Strange Driver loaded

OSR_Community_User · April 14, 2011, 5:53pm

All,

I hope I have posted this in the correct place. After seeing the commercial for 100th time I went to www.mycleanpc.com and downloaded the app. I decided to first throw it in my virtual machine and watch what it did. After spending a considerable amount of time wading through the Sysinternals suite I noticed this program installs a “device driver” (hence me posting here.) When I broke into my VM with Windbg I noticed that it was siting the PE file as the symbol file. Is this normal? I have seen .sys and .dll listed as symbol files before but never an exe file. Also this “device driver” seems to persist after I killed (or at least I thought I did) all instances of the program. I know this isn’t exactly a driver question, but I was hoping that someone here could help me out a little bit.

Thank you in advance,

-JC

mm1 · April 14, 2011, 5:55pm

Do you mean it was listed as having ‘export symbols?’

mm

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@comcast.net
Sent: Thursday, April 14, 2011 5:53 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] Strange Driver loaded

All,

I hope I have posted this in the correct place. After seeing the commercial
for 100th time I went to www.mycleanpc.com and downloaded the app. I decided
to first throw it in my virtual machine and watch what it did. After
spending a considerable amount of time wading through the Sysinternals suite
I noticed this program installs a “device driver” (hence me posting here.)
When I broke into my VM with Windbg I noticed that it was siting the PE file
as the symbol file. Is this normal? I have seen .sys and .dll listed as
symbol files before but never an exe file. Also this “device driver” seems
to persist after I killed (or at least I thought I did) all instances of the
program. I know this isn’t exactly a driver question, but I was hoping that
someone here could help me out a little bit.

Thank you in advance,

-JC

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

mm1 · April 14, 2011, 5:57pm

Regarding your second question, it’s totally possible that a driver might
hang around after being loaded by a program.

mm

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@comcast.net
Sent: Thursday, April 14, 2011 5:53 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] Strange Driver loaded

All,

I hope I have posted this in the correct place. After seeing the commercial
for 100th time I went to www.mycleanpc.com and downloaded the app. I decided
to first throw it in my virtual machine and watch what it did. After
spending a considerable amount of time wading through the Sysinternals suite
I noticed this program installs a “device driver” (hence me posting here.)
When I broke into my VM with Windbg I noticed that it was siting the PE file
as the symbol file. Is this normal? I have seen .sys and .dll listed as
symbol files before but never an exe file. Also this “device driver” seems
to persist after I killed (or at least I thought I did) all instances of the
program. I know this isn’t exactly a driver question, but I was hoping that
someone here could help me out a little bit.

Thank you in advance,

-JC

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

OSR_Community_User · April 14, 2011, 6:03pm

mm - No sir I don’t think so. When I break into the VM; click on Debug and modules I get a list of all loaded and previously loaded modules. In there it lists CDregcleaner as a loaded module. When I go over to the right I see a column labeled Symbol File and in it listed it reads CDregclean.exe . Also in the column to the left it states that there are no symbols.

Also you would think after a program has been terminated there would be clean up routines that would unload whatever driver they may have been using. I also find it strange that a program that isn’t AV is using a device driver. If this were some sort of AV I most likely would only be posting about the use of a PE file.

Thank you again for your help,

-JC

mm1 · April 14, 2011, 6:30pm

I’m a command line person - I’ve never used the modules list thing - so
you’ll have to bear with me, because I’m not really sure what you’re saying.

Just to be clear:

a.) You’ve started a kernel debugging connection to your VM?

b.) Could you try the following and please post the output:

.reload -f -n
Lml

Thanks,

mm

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@comcast.net
Sent: Thursday, April 14, 2011 6:03 PM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] Strange Driver loaded

mm - No sir I don’t think so. When I break into the VM; click on Debug and
modules I get a list of all loaded and previously loaded modules. In there
it lists CDregcleaner as a loaded module. When I go over to the right I see
a column labeled Symbol File and in it listed it reads CDregclean.exe . Also
in the column to the left it states that there are no symbols.

Also you would think after a program has been terminated there would be
clean up routines that would unload whatever driver they may have been
using. I also find it strange that a program that isn’t AV is using a device
driver. If this were some sort of AV I most likely would only be posting
about the use of a PE file.

Thank you again for your help,

-JC

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

Tim_Roberts · April 14, 2011, 6:36pm

xxxxx@comcast.net wrote:

Also you would think after a program has been terminated there would be clean up routines that would unload whatever driver they may have been using.

It depends. With a plug-and-play driver, closing the last handle allows
it to be unloaded. With a legacy driver, that’s not the case. Opening
and closing are separate from starting and stopping. It stays in memory
until someone stops the service via the service manager.

I also find it strange that a program that isn’t AV is using a device driver. If this were some sort of AV I most likely would only be posting about the use of a PE file.

There are LOTS of miscellaneous programs that load their own drivers.
Many of the SysInternals tools do so.

–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

OSR_Community_User · April 14, 2011, 6:50pm

Tim,

Thank you very much for the in sight. I figured as much for the Sysinternals suite. Any idea how to trigger a flush? I don’t think it’s going show up in the SCM. Are you saying that I shouldn’t be worried? or at least interested?

MM - I have to do something to my symbols or something but I will post the output in a second. And yes Windbg is attached to my VM through a named pipe.

Thank you both for your help!

-JC

OSR_Community_User · April 14, 2011, 6:53pm

MM - Windbg instructed me to run !sym noisy which produced A LOT of output. Do you still want me to post it?

Thank you for your help

-JC

mm1 · April 14, 2011, 6:54pm

Please.

mm

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@comcast.net
Sent: Thursday, April 14, 2011 6:53 PM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] Strange Driver loaded

MM - Windbg instructed me to run !sym noisy which produced A LOT of output.
Do you still want me to post it?

Thank you for your help

-JC

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

Tim_Roberts · April 14, 2011, 6:55pm

xxxxx@comcast.net wrote:

Thank you very much for the in sight. I figured as much for the Sysinternals suite. Any idea how to trigger a flush? I don’t think it’s going show up in the SCM. Are you saying that I shouldn’t be worried? or at least interested?

If it is a legacy driver, then it will be in SCM. You should be able to
find it in the Services key, and you should be able to say “net stop
xxxxxx”. Some legacy drivers cannot be unloaded; if there is no
DriverUnload entry point registered, then it lives in memory until reboot.

Being allergic to hype, I am convinced that those “my clean PC” ads are
simply money-making opportunities that operate primarily on the placebo
effect.

–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

OSR_Community_User · April 14, 2011, 7:03pm

Tim,

I could not agree more. I will admit the whole point of it going in my VM was so I could rip it apart and reassure myself that’s it’s 100% pure C-R-A-P. So far I am winning.

Martin -

Connected to Windows XP 2600 x86 compatible target at (Thu Apr 14 18:47:03.308 2011 (GMT-4)), ptr64 FALSE
Loading Kernel Symbols
…*** ERROR: Symbol file could not be found. Defaulted to export symbols for VBoxGuest.sys -
…*** ERROR: Symbol file could not be found. Defaulted to export symbols for VBoxMouse.sys -
…*** ERROR: Symbol file could not be found. Defaulted to export symbols for VBoxVideo.sys -
…
…

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

…*** ERROR: Symbol file could not be found. Defaulted to export symbols for VBoxSF.sys -
…*** ERROR: Module load completed but symbols could not be loaded for VBoxDisp.dll
.*** ERROR: Module load completed but symbols could not be loaded for ATMFD.DLL
…*** ERROR: Module load completed but symbols could not be loaded for PROCMON20.SYS
.*** ERROR: Module load completed but symbols could not be loaded for PROCEXP113.SYS

