 2006 Symantec Corporation
84ad6000 84add000   Null       (deferred)             
    Image path: \SystemRoot\System32\Drivers\Null.SYS
    Image name: Null.SYS
    Timestamp:        unavailable (FFFFFFFE)
    CheckSum:         missing
    ImageSize:        00007000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
84add000 84ae4000   Beep       (deferred)             
    Image path: \SystemRoot\System32\Drivers\Beep.SYS
    Image name: Beep.SYS
    Timestamp:        Thu Nov 02 13:21:03 2006 (4549B177)
    CheckSum:         0000F272
    ImageSize:        00007000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
84b18000 84b20000   dump_atapi   (deferred)             
    Image path: \SystemRoot\System32\Drivers\dump_atapi.sys
    Image name: dump_atapi.sys
    Timestamp:        Thu Nov 02 13:21:34 2006 (4549B196)
    CheckSum:         00005F2B
    ImageSize:        00008000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     atapi.sys
    OriginalFilename: atapi.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  ATAPI IDE Miniport Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
84b60000 84b68000   ATKACPI    (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\ATKACPI.sys
    Image name: ATKACPI.sys
    Timestamp:        Thu Dec 14 11:41:57 2006 (4580F93D)
    CheckSum:         0000A891
    ImageSize:        00008000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
84b68000 84b70000   RDPCDD     (deferred)             
    Image path: \SystemRoot\System32\DRIVERS\RDPCDD.sys
    Image name: RDPCDD.sys
    Timestamp:        Thu Nov 02 13:32:01 2006 (4549B409)
    CheckSum:         000095C6
    ImageSize:        00008000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
84b70000 84b78000   rdpencdd   (deferred)             
    Image path: \SystemRoot\system32\drivers\rdpencdd.sys
    Image name: rdpencdd.sys
    Timestamp:        Thu Nov 02 13:32:01 2006 (4549B409)
    CheckSum:         0000CDEE
    ImageSize:        00008000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
84b9c000 84b9f780   CmBatt     (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\CmBatt.sys
    Image name: CmBatt.sys
    Timestamp:        Thu Nov 02 13:05:03 2006 (4549ADB7)
    CheckSum:         0000BB7C
    ImageSize:        00003780
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
86a41000 86a46080   SYMREDRV   (deferred)             
    Image path: \SystemRoot\System32\Drivers\SYMREDRV.SYS
    Image name: SYMREDRV.SYS
    Timestamp:        Tue Oct 24 04:59:54 2006 (453D5E82)
    CheckSum:         0000A5EA
    ImageSize:        00005080
    File version:     7.1.0.23
    Product version:  7.1.0.0
    File flags:       0 (Mask 4F)
    File OS:          40004 NT Win32
    File type:        5.0 VXD
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Symantec Corporation
    ProductName:      Symantec Security Drivers
    InternalName:     SYMREDRV
    OriginalFilename: SYMREDRV
    ProductVersion:   7.1
    FileVersion:      7.1.0.23
    FileDescription:  Redirector Filter Driver
    LegalCopyright:   Copyright 2002 - 2006 Symantec Corporation
    LegalTrademarks:  Copyright 2002 - 2006 Symantec Corporation
86aac000 86abd440   NAVENG     (deferred)             
    Image path: \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20070715.002\NAVENG.SYS
    Image name: NAVENG.SYS
    Timestamp:        Fri Mar 16 09:04:29 2007 (45FA1E55)
    CheckSum:         0001623A
    ImageSize:        00011440
    File version:     20071.2.0.18
    Product version:  20071.2.0.18
    File flags:       0 (Mask 0)
    File OS:          4 Unknown Win32
    File type:        3.0 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Symantec Corporation
    ProductName:      Symantec Antivirus Engine
    InternalName:     naveng
    OriginalFilename: naveng.sys
    ProductVersion:   20071.2.0.18
    FileVersion:      20071.2.0.18
    FileDescription:  AV Engine
    LegalCopyright:   Copyright (C) 1991-2007 Symantec Corporation.
86aee000 86b0f000   VIDEOPRT   (deferred)             
    Image path: \SystemRoot\System32\drivers\VIDEOPRT.SYS
    Image name: VIDEOPRT.SYS
    Timestamp:        Thu Nov 02 13:24:07 2006 (4549B22F)
    CheckSum:         0001DD84
    ImageSize:        00021000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.4 Driver
    File date:        00000000.00000000
    Translations:     0000.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     videoprt.sys
    OriginalFilename: videoprt.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  Video Port Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
86b4f000 86b5c000   watchdog   (deferred)             
    Image path: \SystemRoot\System32\drivers\watchdog.sys
    Image name: watchdog.sys
    Timestamp:        Thu Nov 02 13:07:44 2006 (4549AE58)
    CheckSum:         0000E618
    ImageSize:        0000D000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0000.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     watchdog.sys
    OriginalFilename: watchdog.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  Watchdog Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
86b79000 86b83000   usbohci    (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\usbohci.sys
    Image name: usbohci.sys
    Timestamp:        Thu Nov 02 13:25:05 2006 (4549B269)
