cz777 Posted March 10, 2012 Share Posted March 10, 2012 Address To Address Size Time Stamp Time String Product Name File Description File Version Company Full Path ndis.sys ndis.sys+bfe07 fffff880`0142a000 fffff880`0151d000 0x000f3000 0x4ce79392 11/20/2010 4:23:30 AM ntoskrnl.exe ntoskrnl.exe+7c1e9 fffff800`02e12000 fffff800`033fb000 0x005e9000 0x4e02aaa3 6/22/2011 9:53:23 PM Microsoft® Windows® Operating System NT Kernel & System 6.1.7601.17640 (win7sp1_gdr.110622-1506) Microsoft Corporation C:\Windows\system32\ntoskrnl.exe tdx.sys tdx.sys+12bd9 fffff880`02c00000 fffff880`02c22000 0x00022000 0x4ce79332 11/20/2010 4:21:54 AM hal.dll fffff800`033fb000 fffff800`03444000 0x00049000 0x4ce7c669 11/20/2010 8:00:25 AM kdcom.dll fffff800`00b9f000 fffff800`00ba9000 0x0000a000 0x4d4d8061 2/5/2011 11:52:49 AM mcupdate_GenuineIntel.dll fffff880`00c9f000 fffff880`00cee000 0x0004f000 0x4ce7c737 11/20/2010 8:03:51 AM PSHED.dll fffff880`00cee000 fffff880`00d02000 0x00014000 0x4a5be027 7/13/2009 8:32:23 PM Microsoft® Windows® Operating System Platform Specific Hardware Error Driver 6.1.7600.16385 (win7_rtm.090713-1255) Microsoft Corporation C:\Windows\system32\PSHED.dll CLFS.SYS fffff880`00d02000 fffff880`00d60000 0x0005e000 0x4a5bc11d 7/13/2009 6:19:57 PM CI.dll fffff880`00e8b000 fffff880`00f4b000 0x000c0000 0x4ce7c944 11/20/2010 8:12:36 AM Wdf01000.sys fffff880`00f4b000 fffff880`00fef000 0x000a4000 0x4a5bc19f 7/13/2009 6:22:07 PM WDFLDR.SYS fffff880`00fef000 fffff880`00ffe000 0x0000f000 0x4a5bc11a 7/13/2009 6:19:54 PM ACPI.sys fffff880`00e00000 fffff880`00e57000 0x00057000 0x4ce79294 11/20/2010 4:19:16 AM WMILIB.SYS fffff880`00e57000 fffff880`00e60000 0x00009000 0x4a5bc117 7/13/2009 6:19:51 PM msisadrv.sys fffff880`00e60000 fffff880`00e6a000 0x0000a000 0x4a5bc0fe 7/13/2009 6:19:26 PM pci.sys fffff880`00d60000 fffff880`00d93000 0x00033000 0x4ce7928f 11/20/2010 4:19:11 AM vdrvroot.sys fffff880`00e6a000 fffff880`00e77000 0x0000d000 0x4a5bcadb 7/13/2009 7:01:31 PM partmgr.sys fffff880`00d93000 fffff880`00da8000 0x00015000 0x4ce792c0 11/20/2010 4:20:00 AM volmgr.sys fffff880`00da8000 fffff880`00dbd000 0x00015000 0x4ce792a0 11/20/2010 4:19:28 AM volmgrx.sys fffff880`00c00000 fffff880`00c5c000 0x0005c000 0x4ce792eb 11/20/2010 4:20:43 AM pciide.sys fffff880`00e77000 fffff880`00e7e000 0x00007000 0x4a5bc115 7/13/2009 6:19:49 PM PCIIDEX.SYS fffff880`00c5c000 fffff880`00c6c000 0x00010000 0x4a5bc114 7/13/2009 6:19:48 PM mountmgr.sys fffff880`00c6c000 fffff880`00c86000 0x0001a000 0x4ce79299 11/20/2010 4:19:21 AM atapi.sys fffff880`00e7e000 fffff880`00e87000 0x00009000 0x4a5bc113 7/13/2009 6:19:47 PM ataport.SYS fffff880`00dbd000 fffff880`00de7000 0x0002a000 0x4ce79293 11/20/2010 4:19:15 AM amdxata.sys fffff880`00de7000 