Loading unloaded module list
…
kd> !sym noisy
noisy mode - symbol prompts on
kd> .reload -f -n
Connected to Windows XP 2600 x86 compatible target at (Thu Apr 14 18:51:12.863 2011 (GMT-4)), ptr64 FALSE
DBGHELP: nt - public symbols
d:\symbols\ntkrnlpa.pdb\85B0BD4E86DC47DA8A64F89B5F5013011\ntkrnlpa.pdb
Loading Kernel Symbols
.
DBGHELP: hal - public symbols
d:\symbols\halacpi.pdb\52475CC399844839AD8ADF647D0AF71A1\halacpi.pdb
.
DBGHELP: kdcom - public symbols
d:\symbols\kdcom.pdb\3B7D83461\kdcom.pdb
.
DBGHELP: BOOTVID - public symbols
d:\symbols\bootvid.pdb\3B7D83451\bootvid.pdb
.
DBGHELP: ACPI - public symbols
d:\symbols\acpi.pdb\3E23085EEF9C4EB5AC40C386278F6D7E1\acpi.pdb
.
DBGHELP: WMILIB - public symbols
d:\symbols\wmilib.pdb\E4C3A9A4158C4C51BC4E2B46CA108AA51\wmilib.pdb
.
DBGHELP: pci - public symbols
d:\symbols\pci.pdb\46927BAFB8E740B6B4BAC813675A82871\pci.pdb
.
DBGHELP: isapnp - public symbols
d:\symbols\isapnp.pdb\C88742CDDA0641E39B06BD20309F22991\isapnp.pdb
.
DBGHELP: compbatt - public symbols
d:\symbols\compbatt.pdb\C6CF5EE568B644F196AF615E1EFB13F11\compbatt.pdb
.
DBGHELP: BATTC - public symbols
d:\symbols\battc.pdb\A0B7067946B54D499470B3F3FED1E9BA1\battc.pdb
.
DBGHELP: intelide - public symbols
d:\symbols\intelide.pdb\359D0AEA45E240F19D18338CF171A03E1\intelide.pdb
.
DBGHELP: PCIIDEX - public symbols
d:\symbols\pciidex.pdb\E5F499C1EEAB4ECDB880F669D946ACC81\pciidex.pdb
.
DBGHELP: MountMgr - public symbols
d:\symbols\mountmgr.pdb\1E7C54F0C4714B9FB389A50F6A5FBDDA1\mountmgr.pdb
.
DBGHELP: ftdisk - public symbols
d:\symbols\ftdisk.pdb\370ADA20D01E457AB6AC095AF8D099681\ftdisk.pdb
.
DBGHELP: dmload - public symbols
d:\symbols\dmload.pdb\28B0BFC4C7864BBD92DD888A54E9FE841\dmload.pdb
.
DBGHELP: dmio - public symbols
d:\symbols\dmio.pdb\7DD31474CC0941E9B2175DDBC956E4601\dmio.pdb
.
DBGHELP: PartMgr - public symbols
d:\symbols\partmgr.pdb\2D84C75248124571A4A1066A9983AB951\partmgr.pdb
.
DBGHELP: VolSnap - public symbols
d:\symbols\volsnap.pdb\063AE2CDED15450491E240111E7E66511\volsnap.pdb
.
DBGHELP: atapi - public symbols
d:\symbols\atapi.pdb\3379CE3C730640ADA2AEC243E90016481\atapi.pdb
.
DBGHELP: disk - public symbols
d:\symbols\disk.pdb\973C93819420401FB85626ABA3E8C2E21\disk.pdb
.
DBGHELP: CLASSPNP - public symbols
d:\symbols\classpnp.pdb\79125526F95B483880DC8AC59206505E2\classpnp.pdb
.
DBGHELP: fltmgr - public symbols
d:\symbols\fltMgr.pdb\30197425FFC04385B84C0354E5035D5C1\fltMgr.pdb
.
DBGHELP: sr - public symbols
d:\symbols\sr.pdb\9D5432B7234C4CD2A8F6275B9D9AF41F1\sr.pdb
.
DBGHELP: KSecDD - public symbols
d:\symbols\ksecdd.pdb\86D6A19A8C5C46FDB54FEB4E4215C0451\ksecdd.pdb
.
SYMSRV: d:\symbols\VBoxGuest.pdb\43AA4A9FEDEE4A66861C48851EF716AF1\VBoxGuest.pdb not found
SYMSRV: http://msdl.microsoft.com/download/symbols/VBoxGuest.pdb/43AA4A9FEDEE4A66861C48851EF716AF1/VBoxGuest.pdb not found
DBGHELP: D:\tinderbox\add-3.2\out\win.x86\release\obj\VBoxGuest\VBoxGuest.pdb - file not found
*** ERROR: Symbol file could not be found. Defaulted to export symbols for VBoxGuest.sys -
DBGHELP: VBoxGuest - export symbols
.
DBGHELP: Ntfs - public symbols
d:\symbols\ntfs.pdb\AA4F4A5C7B1D4663A7E0891479090D8A2\ntfs.pdb
.
DBGHELP: NDIS - public symbols
d:\symbols\ndis.pdb\94A67EAE18514379881AE6FA7FC1C1FB2\ndis.pdb
.
DBGHELP: Mup - public symbols
d:\symbols\mup.pdb\B725137B0D634A81A0BBAE29CFB0491A2\mup.pdb
.
DBGHELP: i8042prt - public symbols
d:\symbols\i8042prt.pdb\FA66C3D83C0546E0862C49B30DF6B8022\i8042prt.pdb
.
DBGHELP: kbdclass - public symbols
d:\symbols\kbdclass.pdb\227A15B4C380417181684895714317F31\kbdclass.pdb
.
SYMSRV: d:\symbols\VBoxMouse.pdb\F1110E7FF90B4BB392557941DEABD08F1\VBoxMouse.pdb not found
SYMSRV: http://msdl.microsoft.com/download/symbols/VBoxMouse.pdb/F1110E7FF90B4BB392557941DEABD08F1/VBoxMouse.pdb not found
DBGHELP: D:\tinderbox\add-3.2\out\win.x86\release\obj\VBoxMouse\VBoxMouse.pdb - file not found
*** ERROR: Symbol file could not be found. Defaulted to export symbols for VBoxMouse.sys -
DBGHELP: VBoxMouse - export symbols
.
DBGHELP: mouclass - public symbols
d:\symbols\mouclass.pdb\1BBF200238534BE489B4DC62262BE30C1\mouclass.pdb
.
DBGHELP: parport - public symbols
d:\symbols\parport.pdb\06B3E014EF82429D9C5D3A8A07EB3C4A1\parport.pdb
.
DBGHELP: imapi - public symbols
d:\symbols\imapi.pdb\A537B922BED84478A9B778863030AD141\imapi.pdb
.
DBGHELP: cdrom - public symbols
d:\symbols\cdrom.pdb\B56E983DC60F4909843B3A38EE69F6A11\cdrom.pdb
.
DBGHELP: redbook - public symbols
d:\symbols\redbook.pdb\7F7C16B1368A40FFB21C2B184DB06CFD1\redbook.pdb
.
DBGHELP: ks - public symbols
d:\symbols\ks.pdb\6B6192FD7CD24084BD72F7BA9BB6C97C2\ks.pdb
.
SYMSRV: d:\symbols\VBoxVideo.pdb\04E2525E5CF545E6B1F6CF1DCB2EED131\VBoxVideo.pdb not found
SYMSRV: http://msdl.microsoft.com/download/symbols/VBoxVideo.pdb/04E2525E5CF545E6B1F6CF1DCB2EED131/VBoxVideo.pdb not found
DBGHELP: D:\tinderbox\add-3.2\out\win.x86\release\obj\VBoxVideo\VBoxVideo.pdb - file not found
*** ERROR: Symbol file could not be found. Defaulted to export symbols for VBoxVideo.sys -
DBGHELP: VBoxVideo - export symbols
.
DBGHELP: VIDEOPRT - public symbols
d:\symbols\videoprt.pdb\66CB8EA979A742EABCB14A11545D6EBE1\videoprt.pdb
.
DBGHELP: pcntpci5 - public symbols
d:\symbols\PCNTPCI5.pdb\3B1D39031\PCNTPCI5.pdb
.
DBGHELP: CmBatt - public symbols
d:\symbols\cmbatt.pdb\75EDB74877914FC1895A2885180DC3261\cmbatt.pdb
.
DBGHELP: audstub - public symbols
d:\symbols\audstub.pdb\6B3BF8F0C8834E7E8EFE53B7A91E2A3F1\audstub.pdb
.
DBGHELP: rasl2tp - public symbols
d:\symbols\rasl2tp.pdb\FADB1E8D59EE44EF82E7E9D8324CE21B2\rasl2tp.pdb
.
DBGHELP: ndistapi - public symbols
d:\symbols\ndistapi.pdb\B70DA9D6ECA94B7FB92387CD6C85F7AB1\ndistapi.pdb
.
DBGHELP: ndiswan - public symbols
d:\symbols\ndiswan.pdb\C119D83D0C0A49A6AABCA52A1FE1C7ED2\ndiswan.pdb
.
DBGHELP: raspppoe - public symbols
d:\symbols\raspppoe.pdb\5ADEB0D4960A4DDAA4D6C368F0E84C8F1\raspppoe.pdb
.
DBGHELP: raspptp - public symbols
d:\symbols\raspptp.pdb\D7C7E7BFE2924EA29A16BD98B0B46BCE2\raspptp.pdb
.
DBGHELP: TDI - public symbols
d:\symbols\tdi.pdb\545742C029D24374BD687966638629EB1\tdi.pdb
.
DBGHELP: psched - public symbols
d:\symbols\psched.pdb\6C6DB34AB80042ACBBFF8F28D7F579F71\psched.pdb
.
DBGHELP: msgpc - public symbols
d:\symbols\msgpc.pdb\E80C52EE74E1497EBBC1E28C15CB28811\msgpc.pdb
.
DBGHELP: ptilink - public symbols
d:\symbols\ptilink.pdb\776B55BE9F5846AA8E4590CB42866E6A1\ptilink.pdb
.
DBGHELP: raspti - public symbols