    CheckSum:         0000EE06
    ImageSize:        0000A000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
86b83000 86b8e000   tunnel     (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\tunnel.sys
    Image name: tunnel.sys
    Timestamp:        Thu Jun 07 07:27:03 2007 (466773FF)
    CheckSum:         0000A64F
    ImageSize:        0000B000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
87a01000 87a0c000   kbdclass   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\kbdclass.sys
    Image name: kbdclass.sys
    Timestamp:        Thu Nov 02 13:21:09 2006 (4549B17D)
    CheckSum:         00009F23
    ImageSize:        0000B000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
87a0e000 87a33000   drmk       (deferred)             
    Image path: \SystemRoot\system32\drivers\drmk.sys
    Image name: drmk.sys
    Timestamp:        Thu Nov 02 13:50:49 2006 (4549B871)
    CheckSum:         0002E713
    ImageSize:        00025000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     drmk.sys
    OriginalFilename: drmk.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  Microsoft Kernel DRM Descrambler Filter
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
87a33000 87a60000   portcls    (deferred)             
    Image path: \SystemRoot\system32\drivers\portcls.sys
    Image name: portcls.sys
    Timestamp:        Thu Nov 02 13:25:02 2006 (4549B266)
    CheckSum:         00034F0F
    ImageSize:        0002D000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.9 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     portcls.sys
    OriginalFilename: portcls.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  Port Class (Class Driver for Port/Miniport Devices)
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
87a9c000 87aab000   monitor    (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\monitor.sys
    Image name: monitor.sys
    Timestamp:        Thu Nov 02 13:24:05 2006 (4549B22D)
    CheckSum:         000126AD
    ImageSize:        0000F000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
87b66000 87b71000   Msfs       (deferred)             
    Image path: \SystemRoot\System32\Drivers\Msfs.SYS
    Image name: Msfs.SYS
    Timestamp:        unavailable (FFFFFFFE)
    CheckSum:         missing
    ImageSize:        0000B000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
87b71000 87b7c000   SYMNDISV   (deferred)             
    Image path: \SystemRoot\System32\Drivers\SYMNDISV.SYS
    Image name: SYMNDISV.SYS
    Timestamp:        Tue Oct 24 05:08:52 2006 (453D609C)
    CheckSum:         0001767C
    ImageSize:        0000B000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
87b7c000 87b87000   dump_dumpata   (deferred)             
    Image path: \SystemRoot\System32\Drivers\dump_dumpata.sys
    Image name: dump_dumpata.sys
    Timestamp:        Thu Nov 02 13:21:34 2006 (4549B196)
    CheckSum:         0000C948
    ImageSize:        0000B000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0000.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     dumpata.sys
    OriginalFilename: dumpata.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  ATAPI Dump Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
87bdf000 87bea000   tcpipreg   (deferred)             
    Image path: \SystemRoot\System32\drivers\tcpipreg.sys
    Image name: tcpipreg.sys
    Timestamp:        Thu Nov 02 13:27:46 2006 (4549B30A)
    CheckSum:         0000792D
    ImageSize:        0000B000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
87c00000 87c12000   HDAudBus   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\HDAudBus.sys
    Image name: HDAudBus.sys
    Timestamp:        Sat Mar 24 23:24:34 2007 (460573EA)
    CheckSum:         0001A527
    ImageSize:        00012000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
87c12000 87c4f000   USBPORT    (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\USBPORT.SYS
    Image name: USBPORT.SYS
    Timestamp:        Thu Nov 02 13:25:09 2006 (4549B26D)
    CheckSum:         0003FA9C
    ImageSize:        0003D000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     usbport.sys
    OriginalFilename: usbport.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  USB 1.1 & 2.0 Port Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
87c69000 87c76000   modem      (deferred)             
    Image path: \SystemRoot\system32\drivers\modem.sys
    Image name: modem.sys
    Timestamp:        Thu Nov 02 13:28:52 2006 (4549B34C)
    CheckSum:         0001590B
    ImageSize:        0000D000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
87c76000 87c83000   crashdmp   (deferred)             
    Image path: \SystemRoot\System32\Drivers\crashdmp.sys
    Image name: crashdmp.sys
    Timestamp:        Thu Nov 02 13:21:36 2006 (4549B198)
    CheckSum:         0001054E
    ImageSize:        0000D000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     crashdmp.sys
    OriginalFilename: crashdmp.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  Crash Dump Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
87d1f000 87dbb000   dxgkrnl    (deferred)             
    Image path: \SystemRoot\System32\drivers\dxgkrnl.sys
    Image name: dxgkrnl.sys