fffff880`00df2000 0x0000b000 0x4ba3a3ca 3/19/2010 11:18:18 AM fltmgr.sys fffff880`01080000 fffff880`010cc000 0x0004c000 0x4ce7929c 11/20/2010 4:19:24 AM fileinfo.sys fffff880`010cc000 fffff880`010e0000 0x00014000 0x4a5bc481 7/13/2009 6:34:25 PM Ntfs.sys fffff880`0125b000 fffff880`013fe000 0x001a3000 0x4d79997b 3/10/2011 10:39:39 PM msrpc.sys fffff880`010e0000 fffff880`0113e000 0x0005e000 0x4ce79334 11/20/2010 4:21:56 AM ksecdd.sys fffff880`01200000 fffff880`0121b000 0x0001b000 0x4ec483fd 11/16/2011 10:48:13 PM cng.sys fffff880`0113e000 fffff880`011b0000 0x00072000 0x4ec48c35 11/16/2011 11:23:17 PM pcw.sys fffff880`0121b000 fffff880`0122c000 0x00011000 0x4a5bc0ff 7/13/2009 6:19:27 PM Fs_Rec.sys fffff880`0122c000 fffff880`01236000 0x0000a000 0x4a5bc111 7/13/2009 6:19:45 PM NETIO.SYS fffff880`0151d000 fffff880`0157d000 0x00060000 0x4ce79381 11/20/2010 4:23:13 AM ksecpkg.sys fffff880`0157d000 fffff880`015a8000 0x0002b000 0x4ec48c50 11/16/2011 11:23:44 PM tcpip.sys fffff880`01608000 fffff880`0180c000 0x00204000 0x4e83e948 9/28/2011 10:43:04 PM fwpkclnt.sys fffff880`0180c000 fffff880`01856000 0x0004a000 0x4ce79321 11/20/2010 4:21:37 AM volsnap.sys fffff880`01856000 fffff880`018a2000 0x0004c000 0x4ce792c8 11/20/2010 4:20:08 AM spldr.sys fffff880`018a2000 fffff880`018aa000 0x00008000 0x4a0858bb 5/11/2009 11:56:27 AM rdyboost.sys fffff880`018aa000 fffff880`018e4000 0x0003a000 0x4ce7982e 11/20/2010 4:43:10 AM mup.sys fffff880`018e4000 fffff880`018f6000 0x00012000 0x4a5bc201 7/13/2009 6:23:45 PM hwpolicy.sys fffff880`018f6000 fffff880`018ff000 0x00009000 0x4ce7927e 11/20/2010 4:18:54 AM fvevol.sys fffff880`018ff000 fffff880`01939000 0x0003a000 0x4ce793b6 11/20/2010 4:24:06 AM disk.sys fffff880`01939000 fffff880`0194f000 0x00016000 0x4a5bc11d 7/13/2009 6:19:57 PM CLASSPNP.SYS fffff880`0194f000 fffff880`0197f000 0x00030000 0x4ce7929b 11/20/2010 4:19:23 AM cdrom.sys fffff880`019b5000 fffff880`019df000 0x0002a000 0x4ce79298 11/20/2010 4:19:20 AM cmdguard.sys fffff880`02cb2000 fffff880`02d42000 0x00090000 0x4e8f3731 10/7/2011 12:30:25 PM Null.SYS fffff880`02d42000 fffff880`02d4b000 0x00009000 0x4a5bc109 7/13/2009 6:19:37 PM Beep.SYS fffff880`02d4b000 fffff880`02d52000 0x00007000 0x4a5bca8d 7/13/2009 7:00:13 PM ehdrv.sys fffff880`02d52000 fffff880`02d79000 0x00027000 0x4e09840e 6/28/2011 2:34:38 AM vga.sys fffff880`02d79000 fffff880`02d87000 0x0000e000 0x4a5bc587 7/13/2009 6:38:47 PM VIDEOPRT.SYS fffff880`02d87000 fffff880`02dac000 0x00025000 0x4a5bc58b 7/13/2009 6:38:51 PM watchdog.sys fffff880`02dac000 fffff880`02dbc000 0x00010000 0x4a5bc53f 7/13/2009 6:37:35 PM RDPCDD.sys fffff880`02dbc000 fffff880`02dc5000 0x00009000 0x4a5bce62 7/13/2009 7:16:34 PM rdpencdd.sys fffff880`02dc5000 fffff880`02dce000 