d:\symbols\raspti.pdb\B3C31E3A63DE4E868C024FEBAFF83F761\raspti.pdb
.
DBGHELP: rdpdr - public symbols
d:\symbols\rdpdr.pdb\5173CD3BBEEF44ED83A510D5364D93301\rdpdr.pdb
.
DBGHELP: termdd - public symbols
d:\symbols\termdd.pdb\C04E4855F20641ECB654BB1AD575B8611\termdd.pdb
.
DBGHELP: swenum - public symbols
d:\symbols\swenum.pdb\0581E48D203A4E0886B13659DE0EBCEA1\swenum.pdb
.
DBGHELP: update - public symbols
d:\symbols\update.pdb\840B22B4D8124987BF5F6AB05B14102C1\update.pdb
.
DBGHELP: mssmbios - public symbols
d:\symbols\mssmbios.pdb\9940673F3B9A4BD682DF9D96A12A355C1\mssmbios.pdb
.
DBGHELP: serial - public symbols
d:\symbols\serial.pdb\124F9CCD7EC14FFF9D5B376A44672D7B2\serial.pdb
.
DBGHELP: serenum - public symbols
d:\symbols\SerEnum.pdb\8A89A0C5EDB54520B1AF8E9092C3D9041\SerEnum.pdb
.
DBGHELP: NDProxy - public symbols
d:\symbols\ndproxy.pdb\64A03581616E4213BD98A2B5AB40A6841\ndproxy.pdb
.
DBGHELP: Fs_Rec - public symbols
d:\symbols\fs_rec.pdb\126BA98076424D57B0A558CDE9819EB31\fs_rec.pdb
.
DBGHELP: Null - public symbols
d:\symbols\null.pdb\77840F8CB3624E438D5D2F0913E4D30E1\null.pdb
.
DBGHELP: Beep - public symbols
d:\symbols\beep.pdb\65DC45B439164E4C9DEFF20E161DC74C1\beep.pdb
.
DBGHELP: vga - public symbols
d:\symbols\vga.pdb\F2F7C91F384C41EEA23364A598A8D81A1\vga.pdb
.
DBGHELP: mnmdd - public symbols
d:\symbols\mnmdd.pdb\9871421E8348450AA965551E05AEC4D21\mnmdd.pdb
.
DBGHELP: RDPCDD - public symbols
d:\symbols\RDPCDD.pdb\770565601E554819A9670ADF167252531\RDPCDD.pdb
.
DBGHELP: Msfs - public symbols
d:\symbols\msfs.pdb\CCBCBE0659AD4F778F44D4A38ADBF7F71\msfs.pdb
.
DBGHELP: Npfs - public symbols
d:\symbols\npfs.pdb\5A5C5ABD145D4FBBB3D6FCBA4FD80D471\npfs.pdb
.
DBGHELP: rasacd - public symbols
d:\symbols\rasacd.pdb\20B90C6127114BDC88DE7FA31D8618701\rasacd.pdb
.
DBGHELP: ipsec - public symbols
d:\symbols\ipsec.pdb\1B15EDFB9B97461196C722019CEC5CFC2\ipsec.pdb
.
DBGHELP: tcpip - public symbols
d:\symbols\tcpip.pdb\5DAF4A45ECAA4DE9B4CA8998CEB472442\tcpip.pdb
.
DBGHELP: netbt - public symbols
d:\symbols\netbt.pdb\5B324D8D9603429FB717996C98EC2E292\netbt.pdb
.
DBGHELP: afd - public symbols
d:\symbols\afd.pdb\7365F3AB401D424993E1BB4907FB03372\afd.pdb
.
DBGHELP: netbios - public symbols
d:\symbols\netbios.pdb\B7EAFDB2E9214DEFA746C4988F276B851\netbios.pdb
.
SYMSRV: d:\symbols\VBoxSF.pdb\C67A377A51924D23A459715C407D072B1\VBoxSF.pdb not found
SYMSRV: http://msdl.microsoft.com/download/symbols/VBoxSF.pdb/C67A377A51924D23A459715C407D072B1/VBoxSF.pdb not found
DBGHELP: D:\tinderbox\add-3.2\out\win.x86\release\obj\VBoxSF\VBoxSF.pdb - file not found
*** ERROR: Symbol file could not be found. Defaulted to export symbols for VBoxSF.sys -
DBGHELP: VBoxSF - export symbols
.
DBGHELP: rdbss - public symbols
d:\symbols\rdbss.pdb\B8FBFEC3A9EC42BCBAF08AC6F4CB01E12\rdbss.pdb
.
DBGHELP: mrxsmb - public symbols
d:\symbols\mrxsmb.pdb\421DD64E8A5147CEB674538A4A8C3A902\mrxsmb.pdb
.
DBGHELP: Fips - public symbols
d:\symbols\fips.pdb\55E17508A16E474A813E155BF35A75281\fips.pdb
.
DBGHELP: ipnat - public symbols
d:\symbols\ipnat.pdb\3A93546FC706432EB7E21AB4B3B655751\ipnat.pdb
.
DBGHELP: wanarp - public symbols
d:\symbols\wanarp.pdb\4A7B83723A134BFA9B018C2A3BF95F9B1\wanarp.pdb
.
DBGHELP: Cdfs - public symbols
d:\symbols\cdfs.pdb\6FA7C1B9FB96447B8608B2F31CEADB312\cdfs.pdb
.
DBGHELP: dump_atapi - public symbols
d:\symbols\atapi.pdb\3379CE3C730640ADA2AEC243E90016481\atapi.pdb
.
DBGHELP: dump_WMILIB - public symbols
d:\symbols\wmilib.pdb\E4C3A9A4158C4C51BC4E2B46CA108AA51\wmilib.pdb
.
DBGHELP: win32k - public symbols
d:\symbols\win32k.pdb\D1F7F409C579448880A6C2C2977DC4262\win32k.pdb
.
DBGHELP: Dxapi - public symbols
d:\symbols\dxapi.pdb\A63AA409BC33424F9C61C4743C15609B1\dxapi.pdb
.
DBGHELP: watchdog - public symbols
d:\symbols\watchdog.pdb\C9A0CA01311A46F19A678042B95621CF1\watchdog.pdb
.
DBGHELP: dxg - public symbols
d:\symbols\dxg.pdb\1BF735C70BDA42F7A25DCAEAA44B79001\dxg.pdb
.
DBGHELP: dxgthk - public symbols
d:\symbols\dxgthk.pdb\ED52F57C00F5452FBEBABB7C5BA826DF1\dxgthk.pdb
.
SYMSRV: d:\symbols\VBoxDisp.pdb\BA574571D47040CB948CE05F9FEAFA551\VBoxDisp.pdb not found
SYMSRV: http://msdl.microsoft.com/download/symbols/VBoxDisp.pdb/BA574571D47040CB948CE05F9FEAFA551/VBoxDisp.pdb not found
DBGHELP: D:\tinderbox\add-3.2\out\win.x86\release\obj\VBoxDisp\VBoxDisp.pdb - file not found
*** ERROR: Module load completed but symbols could not be loaded for VBoxDisp.dll
DBGHELP: VBoxDisp - no symbols loaded
.
SYMSRV: d:\symbols\atmfd.pdb\6E2CF72B78B744429ADC97CA626BE1D41\atmfd.pdb not found
SYMSRV: http://msdl.microsoft.com/download/symbols/atmfd.pdb/6E2CF72B78B744429ADC97CA626BE1D41/atmfd.pdb not found
DBGHELP: atmfd.pdb - file not found
*** ERROR: Module load completed but symbols could not be loaded for ATMFD.DLL
DBGHELP: ATMFD - no symbols loaded
.
DBGHELP: ndisuio - public symbols
d:\symbols\ndisuio.pdb\C49AA8614D0E4F23B14F5894ABB43FD41\ndisuio.pdb
.
DBGHELP: mrxdav - public symbols
d:\symbols\mrxdav.pdb\EDD7D9E6E63B43DBA5059A72CE89286E1\mrxdav.pdb
.
DBGHELP: ParVdm - public symbols
d:\symbols\parvdm.pdb\A33862D098F54FD3B903D85C5B13CDB51\parvdm.pdb
.
DBGHELP: srv - public symbols
d:\symbols\srv.pdb\B71D43221C284A288535837C8BDEA3302\srv.pdb
.
DBGHELP: HTTP - public symbols
d:\symbols\http.pdb\50709255C5174A0581BBFCD5936F83791\http.pdb
.
SYMSRV: d:\symbols\procmon20.pdb\37ACA2CA0C354E20B89B142A71E71F0A1\procmon20.pdb not found
SYMSRV: http://msdl.microsoft.com/download/symbols/procmon20.pdb/37ACA2CA0C354E20B89B142A71E71F0A1/procmon20.pdb not found
DBGHELP: c:\src\procmon\sys\objfre_w2k_x86\i386\procmon20.pdb - file not found
*** ERROR: Module load completed but symbols could not be loaded for PROCMON20.SYS
DBGHELP: PROCMON20 - no symbols loaded
.
DBGHELP: PROCEXP113.SYS is stripped. Searching for dbg file
SYMSRV: d:\symbols\PROCEXP113.dbg\490F69B11ec0\PROCEXP113.dbg not found
SYMSRV: http://msdl.microsoft.com/download/symbols/PROCEXP113.dbg/490F69B11ec0/PROCEXP113.dbg not found
DBGHELP: .\PROCEXP113.dbg - file not found
DBGHELP: .\SYS\PROCEXP113.dbg - path not found
DBGHELP: .\symbols\SYS\PROCEXP113.dbg - path not found
DBGHELP: PROCEXP113.SYS missing debug info. Searching for pdb anyway
DBGHELP: Can’t use symbol server for PROCEXP113.pdb - no header information available
DBGHELP: PROCEXP113.pdb - file not found
*** ERROR: Module load completed but symbols could not be loaded for PROCEXP113.SYS
DBGHELP: PROCEXP113 - no symbols loaded