    Timestamp:        Thu Nov 02 13:08:46 2006 (4549AE96)
    CheckSum:         000A4A57
    ImageSize:        0009C000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
87dbe000 87dd2000   smb        (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\smb.sys
    Image name: smb.sys
    Timestamp:        Thu Nov 02 13:27:10 2006 (4549B2E6)
    CheckSum:         00010933
    ImageSize:        00014000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
87dd2000 87de7000   tdx        (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\tdx.sys
    Image name: tdx.sys
    Timestamp:        Thu Nov 02 13:27:34 2006 (4549B2FE)
    CheckSum:         0001FE16
    ImageSize:        00015000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
87de7000 87e00000   fwpkclnt   (deferred)             
    Image path: \SystemRoot\System32\drivers\fwpkclnt.sys
    Image name: fwpkclnt.sys
    Timestamp:        Thu Nov 02 13:27:26 2006 (4549B2F6)
    CheckSum:         0002402A
    ImageSize:        00019000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     fwpkclnt.sys
    OriginalFilename: fwpkclnt.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  FWP/IPsec Kernel-Mode API
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
88003000 8801a000   rasl2tp    (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\rasl2tp.sys
    Image name: rasl2tp.sys
    Timestamp:        Thu Nov 02 13:28:13 2006 (4549B325)
    CheckSum:         0001283E
    ImageSize:        00017000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8801a000 88025000   TDI        (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\TDI.SYS
    Image name: TDI.SYS
    Timestamp:        Thu Nov 02 13:28:46 2006 (4549B346)
    CheckSum:         0000B17F
    ImageSize:        0000B000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.6 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     tdi.sys
    OriginalFilename: tdi.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  TDI Wrapper
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
88025000 88065000   storport   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\storport.sys
    Image name: storport.sys
    Timestamp:        Thu Nov 02 13:21:45 2006 (4549B1A1)
    CheckSum:         0001ECB2
    ImageSize:        00040000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0000.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     storport.sys
    OriginalFilename: storport.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  Microsoft Storage Port Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
8806c000 8809e000   netbt      (deferred)             
    Image path: \SystemRoot\System32\DRIVERS\netbt.sys
    Image name: netbt.sys
    Timestamp:        Thu Nov 02 13:27:18 2006 (4549B2EE)
    CheckSum:         0002DCA1
    ImageSize:        00032000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8809e000 880c9000   msiscsi    (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\msiscsi.sys
    Image name: msiscsi.sys
    Timestamp:        Thu Nov 02 13:22:40 2006 (4549B1D8)
    CheckSum:         0002C426
    ImageSize:        0002B000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
880d0000 880e6000   pacer      (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\pacer.sys
    Image name: pacer.sys
    Timestamp:        Thu Nov 02 13:27:33 2006 (4549B2FD)
    CheckSum:         00014F57
    ImageSize:        00016000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
880e6000 880fa000   rimsptsk   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\rimsptsk.sys
    Image name: rimsptsk.sys
    Timestamp:        Wed Nov 15 08:12:45 2006 (455A8CB5)
    CheckSum:         00018B7D
    ImageSize:        00014000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
880fa000 88112000   sdbus      (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\sdbus.sys
    Image name: sdbus.sys
    Timestamp:        Sat Apr 28 06:45:33 2007 (4632AE45)
    CheckSum:         0001FC78
    ImageSize:        00018000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
88112000 88123000   Rtnicxp    (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\Rtnicxp.sys
    Image name: Rtnicxp.sys
    Timestamp:        Mon Nov 06 06:31:19 2006 (454E976F)
    CheckSum:         0000ECFA
    ImageSize:        00011000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
88133000 8813e000   mouclass   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\mouclass.sys
    Image name: mouclass.sys
    Timestamp:        Thu Nov 02 13:21:09 2006 (4549B17D)
    CheckSum:         0000DE48
    ImageSize:        0000B000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8813f000 8816af00   SYMTDI     (deferred)             
    Image path: \SystemRoot\System32\Drivers\SYMTDI.SYS
    Image name: SYMTDI.SYS
    Timestamp:        Tue Oct 24 04:56:29 2006 (453D5DB5)
    CheckSum:         00038671
    ImageSize:        0002BF00
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8816b000 8817e000   wanarp     (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\wanarp.sys
    Image name: wanarp.sys
    Timestamp:        Thu Nov 02 13:28:13 2006 (4549B325)
    CheckSum:         00016E17
    ImageSize:        00013000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8817e000 881a8100   SynTP      (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\SynTP.sys