0x00009000 0x4a5bce62 7/13/2009 7:16:34 PM rdprefmp.sys fffff880`02dce000 fffff880`02dd7000 0x00009000 0x4a5bce63 7/13/2009 7:16:35 PM Msfs.SYS fffff880`02dd7000 fffff880`02de2000 0x0000b000 0x4a5bc113 7/13/2009 6:19:47 PM Npfs.SYS fffff880`02de2000 fffff880`02df3000 0x00011000 0x4a5bc114 7/13/2009 6:19:48 PM TDI.SYS fffff880`02c22000 fffff880`02c2f000 0x0000d000 0x4ce7933e 11/20/2010 4:22:06 AM cmdhlp.sys fffff880`02c2f000 fffff880`02c3b000 0x0000c000 0x4e8f36e5 10/7/2011 12:29:09 PM bckd.sys fffff880`02c3b000 fffff880`02c58000 0x0001d000 0x4df2909a 6/10/2011 4:46:02 PM afd.sys fffff880`03cce000 fffff880`03d57000 0x00089000 0x4efa9418 12/27/2011 10:59:20 PM netbt.sys fffff880`03d57000 fffff880`03d9c000 0x00045000 0x4ce79386 11/20/2010 4:23:18 AM wfplwf.sys fffff880`03d9c000 fffff880`03da5000 0x00009000 0x4a5bccb6 7/13/2009 7:09:26 PM pacer.sys fffff880`03da5000 fffff880`03dcb000 0x00026000 0x4ce7a862 11/20/2010 5:52:18 AM inspect.sys fffff880`03dcb000 fffff880`03de3000 0x00018000 0x4e8f36d5 10/7/2011 12:28:53 PM netbios.sys fffff880`03de3000 fffff880`03df2000 0x0000f000 0x4a5bccb6 7/13/2009 7:09:26 PM wanarp.sys fffff880`03c00000 fffff880`03c1b000 0x0001b000 0x4ce7a874 11/20/2010 5:52:36 AM termdd.sys fffff880`03c1b000 fffff880`03c2f000 0x00014000 0x4ce7ab0c 11/20/2010 6:03:40 AM rdbss.sys fffff880`03c2f000 fffff880`03c80000 0x00051000 0x4ce79497 11/20/2010 4:27:51 AM nsiproxy.sys fffff880`03c80000 fffff880`03c8c000 0x0000c000 0x4a5bc15e 7/13/2009 6:21:02 PM mssmbios.sys fffff880`03c8c000 fffff880`03c97000 0x0000b000 0x4a5bc3be 7/13/2009 6:31:10 PM discache.sys fffff880`03c97000 fffff880`03ca6000 0x0000f000 0x4a5bc52e 7/13/2009 6:37:18 PM dfsc.sys fffff880`03ca6000 fffff880`03cc4000 0x0001e000 0x4ce79447 11/20/2010 4:26:31 AM blbdrive.sys fffff880`02c58000 fffff880`02c69000 0x00011000 0x4a5bc4df 7/13/2009 6:35:59 PM tunnel.sys fffff880`02c69000 fffff880`02c8f000 0x00026000 0x4ce7a846 11/20/2010 5:51:50 AM rdpdispm.sys fffff880`03cc4000 fffff880`03ccd000 0x00009000 0x4c6dbc2b 8/19/2010 6:20:11 PM intelppm.sys fffff880`02c8f000 fffff880`02ca5000 0x00016000 0x4a5bc0fd 7/13/2009 6:19:25 PM nvlddmkm.sys fffff880`0f0bb000 fffff880`0fd32000 0x00c77000 0x4e99233b 10/15/2011 1:07:55 AM nvBridge.kmd fffff880`0fd32000 fffff880`0fd33180 0x00001180 0x4ba94a90 3/23/2010 6:11:12 PM dxgkrnl.sys fffff880`04073000 fffff880`04167000 0x000f4000 0x4ce799fa 11/20/2010 4:50:50 AM dxgmms1.sys fffff880`04167000 fffff880`041ad000 0x00046000 0x4ce799c1 11/20/2010 4:49:53 AM HDAudBus.sys fffff880`041ad000 fffff880`041d1000 0x00024000 0x4ce7a65e 11/20/2010 5:43:42 AM e1e6232e.sys fffff880`04000000 fffff880`0404c000 0x0004c000 0x4df7ef78 6/14/2011 6:32:08 PM usbuhci.sys fffff880`0404c000 fffff880`04059000 