Loading unloaded module list
…

start end module name
804d7000 806d0380 nt (pdb symbols) d:\symbols\ntkrnlpa.pdb\85B0BD4E86DC47DA8A64F89B5F5013011\ntkrnlpa.pdb
806d1000 806e4d00 hal (pdb symbols) d:\symbols\halacpi.pdb\52475CC399844839AD8ADF647D0AF71A1\halacpi.pdb
af34d000 af358880 PROCMON20 (no symbols)
af935000 af975e00 HTTP (pdb symbols) d:\symbols\http.pdb\50709255C5174A0581BBFCD5936F83791\http.pdb
afb06000 afb5d600 srv (pdb symbols) d:\symbols\srv.pdb\B71D43221C284A288535837C8BDEA3302\srv.pdb
afc9e000 afcca180 mrxdav (pdb symbols) d:\symbols\mrxdav.pdb\EDD7D9E6E63B43DBA5059A72CE89286E1\mrxdav.pdb
b0033000 b0036900 ndisuio (pdb symbols) d:\symbols\ndisuio.pdb\C49AA8614D0E4F23B14F5894ABB43FD41\ndisuio.pdb
b813f000 b8156900 dump_atapi (pdb symbols) d:\symbols\atapi.pdb\3379CE3C730640ADA2AEC243E90016481\atapi.pdb
b8157000 b817c500 ipnat (pdb symbols) d:\symbols\ipnat.pdb\3A93546FC706432EB7E21AB4B3B655751\ipnat.pdb
b8245000 b82b4500 mrxsmb (pdb symbols) d:\symbols\mrxsmb.pdb\421DD64E8A5147CEB674538A4A8C3A902\mrxsmb.pdb
b82b5000 b82dfe80 rdbss (pdb symbols) d:\symbols\rdbss.pdb\B8FBFEC3A9EC42BCBAF08AC6F4CB01E12\rdbss.pdb
b82f2000 b8327a80 VBoxSF (export symbols) VBoxSF.sys
b8328000 b8349d00 afd (pdb symbols) d:\symbols\afd.pdb\7365F3AB401D424993E1BB4907FB03372\afd.pdb
b834a000 b8371c00 netbt (pdb symbols) d:\symbols\netbt.pdb\5B324D8D9603429FB717996C98EC2E292\netbt.pdb
b8372000 b83ca480 tcpip (pdb symbols) d:\symbols\tcpip.pdb\5DAF4A45ECAA4DE9B4CA8998CEB472442\tcpip.pdb
b83cb000 b83dd600 ipsec (pdb symbols) d:\symbols\ipsec.pdb\1B15EDFB9B97461196C722019CEC5CFC2\ipsec.pdb
b8426000 b8483f00 update (pdb symbols) d:\symbols\update.pdb\840B22B4D8124987BF5F6AB05B14102C1\update.pdb
b8484000 b84b3e80 rdpdr (pdb symbols) d:\symbols\rdpdr.pdb\5173CD3BBEEF44ED83A510D5364D93301\rdpdr.pdb
b84b4000 b84b6900 Dxapi (pdb symbols) d:\symbols\dxapi.pdb\A63AA409BC33424F9C61C4743C15609B1\dxapi.pdb
b84dc000 b84ece00 psched (pdb symbols) d:\symbols\psched.pdb\6C6DB34AB80042ACBBFF8F28D7F579F71\psched.pdb
b84fe000 b8514580 ndiswan (pdb symbols) d:\symbols\ndiswan.pdb\C119D83D0C0A49A6AABCA52A1FE1C7ED2\ndiswan.pdb
b8515000 b8528f00 VIDEOPRT (pdb symbols) d:\symbols\videoprt.pdb\66CB8EA979A742EABCB14A11545D6EBE1\videoprt.pdb
b8529000 b85427c0 VBoxVideo (export symbols) VBoxVideo.sys
b8543000 b8565700 ks (pdb symbols) d:\symbols\ks.pdb\6B6192FD7CD24084BD72F7BA9BB6C97C2\ks.pdb
b8566000 b8579900 parport (pdb symbols) d:\symbols\parport.pdb\06B3E014EF82429D9C5D3A8A07EB3C4A1\parport.pdb
b9dae000 b9db0280 rasacd (pdb symbols) d:\symbols\rasacd.pdb\20B90C6127114BDC88DE7FA31D8618701\rasacd.pdb
b9dda000 b9df3b80 Mup (pdb symbols) d:\symbols\mup.pdb\B725137B0D634A81A0BBAE29CFB0491A2\mup.pdb
b9df4000 b9e20980 NDIS (pdb symbols) d:\symbols\ndis.pdb\94A67EAE18514379881AE6FA7FC1C1FB2\ndis.pdb
b9e21000 b9ead600 Ntfs (pdb symbols) d:\symbols\ntfs.pdb\AA4F4A5C7B1D4663A7E0891479090D8A2\ntfs.pdb
b9eae000 b9ec1340 VBoxGuest (export symbols) VBoxGuest.sys
b9ec2000 b9ed8b00 KSecDD (pdb symbols) d:\symbols\ksecdd.pdb\86D6A19A8C5C46FDB54FEB4E4215C0451\ksecdd.pdb
b9ed9000 b9eeaf00 sr (pdb symbols) d:\symbols\sr.pdb\9D5432B7234C4CD2A8F6275B9D9AF41F1\sr.pdb
b9eeb000 b9f0ab00 fltmgr (pdb symbols) d:\symbols\fltMgr.pdb\30197425FFC04385B84C0354E5035D5C1\fltMgr.pdb
b9f0b000 b9f22900 atapi (pdb symbols) d:\symbols\atapi.pdb\3379CE3C730640ADA2AEC243E90016481\atapi.pdb
b9f23000 b9f48700 dmio (pdb symbols) d:\symbols\dmio.pdb\7DD31474CC0941E9B2175DDBC956E4601\dmio.pdb
b9f49000 b9f67880 ftdisk (pdb symbols) d:\symbols\ftdisk.pdb\370ADA20D01E457AB6AC095AF8D099681\ftdisk.pdb
b9f68000 b9f78a80 pci (pdb symbols) d:\symbols\pci.pdb\46927BAFB8E740B6B4BAC813675A82871\pci.pdb
b9f79000 b9fa6d80 ACPI (pdb symbols) d:\symbols\acpi.pdb\3E23085EEF9C4EB5AC40C386278F6D7E1\acpi.pdb
ba0a8000 ba0b1180 isapnp (pdb symbols) d:\symbols\isapnp.pdb\C88742CDDA0641E39B06BD20309F22991\isapnp.pdb
ba0b8000 ba0c2580 MountMgr (pdb symbols) d:\symbols\mountmgr.pdb\1E7C54F0C4714B9FB389A50F6A5FBDDA1\mountmgr.pdb
ba0c8000 ba0d4c80 VolSnap (pdb symbols) d:\symbols\volsnap.pdb\063AE2CDED15450491E240111E7E66511\volsnap.pdb
ba0d8000 ba0e0e00 disk (pdb symbols) d:\symbols\disk.pdb\973C93819420401FB85626ABA3E8C2E21\disk.pdb
ba0e8000 ba0f4180 CLASSPNP (pdb symbols) d:\symbols\classpnp.pdb\79125526F95B483880DC8AC59206505E2\classpnp.pdb
ba0f8000 ba107900 Cdfs (pdb symbols) d:\symbols\cdfs.pdb\6FA7C1B9FB96447B8608B2F31CEADB312\cdfs.pdb
ba208000 ba214d00 i8042prt (pdb symbols) d:\symbols\i8042prt.pdb\FA66C3D83C0546E0862C49B30DF6B8022\i8042prt.pdb
ba218000 ba227b00 VBoxMouse (export symbols) VBoxMouse.sys
ba228000 ba232480 imapi (pdb symbols) d:\symbols\imapi.pdb\A537B922BED84478A9B778863030AD141\imapi.pdb
ba238000 ba247600 cdrom (pdb symbols) d:\symbols\cdrom.pdb\B56E983DC60F4909843B3A38EE69F6A11\cdrom.pdb
ba248000 ba256100 redbook (pdb symbols) d:\symbols\redbook.pdb\7F7C16B1368A40FFB21C2B184DB06CFD1\redbook.pdb
ba258000 ba260a00 pcntpci5 (pdb symbols) d:\symbols\PCNTPCI5.pdb\3B1D39031\PCNTPCI5.pdb
ba268000 ba274880 rasl2tp (pdb symbols) d:\symbols\rasl2tp.pdb\FADB1E8D59EE44EF82E7E9D8324CE21B2\rasl2tp.pdb
ba278000 ba282200 raspppoe (pdb symbols) d:\symbols\raspppoe.pdb\5ADEB0D4960A4DDAA4D6C368F0E84C8F1\raspppoe.pdb
ba288000 ba293d00 raspptp (pdb symbols) d:\symbols\raspptp.pdb\D7C7E7BFE2924EA29A16BD98B0B46BCE2\raspptp.pdb
ba298000 ba2a0900 msgpc (pdb symbols) d:\symbols\msgpc.pdb\E80C52EE74E1497EBBC1E28C15CB28811\msgpc.pdb
ba2a8000 ba2b1f00 termdd (pdb symbols) d:\symbols\termdd.pdb\C04E4855F20641ECB654BB1AD575B8611\termdd.pdb
ba2b8000 ba2c7c00 serial (pdb symbols) d:\symbols\serial.pdb\124F9CCD7EC14FFF9D5B376A44672D7B2\serial.pdb
ba2c8000 ba2d2000 NDProxy (pdb symbols) d:\symbols\ndproxy.pdb\64A03581616E4213BD98A2B5AB40A6841\ndproxy.pdb
ba2e8000 ba2f0780 netbios (pdb symbols) d:\symbols\netbios.pdb\B7EAFDB2E9214DEFA746C4988F276B851\netbios.pdb
ba2f8000 ba302e00 Fips (pdb symbols) d:\symbols\fips.pdb\55E17508A16E474A813E155BF35A75281\fips.pdb
ba318000 ba320700 wanarp (pdb symbols) d:\symbols\wanarp.pdb\4A7B83723A134BFA9B018C2A3BF95F9B1\wanarp.pdb
ba328000 ba32e180 PCIIDEX (pdb symbols) d:\symbols\pciidex.pdb\E5F499C1EEAB4ECDB880F669D946ACC81\pciidex.pdb
ba330000 ba334d00 PartMgr (pdb symbols) d:\symbols\partmgr.pdb\2D84C75248124571A4A1066A9983AB951\partmgr.pdb
ba390000 ba396000 kbdclass (pdb symbols) d:\symbols\kbdclass.pdb\227A15B4C380417181684895714317F31\kbdclass.pdb
ba398000 ba39da00 mouclass (pdb symbols) d:\symbols\mouclass.pdb\1BBF200238534BE489B4DC62262BE30C1\mouclass.pdb
ba3a0000 ba3a4a80 TDI (pdb symbols) d:\symbols\tdi.pdb\545742C029D24374BD687966638629EB1\tdi.pdb
ba3b0000 ba3b4580 ptilink (pdb symbols) d:\symbols\ptilink.pdb\776B55BE9F5846AA8E4590CB42866E6A1\ptilink.pdb
ba3b8000 ba3bc080 raspti (pdb symbols) d:\symbols\raspti.pdb\B3C31E3A63DE4E868C024FEBAFF83F761\raspti.pdb
ba3d0000 ba3d5200 vga (pdb symbols) d:\symbols\vga.pdb\F2F7C91F384C41EEA23364A598A8D81A1\vga.pdb
ba3d8000 ba3dca80 Msfs (pdb symbols) d:\symbols\msfs.pdb\CCBCBE0659AD4F778F44D4A38ADBF7F71\msfs.pdb
ba3e0000 ba3e7880 Npfs (pdb symbols) d:\symbols\npfs.pdb\5A5C5ABD145D4FBBB3D6FCBA4FD80D471\npfs.pdb
ba3e8000 ba3ec500 watchdog (pdb symbols) d:\symbols\watchdog.pdb\C9A0CA01311A46F19A678042B95621CF1\watchdog.pdb
ba4b8000 ba4bb000 BOOTVID (pdb symbols) d:\symbols\bootvid.pdb\3B7D83451\bootvid.pdb
ba4bc000 ba4be800 compbatt (pdb symbols) d:\symbols\compbatt.pdb\C6CF5EE568B644F196AF615E1EFB13F11\compbatt.pdb
ba4c0000 ba4c3780 BATTC (pdb symbols) d:\symbols\battc.pdb\A0B7067946B54D499470B3F3FED1E9BA1\battc.pdb
ba564000 ba567680 CmBatt (pdb symbols) d:\symbols\cmbatt.pdb\75EDB74877914FC1895A2885180DC3261\cmbatt.pdb
ba568000 ba56a780 ndistapi (pdb symbols) d:\symbols\ndistapi.pdb\B70DA9D6ECA94B7FB92387CD6C85F7AB1\ndistapi.pdb
ba580000 ba583c80 mssmbios (pdb symbols) d:\symbols\mssmbios.pdb\9940673F3B9A4BD682DF9D96A12A355C1\mssmbios.pdb
ba584000 ba587d80 serenum (pdb symbols) d:\symbols\SerEnum.pdb\8A89A0C5EDB54520B1AF8E9092C3D9041\SerEnum.pdb
ba5a8000 ba5a9b80 kdcom (pdb symbols) d:\symbols\kdcom.pdb\3B7D83461\kdcom.pdb
ba5aa000 ba5ab100 WMILIB (pdb symbols) d:\symbols\wmilib.pdb\E4C3A9A4158C4C51BC4E2B46CA108AA51\wmilib.pdb
ba5ac000 ba5ad580 intelide (pdb symbols) d:\symbols\intelide.pdb\359D0AEA45E240F19D18338CF171A03E1\intelide.pdb
ba5ae000 ba5af700 dmload (pdb symbols) d:\symbols\dmload.pdb\28B0BFC4C7864BBD92DD888A54E9FE841\dmload.pdb
ba5b2000 ba5b3a80 ParVdm (pdb symbols) d:\symbols\parvdm.pdb\A33862D098F54FD3B903D85C5B13CDB51\parvdm.pdb
ba5c6000 ba5c7100 swenum (pdb symbols) d:\symbols\swenum.pdb\0581E48D203A4E0886B13659DE0EBCEA1\swenum.pdb
ba5c8000 ba5c9f00 Fs_Rec (pdb symbols) d:\symbols\fs_rec.pdb\126BA98076424D57B0A558CDE9819EB31\fs_rec.pdb
ba5ca000 ba5cb080 Beep (pdb symbols) d:\symbols\beep.pdb\65DC45B439164E4C9DEFF20E161DC74C1\beep.pdb
ba5cc000 ba5cd080 mnmdd (pdb symbols) d:\symbols\mnmdd.pdb\9871421E8348450AA965551E05AEC4D21\mnmdd.pdb
ba5ce000 ba5cf080 RDPCDD (pdb symbols) d:\symbols\RDPCDD.pdb\770565601E554819A9670ADF167252531\RDPCDD.pdb
ba5f0000 ba5f1100 dump_WMILIB (pdb symbols) d:\symbols\wmilib.pdb\E4C3A9A4158C4C51BC4E2B46CA108AA51\wmilib.pdb
ba66c000 ba66dec0 PROCEXP113 (no symbols)
ba6f2000 ba6f2d00 dxgthk (pdb symbols) d:\symbols\dxgthk.pdb\ED52F57C00F5452FBEBABB7C5BA826DF1\dxgthk.pdb
ba718000 ba718c00 audstub (pdb symbols) d:\symbols\audstub.pdb\6B3BF8F0C8834E7E8EFE53B7A91E2A3F1\audstub.pdb
ba7d6000 ba7d6b80 Null (pdb symbols) d:\symbols\null.pdb\77840F8CB3624E438D5D2F0913E4D30E1\null.pdb
bf000000 bf011600 dxg (pdb symbols) d:\symbols\dxg.pdb\1BF735C70BDA42F7A25DCAEAA44B79001\dxg.pdb
bf012000 bf0217c0 VBoxDisp (no symbols)
bf022000 bf068e80 ATMFD (no symbols)
bf800000 bf9c5980 win32k (pdb symbols) d:\symbols\win32k.pdb\D1F7F409C579448880A6C2C2977DC4262\win32k.pdb