    Image name: SynTP.sys
    Timestamp:        Fri Oct 13 06:00:06 2006 (452EEC1E)
    CheckSum:         0002E62B
    ImageSize:        0002A100
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
881c7000 881da000   i8042prt   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\i8042prt.sys
    Image name: i8042prt.sys
    Timestamp:        Thu Nov 02 13:21:12 2006 (4549B180)
    CheckSum:         0001977C
    ImageSize:        00013000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
881db000 881fcf00   SYMFW      (deferred)             
    Image path: \SystemRoot\System32\Drivers\SYMFW.SYS
    Image name: SYMFW.SYS
    Timestamp:        Tue Oct 24 04:58:55 2006 (453D5E47)
    CheckSum:         000268DF
    ImageSize:        00021F00
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
881fd000 88220000   SYMEVENT   (deferred)             
    Image path: \??\C:\Windows\system32\Drivers\SYMEVENT.SYS
    Image name: SYMEVENT.SYS
    Timestamp:        Sat Dec 16 05:00:34 2006 (45833E2A)
    CheckSum:         0001D49E
    ImageSize:        00023000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
88220000 88229000   rasacd     (deferred)             
    Image path: \SystemRoot\System32\DRIVERS\rasacd.sys
    Image name: rasacd.sys
    Timestamp:        Thu Nov 02 13:28:13 2006 (4549B325)
    CheckSum:         0000E90B
    ImageSize:        00009000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
88229000 88231180   SYMIDS     (deferred)             
    Image path: \SystemRoot\System32\Drivers\SYMIDS.SYS
    Image name: SYMIDS.SYS
    Timestamp:        Tue Oct 24 04:59:36 2006 (453D5E70)
    CheckSum:         0000E154
    ImageSize:        00008180
    File version:     7.1.0.23
    Product version:  7.1.0.0
    File flags:       0 (Mask 4F)
    File OS:          40000 NT Base
    File type:        0.0 Unknown
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Symantec Corporation
    ProductName:      Symantec Security Drivers
    ProductVersion:   7.1
    FileVersion:      7.1.0.23
    FileDescription:  IDS Filter Driver
    LegalCopyright:   Copyright 2002 - 2006 Symantec Corporation
    LegalTrademarks:  Copyright 2002 - 2006 Symantec Corporation
882b0000 882c8000   cdrom      (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\cdrom.sys
    Image name: cdrom.sys
    Timestamp:        Thu Nov 02 13:21:44 2006 (4549B1A0)
    CheckSum:         0001BA75
    ImageSize:        00018000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
882d6000 88320000   SRTSP      (no symbols)           
    Loaded symbol image file: SRTSP.SYS
    Image path: \SystemRoot\System32\Drivers\SRTSP.SYS
    Image name: SRTSP.SYS
    Timestamp:        Fri Jan 12 06:41:05 2007 (45A6EE39)
    CheckSum:         0003E5FD
    ImageSize:        0004A000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
88320000 8832e000   intelppm   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\intelppm.sys
    Image name: intelppm.sys
    Timestamp:        Thu Nov 02 13:00:18 2006 (4549AC9A)
    CheckSum:         00013132
    ImageSize:        0000E000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8832e000 8833c000   usbehci    (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\usbehci.sys
    Image name: usbehci.sys
    Timestamp:        Thu Nov 02 13:25:04 2006 (4549B268)
    CheckSum:         00017319
    ImageSize:        0000E000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8834a000 88358000   Npfs       (deferred)             
    Image path: \SystemRoot\System32\Drivers\Npfs.SYS
    Image name: Npfs.SYS
    Timestamp:        Thu Nov 02 13:00:57 2006 (4549ACC1)
    CheckSum:         00016EA8
    ImageSize:        0000E000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
88358000 88366000   netbios    (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\netbios.sys
    Image name: netbios.sys
    Timestamp:        Thu Nov 02 13:27:26 2006 (4549B2F6)
    CheckSum:         0000F480
    ImageSize:        0000E000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
88404000 8843a000   IDSvix86   (deferred)             
    Image path: \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData\idsdefs\20070709.002\IDSvix86.sys
    Image name: IDSvix86.sys
    Timestamp:        Thu Mar 15 00:52:38 2007 (45F8598E)
    CheckSum:         00037A00
    ImageSize:        00036000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8843a000 88481000   afd        (deferred)             
    Image path: \SystemRoot\system32\drivers\afd.sys
    Image name: afd.sys
    Timestamp:        Thu Nov 02 13:28:41 2006 (4549B341)
    CheckSum:         00049FFB
    ImageSize:        00047000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
88481000 884b5000   usbhub     (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\usbhub.sys
    Image name: usbhub.sys
    Timestamp:        Thu Nov 02 13:25:20 2006 (4549B278)
    CheckSum:         000355FE
    ImageSize:        00034000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
884d1000 8850c000   rdbss      (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\rdbss.sys
    Image name: rdbss.sys
    Timestamp:        Thu Nov 02 13:01:24 2006 (4549ACDC)
    CheckSum:         0003A186