0x0000d000 0x4d8c0bff 3/24/2011 10:29:03 PM USBPORT.SYS fffff880`0fd34000 fffff880`0fd8a000 0x00056000 0x4d8c0c08 3/24/2011 10:29:12 PM usbehci.sys fffff880`04059000 fffff880`0406a000 0x00011000 0x4d8c0c00 3/24/2011 10:29:04 PM Rtnic64.sys fffff880`041d1000 fffff880`041e5000 0x00014000 0x47f0791a 3/31/2008 12:39:38 AM fdc.sys fffff880`041e5000 fffff880`041f2000 0x0000d000 0x4a5bcab6 7/13/2009 7:00:54 PM CompositeBus.sys fffff880`0fd8a000 fffff880`0fd9a000 0x00010000 0x4ce7a3ed 11/20/2010 5:33:17 AM AgileVpn.sys fffff880`0fd9a000 fffff880`0fdb0000 0x00016000 0x4a5bccf0 7/13/2009 7:10:24 PM rasl2tp.sys fffff880`0fdb0000 fffff880`0fdd4000 0x00024000 0x4ce7a872 11/20/2010 5:52:34 AM ndistapi.sys fffff880`041f2000 fffff880`041fe000 0x0000c000 0x4a5bccd8 7/13/2009 7:10:00 PM ndiswan.sys fffff880`0f000000 fffff880`0f02f000 0x0002f000 0x4ce7a870 11/20/2010 5:52:32 AM raspppoe.sys fffff880`0f02f000 fffff880`0f04a000 0x0001b000 0x4a5bcce9 7/13/2009 7:10:17 PM raspptp.sys fffff880`0f04a000 fffff880`0f06b000 0x00021000 0x4ce7a86f 11/20/2010 5:52:31 AM rassstp.sys fffff880`0f06b000 fffff880`0f085000 0x0001a000 0x4a5bccf1 7/13/2009 7:10:25 PM kbdclass.sys fffff880`0f085000 fffff880`0f094000 0x0000f000 0x4a5bc116 7/13/2009 6:19:50 PM mouclass.sys fffff880`0f094000 fffff880`0f0a3000 0x0000f000 0x4a5bc116 7/13/2009 6:19:50 PM swenum.sys fffff880`041fe000 fffff880`041ff480 0x00001480 0x4a5bca92 7/13/2009 7:00:18 PM ks.sys fffff880`015a8000 fffff880`015eb000 0x00043000 0x4ce7a3f3 11/20/2010 5:33:23 AM umbus.sys fffff880`0f0a3000 fffff880`0f0b5000 0x00012000 0x4ce7a695 11/20/2010 5:44:37 AM usbhub.sys fffff880`01000000 fffff880`0105a000 0x0005a000 0x4d8c0c15 3/24/2011 10:29:25 PM NDProxy.SYS fffff880`0fdd4000 fffff880`0fde9000 0x00015000 0x4ce7a864 11/20/2010 5:52:20 AM HdAudio.sys fffff880`03ee4000 fffff880`03f40000 0x0005c000 0x4ce7a687 11/20/2010 5:44:23 AM portcls.sys fffff880`03f40000 fffff880`03f7d000 0x0003d000 0x4a5bcc03 7/13/2009 7:06:27 PM drmk.sys fffff880`03f7d000 fffff880`03f9f000 0x00022000 0x4a5bd8e5 7/13/2009 8:01:25 PM ksthunk.sys fffff880`03f9f000 fffff880`03fa4200 0x00005200 0x4a5bca93 7/13/2009 7:00:19 PM hidusb.sys fffff880`03fa5000 fffff880`03fb3000 0x0000e000 0x4ce7a665 11/20/2010 5:43:49 AM HIDCLASS.SYS fffff880`03fb3000 fffff880`03fcc000 0x00019000 0x4ce7a665 11/20/2010 5:43:49 AM HIDPARSE.SYS fffff880`03fcc000 fffff880`03fd4080 0x00008080 0x4a5bcbf9 7/13/2009 7:06:17 PM USBD.SYS fffff880`03fd5000 fffff880`03fd6f00 0x00001f00 0x4d8c0bfb 3/24/2011 10:28:59 PM kbdhid.sys fffff880`03fd7000 fffff880`03fe5000 0x0000e000 0x4ce7a3f5 11/20/2010 5:33:25 AM LHidFilt.Sys fffff880`03fe5000 fffff880`03ffb000 0x00016000 0x4e60764d 9/2/2011 1:23:09 AM mouhid.sys fffff880`03e00000 fffff880`03e0d000 