Thank you both for your continued help!

-JC

OSR_Community_User · April 14, 2011, 7:11pm

I just realized it is no longer showing as loaded. So please hang on and let me see if I can recreate this.

mm1 · April 14, 2011, 7:11pm

No problem, John.

Whoops - I told you run the wrong command. Sorry.

Please run ‘lm’ and post the results. Depending on what else you’ve done,
you might need to issue the ‘.reload -f -n’ again. If you do, there’s no
need to post the results of that command again (I just wanted to see if you
were having symbol problems, which you don’t appear to be).

mm

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@comcast.net
Sent: Thursday, April 14, 2011 7:03 PM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] Strange Driver loaded

Tim,

I could not agree more. I will admit the whole point of it going in my VM
was so I could rip it apart and reassure myself that’s it’s 100% pure
C-R-A-P. So far I am winning.

Martin -

Connected to Windows XP 2600 x86 compatible target at (Thu Apr 14
18:47:03.308 2011 (GMT-4)), ptr64 FALSE
Loading Kernel Symbols
…*** ERROR: Symbol file could not be found.
Defaulted to export symbols for VBoxGuest.sys -
…*** ERROR: Symbol file could not be found. Defaulted to export
symbols for VBoxMouse.sys -
…*** ERROR: Symbol file could not be found. Defaulted to export
symbols for VBoxVideo.sys -
…
…

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads
that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

…*** ERROR: Symbol file could not be found. Defaulted to export
symbols for VBoxSF.sys -
…*** ERROR: Module load completed but symbols could not be
loaded for VBoxDisp.dll
.*** ERROR: Module load completed but symbols could not be loaded for
ATMFD.DLL
…*** ERROR: Module load completed but symbols could not be loaded for
PROCMON20.SYS
.*** ERROR: Module load completed but symbols could not be loaded for
PROCEXP113.SYS

Loading unloaded module list
…
kd> !sym noisy
noisy mode - symbol prompts on
kd> .reload -f -n
Connected to Windows XP 2600 x86 compatible target at (Thu Apr 14
18:51:12.863 2011 (GMT-4)), ptr64 FALSE
DBGHELP: nt - public symbols

d:\symbols\ntkrnlpa.pdb\85B0BD4E86DC47DA8A64F89B5F5013011\ntkrnlpa.pdb
Loading Kernel Symbols
.
DBGHELP: hal - public symbols

d:\symbols\halacpi.pdb\52475CC399844839AD8ADF647D0AF71A1\halacpi.pdb
.
DBGHELP: kdcom - public symbols
d:\symbols\kdcom.pdb\3B7D83461\kdcom.pdb
.
DBGHELP: BOOTVID - public symbols
d:\symbols\bootvid.pdb\3B7D83451\bootvid.pdb
.
DBGHELP: ACPI - public symbols
d:\symbols\acpi.pdb\3E23085EEF9C4EB5AC40C386278F6D7E1\acpi.pdb
.
DBGHELP: WMILIB - public symbols
d:\symbols\wmilib.pdb\E4C3A9A4158C4C51BC4E2B46CA108AA51\wmilib.pdb
.
DBGHELP: pci - public symbols
d:\symbols\pci.pdb\46927BAFB8E740B6B4BAC813675A82871\pci.pdb
.
DBGHELP: isapnp - public symbols
d:\symbols\isapnp.pdb\C88742CDDA0641E39B06BD20309F22991\isapnp.pdb
.
DBGHELP: compbatt - public symbols

d:\symbols\compbatt.pdb\C6CF5EE568B644F196AF615E1EFB13F11\compbatt.pdb
.
DBGHELP: BATTC - public symbols
d:\symbols\battc.pdb\A0B7067946B54D499470B3F3FED1E9BA1\battc.pdb
.
DBGHELP: intelide - public symbols

d:\symbols\intelide.pdb\359D0AEA45E240F19D18338CF171A03E1\intelide.pdb
.
DBGHELP: PCIIDEX - public symbols

d:\symbols\pciidex.pdb\E5F499C1EEAB4ECDB880F669D946ACC81\pciidex.pdb
.
DBGHELP: MountMgr - public symbols

d:\symbols\mountmgr.pdb\1E7C54F0C4714B9FB389A50F6A5FBDDA1\mountmgr.pdb
.
DBGHELP: ftdisk - public symbols
d:\symbols\ftdisk.pdb\370ADA20D01E457AB6AC095AF8D099681\ftdisk.pdb
.
DBGHELP: dmload - public symbols
d:\symbols\dmload.pdb\28B0BFC4C7864BBD92DD888A54E9FE841\dmload.pdb
.
DBGHELP: dmio - public symbols
d:\symbols\dmio.pdb\7DD31474CC0941E9B2175DDBC956E4601\dmio.pdb
.
DBGHELP: PartMgr - public symbols

d:\symbols\partmgr.pdb\2D84C75248124571A4A1066A9983AB951\partmgr.pdb
.
DBGHELP: VolSnap - public symbols

d:\symbols\volsnap.pdb\063AE2CDED15450491E240111E7E66511\volsnap.pdb
.
DBGHELP: atapi - public symbols
d:\symbols\atapi.pdb\3379CE3C730640ADA2AEC243E90016481\atapi.pdb
.
DBGHELP: disk - public symbols
d:\symbols\disk.pdb\973C93819420401FB85626ABA3E8C2E21\disk.pdb
.
DBGHELP: CLASSPNP - public symbols

d:\symbols\classpnp.pdb\79125526F95B483880DC8AC59206505E2\classpnp.pdb
.
DBGHELP: fltmgr - public symbols
d:\symbols\fltMgr.pdb\30197425FFC04385B84C0354E5035D5C1\fltMgr.pdb
.
DBGHELP: sr - public symbols
d:\symbols\sr.pdb\9D5432B7234C4CD2A8F6275B9D9AF41F1\sr.pdb
.
DBGHELP: KSecDD - public symbols
d:\symbols\ksecdd.pdb\86D6A19A8C5C46FDB54FEB4E4215C0451\ksecdd.pdb
.
SYMSRV:
d:\symbols\VBoxGuest.pdb\43AA4A9FEDEE4A66861C48851EF716AF1\VBoxGuest.pdb not
found
SYMSRV:
http://msdl.microsoft.com/download/symbols/VBoxGuest.pdb/43AA4A9FEDEE4A66861
C48851EF716AF1/VBoxGuest.pdb not found
DBGHELP:
D:\tinderbox\add-3.2\out\win.x86\release\obj\VBoxGuest\VBoxGuest.pdb - file
not found
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
VBoxGuest.sys -
DBGHELP: VBoxGuest - export symbols
.
DBGHELP: Ntfs - public symbols
d:\symbols\ntfs.pdb\AA4F4A5C7B1D4663A7E0891479090D8A2\ntfs.pdb
.
DBGHELP: NDIS - public symbols
d:\symbols\ndis.pdb\94A67EAE18514379881AE6FA7FC1C1FB2\ndis.pdb
.
DBGHELP: Mup - public symbols
d:\symbols\mup.pdb\B725137B0D634A81A0BBAE29CFB0491A2\mup.pdb
.
DBGHELP: i8042prt - public symbols

d:\symbols\i8042prt.pdb\FA66C3D83C0546E0862C49B30DF6B8022\i8042prt.pdb
.
DBGHELP: kbdclass - public symbols