    ImageSize:        0003B000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8850c000 88572000   SPBBCDrv   (deferred)             
    Image path: \??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys
    Image name: SPBBCDrv.sys
    Timestamp:        Sat Oct 07 01:31:22 2006 (4526C422)
    CheckSum:         00066F19
    ImageSize:        00066000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
88572000 8857c000   mssmbios   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\mssmbios.sys
    Image name: mssmbios.sys
    Timestamp:        Thu Nov 02 13:05:13 2006 (4549ADC1)
    CheckSum:         00010CCD
    ImageSize:        0000A000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
88804000 88817000   raspptp    (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\raspptp.sys
    Image name: raspptp.sys
    Timestamp:        Thu Nov 02 13:28:14 2006 (4549B326)
    CheckSum:         00018677
    ImageSize:        00013000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
88817000 88826000   raspppoe   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\raspppoe.sys
    Image name: raspppoe.sys
    Timestamp:        Thu Nov 02 13:28:12 2006 (4549B324)
    CheckSum:         00015C59
    ImageSize:        0000F000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
88834000 8884b000   dfsc       (deferred)             
    Image path: \SystemRoot\System32\Drivers\dfsc.sys
    Image name: dfsc.sys
    Timestamp:        Thu Nov 02 13:01:04 2006 (4549ACC8)
    CheckSum:         00015C96
    ImageSize:        00017000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8884b000 8886e000   ndiswan    (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\ndiswan.sys
    Image name: ndiswan.sys
    Timestamp:        Thu Nov 02 13:28:13 2006 (4549B325)
    CheckSum:         00023D9F
    ImageSize:        00023000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8886e000 88879000   ndistapi   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\ndistapi.sys
    Image name: ndistapi.sys
    Timestamp:        Thu Nov 02 13:28:07 2006 (4549B31F)
    CheckSum:         00008E55
    ImageSize:        0000B000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
88879000 89000000   atikmdag   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
    Image name: atikmdag.sys
    Timestamp:        Thu Dec 21 07:19:31 2006 (4589F63B)
    CheckSum:         002358FE
    ImageSize:        00787000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8900b000 89033000   fastfat    (deferred)             
    Image path: \SystemRoot\System32\Drivers\fastfat.SYS
    Image name: fastfat.SYS
    Timestamp:        Thu Nov 02 13:00:49 2006 (4549ACB9)
    CheckSum:         0002A9C1
    ImageSize:        00028000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
89033000 8905d000   ks         (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\ks.sys
    Image name: ks.sys
    Timestamp:        Thu Nov 02 13:21:18 2006 (4549B186)
    CheckSum:         000285FF
    ImageSize:        0002A000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.0 Driver
    File date:        00000000.00000000
    Translations:     0000.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     ks.sys
    OriginalFilename: ks.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  Kernel CSA Library
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
89068000 89077000   termdd     (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\termdd.sys
    Image name: termdd.sys
    Timestamp:        Thu Nov 02 13:32:00 2006 (4549B408)
    CheckSum:         00016581
    ImageSize:        0000F000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
89081000 8908b000   MODEMCSA   (deferred)             
    Image path: \SystemRoot\system32\drivers\MODEMCSA.sys
    Image name: MODEMCSA.sys
    Timestamp:        Thu Nov 02 13:28:52 2006 (4549B34C)
    CheckSum:         00009FDE
    ImageSize:        0000A000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8908b000 89095000   nsiproxy   (deferred)             
    Image path: \SystemRoot\system32\drivers\nsiproxy.sys
    Image name: nsiproxy.sys
    Timestamp:        Thu Nov 02 13:27:30 2006 (4549B2FA)
    CheckSum:         0000D051
    ImageSize:        0000A000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
89095000 8909f000   Dxapi      (deferred)             
    Image path: \SystemRoot\System32\drivers\Dxapi.sys
    Image name: Dxapi.sys
    Timestamp:        Thu Nov 02 13:08:17 2006 (4549AE79)
    CheckSum:         0000C639
    ImageSize:        0000A000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     dxapi.sys
    OriginalFilename: dxapi.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  DirectX API Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
8909f000 890a9000   ndisuio    (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\ndisuio.sys
    Image name: ndisuio.sys
    Timestamp:        Thu Nov 02 13:27:22 2006 (4549B2F2)
    CheckSum:         000086D8
    ImageSize:        0000A000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
890d1000 890db000   secdrv     (deferred)             
    Image path: \SystemRoot\System32\Drivers\secdrv.SYS
    Image name: secdrv.SYS
    Timestamp:        Wed Sep 13 17:48:32 2006 (45080528)
    CheckSum:         0000F9E8