0x0000d000 0x4a5bca94 7/13/2009 7:00:20 PM LMouFilt.Sys fffff880`03e0d000 fffff880`03e21000 0x00014000 0x4e607653 9/2/2011 1:23:15 AM USBSTOR.SYS fffff880`03e21000 fffff880`03e3c000 0x0001b000 0x4d79a6fc 3/10/2011 11:37:16 PM usbprint.sys fffff880`03e3c000 fffff880`03e48000 0x0000c000 0x4a5bd37a 7/13/2009 7:38:18 PM fastfat.SYS fffff880`03e48000 fffff880`03e7e000 0x00036000 0x4a5bc1f0 7/13/2009 6:23:28 PM win32k.sys fffff960`000b0000 fffff960`003c5000 0x00315000 0x4f10ff24 1/13/2012 11:05:56 PM Dxapi.sys fffff880`03e7e000 fffff880`03e8a000 0x0000c000 0x4a5bc574 7/13/2009 6:38:28 PM monitor.sys fffff880`03e8a000 fffff880`03e98000 0x0000e000 0x4a5bc58c 7/13/2009 6:38:52 PM TSDDD.dll fffff960`005f0000 fffff960`005fa000 0x0000a000 0x00000000 cdd.dll fffff960`00770000 fffff960`00797000 0x00027000 0x4ce7c546 11/20/2010 7:55:34 AM luafv.sys fffff880`03e98000 fffff880`03ebb000 0x00023000 0x4a5bc295 7/13/2009 6:26:13 PM eamonm.sys fffff880`038a5000 fffff880`03987000 0x000e2000 0x4e37c469 8/2/2011 4:33:29 AM WudfPf.sys fffff880`03987000 fffff880`039a8000 0x00021000 0x4ce7a624 11/20/2010 5:42:44 AM crashdmp.sys fffff880`039a8000 fffff880`039b6000 0x0000e000 0x4a5bcabd 7/13/2009 7:01:01 PM dump_dumpata.sys fffff880`039b6000 fffff880`039c2000 0x0000c000 0x4a5bc113 7/13/2009 6:19:47 PM dump_atapi.sys fffff880`039c2000 fffff880`039cb000 0x00009000 0x4a5bc113 7/13/2009 6:19:47 PM dump_dumpfve.sys fffff880`039cb000 fffff880`039de000 0x00013000 0x4a5bc18f 7/13/2009 6:21:51 PM appid.sys fffff880`039de000 fffff880`039f3000 0x00015000 0x4ce79f8d 11/20/2010 5:14:37 AM fssfltr.sys fffff880`03800000 fffff880`03810000 0x00010000 0x4dcdb2ea 5/13/2011 5:38:34 PM lltdio.sys fffff880`03810000 fffff880`03825000 0x00015000 0x4a5bcc92 7/13/2009 7:08:50 PM ndisuio.sys fffff880`03825000 fffff880`03838000 0x00013000 0x4ce7a7e0 11/20/2010 5:50:08 AM rspndr.sys fffff880`03838000 fffff880`03850000 0x00018000 0x4a5bcc92 7/13/2009 7:08:50 PM HTTP.sys fffff880`07cc7000 fffff880`07d90000 0x000c9000 0x4ce793ce 11/20/2010 4:24:30 AM srvnet.sys fffff880`07d90000 fffff880`07dc1000 0x00031000 0x4dba2aff 4/28/2011 10:05:35 PM bowser.sys fffff880`07dc1000 fffff880`07ddf000 0x0001e000 0x4d649328 2/22/2011 11:55:04 PM mpsdrv.sys fffff880`07ddf000 fffff880`07df7000 0x00018000 0x4a5bcc79 7/13/2009 7:08:25 PM mrxdav.sys fffff880`07c00000 fffff880`07c28000 0x00028000 0x4ce79452 11/20/2010 4:26:42 AM mrxsmb.sys fffff880`07c28000 fffff880`07c55000 0x0002d000 0x4db78226 4/26/2011 9:40:38 PM mrxsmb10.sys fffff880`07c55000 fffff880`07ca3000 0x0004e000 0x4e17c104 7/8/2011 9:46:28 PM mrxsmb20.sys fffff880`07ca3000 fffff880`07cc7000 0x00024000 0x4db781e9 4/26/2011 9:39:37 PM srv2.sys fffff880`07e86000 fffff880`07eef000 0x00069000 0x4dba2b0a 