d:\symbols\kbdclass.pdb\227A15B4C380417181684895714317F31\kbdclass.pdb
.
SYMSRV:
d:\symbols\VBoxMouse.pdb\F1110E7FF90B4BB392557941DEABD08F1\VBoxMouse.pdb not
found
SYMSRV:
http://msdl.microsoft.com/download/symbols/VBoxMouse.pdb/F1110E7FF90B4BB3925
57941DEABD08F1/VBoxMouse.pdb not found
DBGHELP:
D:\tinderbox\add-3.2\out\win.x86\release\obj\VBoxMouse\VBoxMouse.pdb - file
not found
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
VBoxMouse.sys -
DBGHELP: VBoxMouse - export symbols
.
DBGHELP: mouclass - public symbols

d:\symbols\mouclass.pdb\1BBF200238534BE489B4DC62262BE30C1\mouclass.pdb
.
DBGHELP: parport - public symbols

d:\symbols\parport.pdb\06B3E014EF82429D9C5D3A8A07EB3C4A1\parport.pdb
.
DBGHELP: imapi - public symbols
d:\symbols\imapi.pdb\A537B922BED84478A9B778863030AD141\imapi.pdb
.
DBGHELP: cdrom - public symbols
d:\symbols\cdrom.pdb\B56E983DC60F4909843B3A38EE69F6A11\cdrom.pdb
.
DBGHELP: redbook - public symbols

d:\symbols\redbook.pdb\7F7C16B1368A40FFB21C2B184DB06CFD1\redbook.pdb
.
DBGHELP: ks - public symbols
d:\symbols\ks.pdb\6B6192FD7CD24084BD72F7BA9BB6C97C2\ks.pdb
.
SYMSRV:
d:\symbols\VBoxVideo.pdb\04E2525E5CF545E6B1F6CF1DCB2EED131\VBoxVideo.pdb not
found
SYMSRV:
http://msdl.microsoft.com/download/symbols/VBoxVideo.pdb/04E2525E5CF545E6B1F
6CF1DCB2EED131/VBoxVideo.pdb not found
DBGHELP:
D:\tinderbox\add-3.2\out\win.x86\release\obj\VBoxVideo\VBoxVideo.pdb - file
not found
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
VBoxVideo.sys -
DBGHELP: VBoxVideo - export symbols
.
DBGHELP: VIDEOPRT - public symbols

d:\symbols\videoprt.pdb\66CB8EA979A742EABCB14A11545D6EBE1\videoprt.pdb
.
DBGHELP: pcntpci5 - public symbols
d:\symbols\PCNTPCI5.pdb\3B1D39031\PCNTPCI5.pdb
.
DBGHELP: CmBatt - public symbols
d:\symbols\cmbatt.pdb\75EDB74877914FC1895A2885180DC3261\cmbatt.pdb
.
DBGHELP: audstub - public symbols

d:\symbols\audstub.pdb\6B3BF8F0C8834E7E8EFE53B7A91E2A3F1\audstub.pdb
.
DBGHELP: rasl2tp - public symbols

d:\symbols\rasl2tp.pdb\FADB1E8D59EE44EF82E7E9D8324CE21B2\rasl2tp.pdb
.
DBGHELP: ndistapi - public symbols

d:\symbols\ndistapi.pdb\B70DA9D6ECA94B7FB92387CD6C85F7AB1\ndistapi.pdb
.
DBGHELP: ndiswan - public symbols

d:\symbols\ndiswan.pdb\C119D83D0C0A49A6AABCA52A1FE1C7ED2\ndiswan.pdb
.
DBGHELP: raspppoe - public symbols

d:\symbols\raspppoe.pdb\5ADEB0D4960A4DDAA4D6C368F0E84C8F1\raspppoe.pdb
.
DBGHELP: raspptp - public symbols

d:\symbols\raspptp.pdb\D7C7E7BFE2924EA29A16BD98B0B46BCE2\raspptp.pdb
.
DBGHELP: TDI - public symbols
d:\symbols\tdi.pdb\545742C029D24374BD687966638629EB1\tdi.pdb
.
DBGHELP: psched - public symbols
d:\symbols\psched.pdb\6C6DB34AB80042ACBBFF8F28D7F579F71\psched.pdb
.
DBGHELP: msgpc - public symbols
d:\symbols\msgpc.pdb\E80C52EE74E1497EBBC1E28C15CB28811\msgpc.pdb
.
DBGHELP: ptilink - public symbols

d:\symbols\ptilink.pdb\776B55BE9F5846AA8E4590CB42866E6A1\ptilink.pdb
.
DBGHELP: raspti - public symbols
d:\symbols\raspti.pdb\B3C31E3A63DE4E868C024FEBAFF83F761\raspti.pdb
.
DBGHELP: rdpdr - public symbols
d:\symbols\rdpdr.pdb\5173CD3BBEEF44ED83A510D5364D93301\rdpdr.pdb
.
DBGHELP: termdd - public symbols
d:\symbols\termdd.pdb\C04E4855F20641ECB654BB1AD575B8611\termdd.pdb
.
DBGHELP: swenum - public symbols
d:\symbols\swenum.pdb\0581E48D203A4E0886B13659DE0EBCEA1\swenum.pdb
.
DBGHELP: update - public symbols
d:\symbols\update.pdb\840B22B4D8124987BF5F6AB05B14102C1\update.pdb
.
DBGHELP: mssmbios - public symbols

d:\symbols\mssmbios.pdb\9940673F3B9A4BD682DF9D96A12A355C1\mssmbios.pdb
.
DBGHELP: serial - public symbols
d:\symbols\serial.pdb\124F9CCD7EC14FFF9D5B376A44672D7B2\serial.pdb
.
DBGHELP: serenum - public symbols

d:\symbols\SerEnum.pdb\8A89A0C5EDB54520B1AF8E9092C3D9041\SerEnum.pdb
.
DBGHELP: NDProxy - public symbols

d:\symbols\ndproxy.pdb\64A03581616E4213BD98A2B5AB40A6841\ndproxy.pdb
.
DBGHELP: Fs_Rec - public symbols
d:\symbols\fs_rec.pdb\126BA98076424D57B0A558CDE9819EB31\fs_rec.pdb
.
DBGHELP: Null - public symbols
d:\symbols\null.pdb\77840F8CB3624E438D5D2F0913E4D30E1\null.pdb
.
DBGHELP: Beep - public symbols
d:\symbols\beep.pdb\65DC45B439164E4C9DEFF20E161DC74C1\beep.pdb
.
DBGHELP: vga - public symbols
d:\symbols\vga.pdb\F2F7C91F384C41EEA23364A598A8D81A1\vga.pdb
.
DBGHELP: mnmdd - public symbols
d:\symbols\mnmdd.pdb\9871421E8348450AA965551E05AEC4D21\mnmdd.pdb
.
DBGHELP: RDPCDD - public symbols
d:\symbols\RDPCDD.pdb\770565601E554819A9670ADF167252531\RDPCDD.pdb
.
DBGHELP: Msfs - public symbols
d:\symbols\msfs.pdb\CCBCBE0659AD4F778F44D4A38ADBF7F71\msfs.pdb
.
DBGHELP: Npfs - public symbols
d:\symbols\npfs.pdb\5A5C5ABD145D4FBBB3D6FCBA4FD80D471\npfs.pdb
.
DBGHELP: rasacd - public symbols
d:\symbols\rasacd.pdb\20B90C6127114BDC88DE7FA31D8618701\rasacd.pdb
.
DBGHELP: ipsec - public symbols
d:\symbols\ipsec.pdb\1B15EDFB9B97461196C722019CEC5CFC2\ipsec.pdb
.
DBGHELP: tcpip - public symbols
d:\symbols\tcpip.pdb\5DAF4A45ECAA4DE9B4CA8998CEB472442\tcpip.pdb
.
DBGHELP: netbt - public symbols
d:\symbols\netbt.pdb\5B324D8D9603429FB717996C98EC2E292\netbt.pdb
.
DBGHELP: afd - public symbols
d:\symbols\afd.pdb\7365F3AB401D424993E1BB4907FB03372\afd.pdb
.
DBGHELP: netbios - public symbols

d:\symbols\netbios.pdb\B7EAFDB2E9214DEFA746C4988F276B851\netbios.pdb
.
SYMSRV: d:\symbols\VBoxSF.pdb\C67A377A51924D23A459715C407D072B1\VBoxSF.pdb
not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/VBoxSF.pdb/C67A377A51924D23A45971
5C407D072B1/VBoxSF.pdb not found
DBGHELP: D:\tinderbox\add-3.2\out\win.x86\release\obj\VBoxSF\VBoxSF.pdb -
file not found
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
VBoxSF.sys -
DBGHELP: VBoxSF - export symbols
.
DBGHELP: rdbss - public symbols
d:\symbols\rdbss.pdb\B8FBFEC3A9EC42BCBAF08AC6F4CB01E12\rdbss.pdb
.
DBGHELP: mrxsmb - public symbols
d:\symbols\mrxsmb.pdb\421DD64E8A5147CEB674538A4A8C3A902\mrxsmb.pdb
.
DBGHELP: Fips - public symbols
d:\symbols\fips.pdb\55E17508A16E474A813E155BF35A75281\fips.pdb
.
DBGHELP: ipnat - public symbols
d:\symbols\ipnat.pdb\3A93546FC706432EB7E21AB4B3B655751\ipnat.pdb
.
DBGHELP: wanarp - public symbols
d:\symbols\wanarp.pdb\4A7B83723A134BFA9B018C2A3BF95F9B1\wanarp.pdb
.
DBGHELP: Cdfs - public symbols
d:\symbols\cdfs.pdb\6FA7C1B9FB96447B8608B2F31CEADB312\cdfs.pdb
.
DBGHELP: dump_atapi - public symbols
d:\symbols\atapi.pdb\3379CE3C730640ADA2AEC243E90016481\atapi.pdb
.
DBGHELP: dump_WMILIB - public symbols
d:\symbols\wmilib.pdb\E4C3A9A4158C4C51BC4E2B46CA108AA51\wmilib.pdb
.
DBGHELP: win32k - public symbols
d:\symbols\win32k.pdb\D1F7F409C579448880A6C2C2977DC4262\win32k.pdb
.
DBGHELP: Dxapi - public symbols
d:\symbols\dxapi.pdb\A63AA409BC33424F9C61C4743C15609B1\dxapi.pdb
.
DBGHELP: watchdog - public symbols