    ImageSize:        0000A000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
89131000 891ff820   NAVEX15    (no symbols)           
    Loaded symbol image file: NAVEX15.SYS
    Image path: \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20070715.002\NAVEX15.SYS
    Image name: NAVEX15.SYS
    Timestamp:        Fri Mar 16 09:44:23 2007 (45FA27AF)
    CheckSum:         000DB4F1
    ImageSize:        000CE820
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8a80b000 8a86d000   eeCtrl     (deferred)             
    Image path: \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys
    Image name: eeCtrl.sys
    Timestamp:        Thu Mar 29 04:21:40 2007 (460AFF8C)
    CheckSum:         00063805
    ImageSize:        00062000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8a86d000 8a9ff780   RTKVHDA    (deferred)             
    Image path: \SystemRoot\system32\drivers\RTKVHDA.sys
    Image name: RTKVHDA.sys
    Timestamp:        Fri Dec 01 10:08:47 2006 (456FBFE7)
    CheckSum:         001A21BD
    ImageSize:        00192780
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8aa50000 8aa5b0a0   FDC1ANT    (no symbols)           
    Loaded symbol image file: FDC1ANT.SYS
    Image path: \??\C:\Windows\system32\drivers\FDC1ANT.SYS
    Image name: FDC1ANT.SYS
    Timestamp:        Sat Jan 27 17:58:39 2007 (45BB5387)
    CheckSum:         0000CC2F
    ImageSize:        0000B0A0
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8ab10000 8abffa00   smserial   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\smserial.sys
    Image name: smserial.sys
    Timestamp:        Mon Oct 09 21:17:55 2006 (452A7D3B)
    CheckSum:         000FC6F4
    ImageSize:        000EFA00
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
8e52f000 8e600000   tcpip      (deferred)             
    Image path: \SystemRoot\System32\drivers\tcpip.sys
    Image name: tcpip.sys
    Timestamp:        Thu Nov 02 13:28:31 2006 (4549B337)
    CheckSum:         000D0F67
    ImageSize:        000D1000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
95200000 953ff000   win32k     (deferred)             
    Image path: \SystemRoot\System32\win32k.sys
    Image name: win32k.sys
    Timestamp:        Thu Feb 15 07:27:33 2007 (45D3CC1D)
    CheckSum:         001F82C6
    ImageSize:        001FF000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
95800000 95809000   TSDDD      (deferred)             
    Image path: \SystemRoot\System32\TSDDD.dll
    Image name: TSDDD.dll
    Timestamp:        Thu Nov 02 13:32:02 2006 (4549B40A)
    CheckSum:         000133E7
    ImageSize:        00009000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
95810000 9581e000   cdd        (deferred)             
    Image path: \SystemRoot\System32\cdd.dll
    Image name: cdd.dll
    Timestamp:        Thu Nov 02 14:09:20 2006 (4549BCC8)
    CheckSum:         0000ADC7
    ImageSize:        0000E000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
95a11000 95a3c000   nwifi      (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\nwifi.sys
    Image name: nwifi.sys
    Timestamp:        Thu Nov 02 13:25:41 2006 (4549B28D)
    CheckSum:         0003428E
    ImageSize:        0002B000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
95a98000 95aac000   mpsdrv     (deferred)             
    Image path: \SystemRoot\System32\drivers\mpsdrv.sys
    Image name: mpsdrv.sys
    Timestamp:        Thu Jun 07 07:25:55 2007 (466773BB)
    CheckSum:         00017B0B
    ImageSize:        00014000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
95aac000 95abf000   rspndr     (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\rspndr.sys
    Image name: rspndr.sys
    Timestamp:        Thu Nov 02 13:26:48 2006 (4549B2D0)
    CheckSum:         00016310
    ImageSize:        00013000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
95b3f000 95ba1000   ACEDRV08   (deferred)             
    Image path: \??\C:\Windows\system32\drivers\ACEDRV08.sys
    Image name: ACEDRV08.sys
    Timestamp:        Thu Nov 23 20:26:29 2006 (4565C4AD)
    CheckSum:         0002A084
    ImageSize:        00062000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
95ba1000 95bbc000   luafv      (deferred)             
    Image path: \SystemRoot\system32\drivers\luafv.sys
    Image name: luafv.sys
    Timestamp:        Thu Nov 02 13:03:07 2006 (4549AD43)
    CheckSum:         0001BBEF
    ImageSize:        0001B000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
96e00000 96e12000   mrxsmb20   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\mrxsmb20.sys
    Image name: mrxsmb20.sys
    Timestamp:        Thu Nov 02 13:01:16 2006 (4549ACD4)
    CheckSum:         00019A68
    ImageSize:        00012000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
97c00000 97c1b000   srvnet     (deferred)             
    Image path: \SystemRoot\System32\DRIVERS\srvnet.sys
    Image name: srvnet.sys
    Timestamp:        Thu Nov 02 13:01:43 2006 (4549ACEF)
    CheckSum:         00015050
    ImageSize:        0001B000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
97c90000 97ca2000   WUDFPf     (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\WUDFPf.sys
    Image name: WUDFPf.sys
    Timestamp:        Thu Nov 02 13:24:36 2006 (4549B24C)