4/28/2011 10:05:46 PM srv.sys fffff880`07eef000 fffff880`07f87000 0x00098000 0x4dba2b1e 4/28/2011 10:06:06 PM atksgt.sys fffff880`07f87000 fffff880`07f9e000 0x00017000 0x4dea4db2 6/4/2011 10:22:26 AM epfwwfpr.sys fffff880`07f9e000 fffff880`07fc2000 0x00024000 0x4e098301 6/28/2011 2:30:09 AM lirsgt.sys fffff880`07fc2000 fffff880`07fd0000 0x0000e000 0x4ac0d1eb 9/28/2009 10:10:35 AM peauth.sys fffff880`09a3e000 fffff880`09ae4000 0x000a6000 0x4a5bd8df 7/13/2009 8:01:19 PM secdrv.SYS fffff880`09ae4000 fffff880`09aef000 0x0000b000 0x4508052e 9/13/2006 8:18:38 AM tcpipreg.sys fffff880`09aef000 fffff880`09b01000 0x00012000 0x4ce7a844 11/20/2010 5:51:48 AM asyncmac.sys fffff880`09b72000 fffff880`09b7d000 0x0000b000 0x4a5bcce5 7/13/2009 7:10:13 PM WUDFRd.sys fffff880`09b7d000 fffff880`09bae000 0x00031000 0x4ce7a654 11/20/2010 5:43:32 AM mbam.sys fffff880`09bae000 fffff880`09bb8000 0x0000a000 0x4eb140a4 11/2/2011 8:07:48 AM rasacd.sys fffff880`09bb8000 fffff880`09bc1000 0x00009000 0x4a5bcce1 7/13/2009 7:10:09 PM ok here is dump specs anybody can help with this thing ,thank you please Link to comment Share on other sites More sharing options...
Administrator Tarun Posted March 29, 2012 Administrator Share Posted March 29, 2012 Unfortunately this cannot really tell us anything. We need the actual .dmp file attached. Simply zip it first and then attach it. Link to comment Share on other sites More sharing options...
cz777 Posted June 1, 2012 Author Share Posted June 1, 2012 i am back from hell with comodo software and iobit -the two caused more trouble stay away from both !!! Link to comment Share on other sites More sharing options...
Administrator Tarun Posted June 1, 2012 Administrator Share Posted June 1, 2012 Sounds like a good idea to me. Both companies have shady practices. Comodo has issued SSL certificates to known malware websites and even allowed malware through their firewall as trusted. IOBit has stolen Malwarebytes definition database that is used for the Malwarebytes Anti-Malware application and IOBit used it in their own products without permission. Link to comment Share on other sites More sharing options...
cz777 Posted June 27, 2012 Author Share Posted June 27, 2012 Sounds like a good idea to me. Both companies have shady practices. Comodo has issued SSL certificates to known malware websites and even allowed malware through their firewall as trusted. IOBit has stolen Malwarebytes definition database that is used for the Malwarebytes Anti-Malware application and IOBit used it in their own products without permission. wow i dont know of this ...this must be made a sticky for others to learn from before they too are burned up !!! Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.