d:\symbols\watchdog.pdb\C9A0CA01311A46F19A678042B95621CF1\watchdog.pdb
.
DBGHELP: dxg - public symbols
d:\symbols\dxg.pdb\1BF735C70BDA42F7A25DCAEAA44B79001\dxg.pdb
.
DBGHELP: dxgthk - public symbols
d:\symbols\dxgthk.pdb\ED52F57C00F5452FBEBABB7C5BA826DF1\dxgthk.pdb
.
SYMSRV:
d:\symbols\VBoxDisp.pdb\BA574571D47040CB948CE05F9FEAFA551\VBoxDisp.pdb not
found
SYMSRV:
http://msdl.microsoft.com/download/symbols/VBoxDisp.pdb/BA574571D47040CB948C
E05F9FEAFA551/VBoxDisp.pdb not found
DBGHELP: D:\tinderbox\add-3.2\out\win.x86\release\obj\VBoxDisp\VBoxDisp.pdb

file not found
*** ERROR: Module load completed but symbols could not be loaded for
VBoxDisp.dll
DBGHELP: VBoxDisp - no symbols loaded
.
SYMSRV: d:\symbols\atmfd.pdb\6E2CF72B78B744429ADC97CA626BE1D41\atmfd.pdb
not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/atmfd.pdb/6E2CF72B78B744429ADC97C
A626BE1D41/atmfd.pdb not found
DBGHELP: atmfd.pdb - file not found
*** ERROR: Module load completed but symbols could not be loaded for
ATMFD.DLL
DBGHELP: ATMFD - no symbols loaded
.
DBGHELP: ndisuio - public symbols

d:\symbols\ndisuio.pdb\C49AA8614D0E4F23B14F5894ABB43FD41\ndisuio.pdb
.
DBGHELP: mrxdav - public symbols
d:\symbols\mrxdav.pdb\EDD7D9E6E63B43DBA5059A72CE89286E1\mrxdav.pdb
.
DBGHELP: ParVdm - public symbols
d:\symbols\parvdm.pdb\A33862D098F54FD3B903D85C5B13CDB51\parvdm.pdb
.
DBGHELP: srv - public symbols
d:\symbols\srv.pdb\B71D43221C284A288535837C8BDEA3302\srv.pdb
.
DBGHELP: HTTP - public symbols
d:\symbols\http.pdb\50709255C5174A0581BBFCD5936F83791\http.pdb
.
SYMSRV:
d:\symbols\procmon20.pdb\37ACA2CA0C354E20B89B142A71E71F0A1\procmon20.pdb not
found
SYMSRV:
http://msdl.microsoft.com/download/symbols/procmon20.pdb/37ACA2CA0C354E20B89
B142A71E71F0A1/procmon20.pdb not found
DBGHELP: c:\src\procmon\sys\objfre_w2k_x86\i386\procmon20.pdb - file not
found
*** ERROR: Module load completed but symbols could not be loaded for
PROCMON20.SYS
DBGHELP: PROCMON20 - no symbols loaded
.
DBGHELP: PROCEXP113.SYS is stripped. Searching for dbg file
SYMSRV: d:\symbols\PROCEXP113.dbg\490F69B11ec0\PROCEXP113.dbg not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/PROCEXP113.dbg/490F69B11ec0/PROCE
XP113.dbg not found
DBGHELP: .\PROCEXP113.dbg - file not found
DBGHELP: .\SYS\PROCEXP113.dbg - path not found
DBGHELP: .\symbols\SYS\PROCEXP113.dbg - path not found
DBGHELP: PROCEXP113.SYS missing debug info. Searching for pdb anyway
DBGHELP: Can’t use symbol server for PROCEXP113.pdb - no header information
available
DBGHELP: PROCEXP113.pdb - file not found
*** ERROR: Module load completed but symbols could not be loaded for
PROCEXP113.SYS
DBGHELP: PROCEXP113 - no symbols loaded