    CheckSum:         00018BF0
    ImageSize:        00012000
    File version:     6.0.6000.16386
    Product version:  6.0.6000.16386
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0000.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     WUDFPf.sys
    OriginalFilename: WUDFPf.sys
    ProductVersion:   6.0.6000.16386
    FileVersion:      6.0.6000.16386 (vista_rtm.061101-2205)
    FileDescription:  Windows Driver Foundation - User-mode Driver Framework Platform Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
97ca2000 97cb6280   WUDFRd     (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\WUDFRd.sys
    Image name: WUDFRd.sys
    Timestamp:        Thu Nov 02 13:24:51 2006 (4549B25B)
    CheckSum:         0001CE3C
    ImageSize:        00014280
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
97cb7000 97cd0000   bowser     (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\bowser.sys
    Image name: bowser.sys
    Timestamp:        Thu Nov 02 13:01:11 2006 (4549ACCF)
    CheckSum:         0001D6EC
    ImageSize:        00019000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
97e0f000 97e2d000   mrxsmb     (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\mrxsmb.sys
    Image name: mrxsmb.sys
    Timestamp:        Thu Nov 02 13:01:20 2006 (4549ACD8)
    CheckSum:         00022082
    ImageSize:        0001E000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
97e2d000 97ebb000   spsys      (deferred)             
    Image path: \SystemRoot\system32\drivers\spsys.sys
    Image name: spsys.sys
    Timestamp:        Thu Oct 26 03:13:28 2006 (453FE890)
    CheckSum:         00089D11
    ImageSize:        0008E000
    File version:     6.0.5840.16389
    Product version:  6.0.5840.16389
    File flags:       8 (Mask 3F) Private
    File OS:          40004 NT Win32
    File type:        3.0 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     spsys.sys
    OriginalFilename: spsys.sys
    ProductVersion:   6.0.5840.16389
    FileVersion:      6.0.5840.16389 (VISTA_RTM(sepbld-s).061025-1421)
    FileDescription:  security processor
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
97efb000 97f1a000   mrxdav     (deferred)             
    Image path: \SystemRoot\system32\drivers\mrxdav.sys
    Image name: mrxdav.sys
    Timestamp:        Thu Nov 02 13:01:24 2006 (4549ACDC)
    CheckSum:         00020D0D
    ImageSize:        0001F000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
97f9a000 98000000   HTTP       (deferred)             
    Image path: \SystemRoot\system32\drivers\HTTP.sys
    Image name: HTTP.sys
    Timestamp:        Thu Nov 02 13:27:06 2006 (4549B2E2)
    CheckSum:         0006169A
    ImageSize:        00066000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
9821c000 98232000   cdfs       (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\cdfs.sys
    Image name: cdfs.sys
    Timestamp:        Thu Nov 02 13:00:50 2006 (4549ACBA)
    CheckSum:         0001EEB3
    ImageSize:        00016000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
982b5000 982b7540   ghaio      (deferred)             
    Image path: \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys
    Image name: ghaio.sys
    Timestamp:        Wed Aug 20 07:58:48 2003 (3F42EAF0)
    CheckSum:         00008685
    ImageSize:        00002540
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
988f7000 98943000   srv        (deferred)             
    Image path: \SystemRoot\System32\DRIVERS\srv.sys
    Image name: srv.sys
    Timestamp:        Thu Nov 02 13:01:55 2006 (4549ACFB)
    CheckSum:         0005310D
    ImageSize:        0004C000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
989a3000 989c7000   srv2       (deferred)             
    Image path: \SystemRoot\System32\DRIVERS\srv2.sys
    Image name: srv2.sys
    Timestamp:        Thu Nov 02 13:01:46 2006 (4549ACF2)
    CheckSum:         0002A07A
    ImageSize:        00024000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
989c7000 98a00000   mrxsmb10   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\mrxsmb10.sys
    Image name: mrxsmb10.sys
    Timestamp:        Thu Nov 02 13:01:25 2006 (4549ACDD)
    CheckSum:         00042EE5
    ImageSize:        00039000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
9a2e2000 9a3c0000   peauth     (deferred)             
    Image path: \SystemRoot\system32\drivers\peauth.sys
    Image name: peauth.sys
    Timestamp:        Mon Oct 23 13:25:32 2006 (453C8384)
    CheckSum:         000DBD03
    ImageSize:        000DE000
    File version:     6.0.5840.16385
    Product version:  6.0.5840.16385
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     PEAuth.sys
    OriginalFilename: PEAuth.sys
    ProductVersion:   6.0.5840.16385
    FileVersion:      6.0.5840.16385 (VISTA_RTM_CLIENT_akaDMD.061022-1800)
    FileDescription:  Protected Environment Authentication and Authorization Export Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
9a49a000 9a4c0000   ipnat      (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\ipnat.sys
    Image name: ipnat.sys
    Timestamp:        Thu Nov 02 13:28:09 2006 (4549B321)
    CheckSum:         0001A08F
    ImageSize:        00026000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0

Unloaded modules:
84b30000 84b38000   drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
84403000 84410000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
84422000 8442d000   dump_ataport.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
84b50000 84b58000   dump_atapi.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000

 

[froemken]

Ein interessantes Problem. Wie du schon sagst: Google bringt nicht viel. Grade mal 3 Einträge. 1. Interessant. 2. Hierhin. 3. Müll.

Der 1te Eintrag sagt mir das diese Software:

http://www.pcfreunde.de/download/detail-10338/outlook-express-protector.html

hier. diese Einträge mit dieser SYS-Datei angelegt hat. Heiß für mich: Ab in den abgesicherten Modus und diese Software entfernen. Im schlimmsten Fall diese Datei im Ordner Windows/System32/drivers mal umbenennen oder vorher sichern und löschen. Dann kann der darauf zugreifende Dienst nicht gestartet werden.

Was mich wundert ist die Benennung von FDC***.sys wo FDC in der EDV sehr oft für FloppyDiscController steht. Vielleicht auch da mal schaun. Kabel abmachen. Ich glaubs wirklich nicht, aber da du der Einzige bist mit diesem Problem kannst du nur ausprobieren.

Was mich wundert ist, dass Outlook Express Protector einen "Treiber" installiert?!?! Wofür denn? Für mich frisst sich diese Software viel zu sehr ins System rein nur um einen Passwortschutz zu verbessern.

Kurz: Entferne diese Software wie oben beschrieben und installier dir Thunderbird oder durchwühl' hier mal den Downloadbereich:

http://download.winboard.org/files.php?cat=31

Dort gibt es viele gute/bessere Alternativen zu Outlook-Express.

Koma-Mail: Hab ich selbst noch nicht probiert, aber steht bei mir auf Platz 1 meiner noch zu testenden Softwareliste:
http://download.winboard.org/details.php?file=1185

Und ganz klar Thunderbird:
http://download.winboard.org/details.php?file=212

Letzte Möglichkeit wäre vielleicht auch eine Systemwiederherstellung zu Datum XXX.

Stefan

 

[Punkt]

Super vielen Dank!

Ich hab zwar noch keine freigabe das ding komplett zu löschen aber ich hab den treiber umbenannt und nun läuft er und läuft und läuft...

 

[froemken]

Hey Wahnsinn,

das nenn ich mal ne Erfolgsmeldung *freu*

Also...viel Spaß damit.

Stefan

 

[imaetz70]

@Punkt,

mach mal den haken bei "gelöst" wenn dein problem gelöst ist.