Loading unloaded module list
…

start end module name
804d7000 806d0380 nt (pdb symbols)
d:\symbols\ntkrnlpa.pdb\85B0BD4E86DC47DA8A64F89B5F5013011\ntkrnlpa.pdb
806d1000 806e4d00 hal (pdb symbols)
d:\symbols\halacpi.pdb\52475CC399844839AD8ADF647D0AF71A1\halacpi.pdb
af34d000 af358880 PROCMON20 (no symbols)
af935000 af975e00 HTTP (pdb symbols)
d:\symbols\http.pdb\50709255C5174A0581BBFCD5936F83791\http.pdb
afb06000 afb5d600 srv (pdb symbols)
d:\symbols\srv.pdb\B71D43221C284A288535837C8BDEA3302\srv.pdb
afc9e000 afcca180 mrxdav (pdb symbols)
d:\symbols\mrxdav.pdb\EDD7D9E6E63B43DBA5059A72CE89286E1\mrxdav.pdb
b0033000 b0036900 ndisuio (pdb symbols)
d:\symbols\ndisuio.pdb\C49AA8614D0E4F23B14F5894ABB43FD41\ndisuio.pdb
b813f000 b8156900 dump_atapi (pdb symbols)
d:\symbols\atapi.pdb\3379CE3C730640ADA2AEC243E90016481\atapi.pdb
b8157000 b817c500 ipnat (pdb symbols)
d:\symbols\ipnat.pdb\3A93546FC706432EB7E21AB4B3B655751\ipnat.pdb
b8245000 b82b4500 mrxsmb (pdb symbols)
d:\symbols\mrxsmb.pdb\421DD64E8A5147CEB674538A4A8C3A902\mrxsmb.pdb
b82b5000 b82dfe80 rdbss (pdb symbols)
d:\symbols\rdbss.pdb\B8FBFEC3A9EC42BCBAF08AC6F4CB01E12\rdbss.pdb
b82f2000 b8327a80 VBoxSF (export symbols) VBoxSF.sys
b8328000 b8349d00 afd (pdb symbols)
d:\symbols\afd.pdb\7365F3AB401D424993E1BB4907FB03372\afd.pdb
b834a000 b8371c00 netbt (pdb symbols)
d:\symbols\netbt.pdb\5B324D8D9603429FB717996C98EC2E292\netbt.pdb
b8372000 b83ca480 tcpip (pdb symbols)
d:\symbols\tcpip.pdb\5DAF4A45ECAA4DE9B4CA8998CEB472442\tcpip.pdb
b83cb000 b83dd600 ipsec (pdb symbols)
d:\symbols\ipsec.pdb\1B15EDFB9B97461196C722019CEC5CFC2\ipsec.pdb
b8426000 b8483f00 update (pdb symbols)
d:\symbols\update.pdb\840B22B4D8124987BF5F6AB05B14102C1\update.pdb
b8484000 b84b3e80 rdpdr (pdb symbols)
d:\symbols\rdpdr.pdb\5173CD3BBEEF44ED83A510D5364D93301\rdpdr.pdb
b84b4000 b84b6900 Dxapi (pdb symbols)
d:\symbols\dxapi.pdb\A63AA409BC33424F9C61C4743C15609B1\dxapi.pdb
b84dc000 b84ece00 psched (pdb symbols)
d:\symbols\psched.pdb\6C6DB34AB80042ACBBFF8F28D7F579F71\psched.pdb
b84fe000 b8514580 ndiswan (pdb symbols)
d:\symbols\ndiswan.pdb\C119D83D0C0A49A6AABCA52A1FE1C7ED2\ndiswan.pdb
b8515000 b8528f00 VIDEOPRT (pdb symbols)
d:\symbols\videoprt.pdb\66CB8EA979A742EABCB14A11545D6EBE1\videoprt.pdb
b8529000 b85427c0 VBoxVideo (export symbols) VBoxVideo.sys
b8543000 b8565700 ks (pdb symbols)
d:\symbols\ks.pdb\6B6192FD7CD24084BD72F7BA9BB6C97C2\ks.pdb
b8566000 b8579900 parport (pdb symbols)
d:\symbols\parport.pdb\06B3E014EF82429D9C5D3A8A07EB3C4A1\parport.pdb
b9dae000 b9db0280 rasacd (pdb symbols)
d:\symbols\rasacd.pdb\20B90C6127114BDC88DE7FA31D8618701\rasacd.pdb
b9dda000 b9df3b80 Mup (pdb symbols)
d:\symbols\mup.pdb\B725137B0D634A81A0BBAE29CFB0491A2\mup.pdb
b9df4000 b9e20980 NDIS (pdb symbols)
d:\symbols\ndis.pdb\94A67EAE18514379881AE6FA7FC1C1FB2\ndis.pdb
b9e21000 b9ead600 Ntfs (pdb symbols)
d:\symbols\ntfs.pdb\AA4F4A5C7B1D4663A7E0891479090D8A2\ntfs.pdb
b9eae000 b9ec1340 VBoxGuest (export symbols) VBoxGuest.sys
b9ec2000 b9ed8b00 KSecDD (pdb symbols)
d:\symbols\ksecdd.pdb\86D6A19A8C5C46FDB54FEB4E4215C0451\ksecdd.pdb
b9ed9000 b9eeaf00 sr (pdb symbols)
d:\symbols\sr.pdb\9D5432B7234C4CD2A8F6275B9D9AF41F1\sr.pdb
b9eeb000 b9f0ab00 fltmgr (pdb symbols)
d:\symbols\fltMgr.pdb\30197425FFC04385B84C0354E5035D5C1\fltMgr.pdb
b9f0b000 b9f22900 atapi (pdb symbols)
d:\symbols\atapi.pdb\3379CE3C730640ADA2AEC243E90016481\atapi.pdb
b9f23000 b9f48700 dmio (pdb symbols)
d:\symbols\dmio.pdb\7DD31474CC0941E9B2175DDBC956E4601\dmio.pdb
b9f49000 b9f67880 ftdisk (pdb symbols)
d:\symbols\ftdisk.pdb\370ADA20D01E457AB6AC095AF8D099681\ftdisk.pdb
b9f68000 b9f78a80 pci (pdb symbols)
d:\symbols\pci.pdb\46927BAFB8E740B6B4BAC813675A82871\pci.pdb
b9f79000 b9fa6d80 ACPI (pdb symbols)
d:\symbols\acpi.pdb\3E23085EEF9C4EB5AC40C386278F6D7E1\acpi.pdb
ba0a8000 ba0b1180 isapnp (pdb symbols)
d:\symbols\isapnp.pdb\C88742CDDA0641E39B06BD20309F22991\isapnp.pdb
ba0b8000 ba0c2580 MountMgr (pdb symbols)
d:\symbols\mountmgr.pdb\1E7C54F0C4714B9FB389A50F6A5FBDDA1\mountmgr.pdb
ba0c8000 ba0d4c80 VolSnap (pdb symbols)
d:\symbols\volsnap.pdb\063AE2CDED15450491E240111E7E66511\volsnap.pdb
ba0d8000 ba0e0e00 disk (pdb symbols)
d:\symbols\disk.pdb\973C93819420401FB85626ABA3E8C2E21\disk.pdb
ba0e8000 ba0f4180 CLASSPNP (pdb symbols)
d:\symbols\classpnp.pdb\79125526F95B483880DC8AC59206505E2\classpnp.pdb
ba0f8000 ba107900 Cdfs (pdb symbols)
d:\symbols\cdfs.pdb\6FA7C1B9FB96447B8608B2F31CEADB312\cdfs.pdb
ba208000 ba214d00 i8042prt (pdb symbols)
d:\symbols\i8042prt.pdb\FA66C3D83C0546E0862C49B30DF6B8022\i8042prt.pdb
ba218000 ba227b00 VBoxMouse (export symbols) VBoxMouse.sys
ba228000 ba232480 imapi (pdb symbols)
d:\symbols\imapi.pdb\A537B922BED84478A9B778863030AD141\imapi.pdb
ba238000 ba247600 cdrom (pdb symbols)
d:\symbols\cdrom.pdb\B56E983DC60F4909843B3A38EE69F6A11\cdrom.pdb
ba248000 ba256100 redbook (pdb symbols)
d:\symbols\redbook.pdb\7F7C16B1368A40FFB21C2B184DB06CFD1\redbook.pdb
ba258000 ba260a00 pcntpci5 (pdb symbols)
d:\symbols\PCNTPCI5.pdb\3B1D39031\PCNTPCI5.pdb
ba268000 ba274880 rasl2tp (pdb symbols)
d:\symbols\rasl2tp.pdb\FADB1E8D59EE44EF82E7E9D8324CE21B2\rasl2tp.pdb
ba278000 ba282200 raspppoe (pdb symbols)
d:\symbols\raspppoe.pdb\5ADEB0D4960A4DDAA4D6C368F0E84C8F1\raspppoe.pdb
ba288000 ba293d00 raspptp (pdb symbols)
d:\symbols\raspptp.pdb\D7C7E7BFE2924EA29A16BD98B0B46BCE2\raspptp.pdb
ba298000 ba2a0900 msgpc (pdb symbols)
d:\symbols\msgpc.pdb\E80C52EE74E1497EBBC1E28C15CB28811\msgpc.pdb
ba2a8000 ba2b1f00 termdd (pdb symbols)
d:\symbols\termdd.pdb\C04E4855F20641ECB654BB1AD575B8611\termdd.pdb
ba2b8000 ba2c7c00 serial (pdb symbols)
d:\symbols\serial.pdb\124F9CCD7EC14FFF9D5B376A44672D7B2\serial.pdb
ba2c8000 ba2d2000 NDProxy (pdb symbols)
d:\symbols\ndproxy.pdb\64A03581616E4213BD98A2B5AB40A6841\ndproxy.pdb
ba2e8000 ba2f0780 netbios (pdb symbols)
d:\symbols\netbios.pdb\B7EAFDB2E9214DEFA746C4988F276B851\netbios.pdb
ba2f8000 ba302e00 Fips (pdb symbols)
d:\symbols\fips.pdb\55E17508A16E474A813E155BF35A75281\fips.pdb
ba318000 ba320700 wanarp (pdb symbols)
d:\symbols\wanarp.pdb\4A7B83723A134BFA9B018C2A3BF95F9B1\wanarp.pdb
ba328000 ba32e180 PCIIDEX (pdb symbols)
d:\symbols\pciidex.pdb\E5F499C1EEAB4ECDB880F669D946ACC81\pciidex.pdb
ba330000 ba334d00 PartMgr (pdb symbols)
d:\symbols\partmgr.pdb\2D84C75248124571A4A1066A9983AB951\partmgr.pdb
ba390000 ba396000 kbdclass (pdb symbols)
d:\symbols\kbdclass.pdb\227A15B4C380417181684895714317F31\kbdclass.pdb
ba398000 ba39da00 mouclass (pdb symbols)
d:\symbols\mouclass.pdb\1BBF200238534BE489B4DC62262BE30C1\mouclass.pdb
ba3a0000 ba3a4a80 TDI (pdb symbols)
d:\symbols\tdi.pdb\545742C029D24374BD687966638629EB1\tdi.pdb
ba3b0000 ba3b4580 ptilink (pdb symbols)
d:\symbols\ptilink.pdb\776B55BE9F5846AA8E4590CB42866E6A1\ptilink.pdb
ba3b8000 ba3bc080 raspti (pdb symbols)
d:\symbols\raspti.pdb\B3C31E3A63DE4E868C024FEBAFF83F761\raspti.pdb
ba3d0000 ba3d5200 vga (pdb symbols)
d:\symbols\vga.pdb\F2F7C91F384C41EEA23364A598A8D81A1\vga.pdb
ba3d8000 ba3dca80 Msfs (pdb symbols)
d:\symbols\msfs.pdb\CCBCBE0659AD4F778F44D4A38ADBF7F71\msfs.pdb
ba3e0000 ba3e7880 Npfs (pdb symbols)
d:\symbols\npfs.pdb\5A5C5ABD145D4FBBB3D6FCBA4FD80D471\npfs.pdb
ba3e8000 ba3ec500 watchdog (pdb symbols)
d:\symbols\watchdog.pdb\C9A0CA01311A46F19A678042B95621CF1\watchdog.pdb
ba4b8000 ba4bb000 BOOTVID (pdb symbols)
d:\symbols\bootvid.pdb\3B7D83451\bootvid.pdb
ba4bc000 ba4be800 compbatt (pdb symbols)
d:\symbols\compbatt.pdb\C6CF5EE568B644F196AF615E1EFB13F11\compbatt.pdb
ba4c0000 ba4c3780 BATTC (pdb symbols)
d:\symbols\battc.pdb\A0B7067946B54D499470B3F3FED1E9BA1\battc.pdb
ba564000 ba567680 CmBatt (pdb symbols)
d:\symbols\cmbatt.pdb\75EDB74877914FC1895A2885180DC3261\cmbatt.pdb
ba568000 ba56a780 ndistapi (pdb symbols)
d:\symbols\ndistapi.pdb\B70DA9D6ECA94B7FB92387CD6C85F7AB1\ndistapi.pdb
ba580000 ba583c80 mssmbios (pdb symbols)
d:\symbols\mssmbios.pdb\9940673F3B9A4BD682DF9D96A12A355C1\mssmbios.pdb
ba584000 ba587d80 serenum (pdb symbols)
d:\symbols\SerEnum.pdb\8A89A0C5EDB54520B1AF8E9092C3D9041\SerEnum.pdb
ba5a8000 ba5a9b80 kdcom (pdb symbols)
d:\symbols\kdcom.pdb\3B7D83461\kdcom.pdb
ba5aa000 ba5ab100 WMILIB (pdb symbols)
d:\symbols\wmilib.pdb\E4C3A9A4158C4C51BC4E2B46CA108AA51\wmilib.pdb
ba5ac000 ba5ad580 intelide (pdb symbols)
d:\symbols\intelide.pdb\359D0AEA45E240F19D18338CF171A03E1\intelide.pdb
ba5ae000 ba5af700 dmload (pdb symbols)
d:\symbols\dmload.pdb\28B0BFC4C7864BBD92DD888A54E9FE841\dmload.pdb
ba5b2000 ba5b3a80 ParVdm (pdb symbols)
d:\symbols\parvdm.pdb\A33862D098F54FD3B903D85C5B13CDB51\parvdm.pdb
ba5c6000 ba5c7100 swenum (pdb symbols)
d:\symbols\swenum.pdb\0581E48D203A4E0886B13659DE0EBCEA1\swenum.pdb
ba5c8000 ba5c9f00 Fs_Rec (pdb symbols)
d:\symbols\fs_rec.pdb\126BA98076424D57B0A558CDE9819EB31\fs_rec.pdb
ba5ca000 ba5cb080 Beep (pdb symbols)
d:\symbols\beep.pdb\65DC45B439164E4C9DEFF20E161DC74C1\beep.pdb
ba5cc000 ba5cd080 mnmdd (pdb symbols)
d:\symbols\mnmdd.pdb\9871421E8348450AA965551E05AEC4D21\mnmdd.pdb
ba5ce000 ba5cf080 RDPCDD (pdb symbols)
d:\symbols\RDPCDD.pdb\770565601E554819A9670ADF167252531\RDPCDD.pdb
ba5f0000 ba5f1100 dump_WMILIB (pdb symbols)
d:\symbols\wmilib.pdb\E4C3A9A4158C4C51BC4E2B46CA108AA51\wmilib.pdb
ba66c000 ba66dec0 PROCEXP113 (no symbols)
ba6f2000 ba6f2d00 dxgthk (pdb symbols)
d:\symbols\dxgthk.pdb\ED52F57C00F5452FBEBABB7C5BA826DF1\dxgthk.pdb
ba718000 ba718c00 audstub (pdb symbols)
d:\symbols\audstub.pdb\6B3BF8F0C8834E7E8EFE53B7A91E2A3F1\audstub.pdb
ba7d6000 ba7d6b80 Null (pdb symbols)
d:\symbols\null.pdb\77840F8CB3624E438D5D2F0913E4D30E1\null.pdb
bf000000 bf011600 dxg (pdb symbols)
d:\symbols\dxg.pdb\1BF735C70BDA42F7A25DCAEAA44B79001\dxg.pdb
bf012000 bf0217c0 VBoxDisp (no symbols)
bf022000 bf068e80 ATMFD (no symbols)
bf800000 bf9c5980 win32k (pdb symbols)
d:\symbols\win32k.pdb\D1F7F409C579448880A6C2C2977DC4262\win32k.pdb

Thank you both for your continued help!

-JC

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer