[list=1]
[*]
Loading Dump File [C:\Users\Mike\Downloads\BSODDmpFiles\Kapinoida\Windows_NT6_BSOD_jcgriff2\011612-17253-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\users\mike\documents\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16841.amd64fre.win7_gdr.110622-1503
Machine Name:
Kernel base = 0xfffff800`02e02000 PsLoadedModuleList = 0xfffff800`0303fe70
Debug session time: Mon Jan 16 16:47:08.926 2012 (UTC - 7:00)
System Uptime: 0 days 0:14:52.284
Loading Kernel Symbols
...............................................................
................................................................
............................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C1, {fffff98043bdeee0, fffff98043bde697, 690118, 32}
Probably caused by : memory_corruption ( nt!MiCheckSpecialPoolSlop+83 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SPECIAL_POOL_DETECTED_MEMORY_CORRUPTION (c1)
Special pool has detected memory corruption. Typically the current thread's
stack backtrace will reveal the guilty party.
Arguments:
Arg1: fffff98043bdeee0, address trying to free
Arg2: fffff98043bde697, address where one bit is corrupted
Arg3: 0000000000690118, (reserved)
Arg4: 0000000000000032, caller is freeing an address where nearby bytes within the same page have a single bit error
Debugging Details:
------------------
BUGCHECK_STR: 0xC1_32
SPECIAL_POOL_CORRUPTION_TYPE: 32
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: MsMpEng.exe
CURRENT_IRQL: 0
IRP_ADDRESS: fffffa7fffffff89
LAST_CONTROL_TRANSFER: from fffff80002f023a3 to fffff80002e725c0
STACK_TEXT:
fffff880`079cf688 fffff800`02f023a3 : 00000000`000000c1 fffff980`43bdeee0 fffff980`43bde697 00000000`00690118 : nt!KeBugCheckEx
fffff880`079cf690 fffff800`02f79393 : fffff880`00000003 fffffa80`0a4a3b60 00000000`00000293 fffff800`03305dfe : nt!MiCheckSpecialPoolSlop+0x83
fffff880`079cf6d0 fffff800`02fa5356 : fffff800`02e02000 00000000`2b707249 00000000`006a6040 00000000`00000001 : nt!MmFreeSpecialPool+0x1d3
fffff880`079cf800 fffff800`03317026 : fffffa80`07dbf402 fffffa80`07dbf420 00000000`00000000 fffff980`43bdeee0 : nt!ExDeferredFreePool+0xf13
fffff880`079cf8b0 fffff800`033175ec : fffff800`02e91a22 fffff980`43bdeee0 fffff880`079cfca0 00000000`00000000 : nt!VfIoFreeIrp+0xe6
fffff880`079cf8e0 fffff800`02e91a22 : fffff880`079cfca0 fffff980`43bdeee0 00000000`00000000 ffffffff`fffffffd : nt!IovFreeIrpPrivate+0x5c
fffff880`079cf920 fffff800`02e4516d : fffffa80`00000001 00000000`00000000 fffff980`5f81ce00 fffff800`0318a5a7 : nt!IopCompleteRequest+0x402
fffff880`079cf9f0 fffff800`0316abc7 : 00000000`00000000 fffff880`079cfb60 fffff980`5f81cee0 00000000`00000000 : nt!IopPostProcessIrp+0x4d
fffff880`079cfa70 fffff800`0312a495 : 00000000`00000000 fffff880`079cfb68 fffff880`079cfb60 00000000`00000501 : nt!IoRemoveIoCompletion+0xe7
fffff880`079cfb00 fffff800`02e71813 : fffffa80`0a4a3b60 00000000`02d1f538 fffff880`079cfbc8 fffff880`079cfc20 : nt!NtRemoveIoCompletion+0x145
fffff880`079cfbb0 00000000`7748f74a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`02d1f518 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7748f74a
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiCheckSpecialPoolSlop+83
fffff800`02f023a3 cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!MiCheckSpecialPoolSlop+83
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4e02aa44
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0xC1_32_nt!MiCheckSpecialPoolSlop+83
BUCKET_ID: X64_0xC1_32_nt!MiCheckSpecialPoolSlop+83
Followup: MachineOwner
---------
[*]
Loading Dump File [C:\Users\Mike\Downloads\BSODDmpFiles\Kapinoida\Windows_NT6_BSOD_jcgriff2\011612-17191-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\users\mike\documents\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16841.amd64fre.win7_gdr.110622-1503
Machine Name:
Kernel base = 0xfffff800`02e05000 PsLoadedModuleList = 0xfffff800`03042e70
Debug session time: Mon Jan 16 17:34:29.767 2012 (UTC - 7:00)
System Uptime: 0 days 0:00:24.109
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C1, {fffff98010938c10, fffff98010938317, 903e8, 32}
Probably caused by : memory_corruption ( nt!MiCheckSpecialPoolSlop+83 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SPECIAL_POOL_DETECTED_MEMORY_CORRUPTION (c1)
Special pool has detected memory corruption. Typically the current thread's
stack backtrace will reveal the guilty party.
Arguments:
Arg1: fffff98010938c10, address trying to free
Arg2: fffff98010938317, address where one bit is corrupted
Arg3: 00000000000903e8, (reserved)
Arg4: 0000000000000032, caller is freeing an address where nearby bytes within the same page have a single bit error
Debugging Details:
------------------
BUGCHECK_STR: 0xC1_32
SPECIAL_POOL_CORRUPTION_TYPE: 32
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: userinit.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff80002f053a3 to fffff80002e755c0
STACK_TEXT:
fffff880`09bf30e8 fffff800`02f053a3 : 00000000`000000c1 fffff980`10938c10 fffff980`10938317 00000000`000903e8 : nt!KeBugCheckEx
fffff880`09bf30f0 fffff800`02f7c393 : fffffa80`00000004 00000000`00000001 00000000`00000293 fffff800`03308dfe : nt!MiCheckSpecialPoolSlop+0x83
fffff880`09bf3130 fffff800`02fa8356 : fffff800`02e05000 00000000`2b707249 00000000`00038d00 00000000`00000001 : nt!MmFreeSpecialPool+0x1d3
fffff880`09bf3260 fffff800`0331a026 : fffffa80`0a1ff402 fffffa80`0a1ff410 00000000`00000000 fffff980`10938c10 : nt!ExDeferredFreePool+0xf13
fffff880`09bf3310 fffff800`0331a5ec : fffff800`0317564d fffff980`10938c10 fffff800`03174f90 fffff880`09bf3710 : nt!VfIoFreeIrp+0xe6
fffff880`09bf3340 fffff800`0317564d : 00000000`00000045 fffff800`03174f90 00000000`00000000 fffff980`10938c10 : nt!IovFreeIrpPrivate+0x5c
fffff880`09bf3380 fffff800`0316bba4 : fffffa80`08aed940 00000000`00000000 fffffa80`09ebb760 fffff800`02e82a01 : nt!IopParseDevice+0x6bd
fffff880`09bf3510 fffff800`03170b7d : fffffa80`09ebb760 fffff880`09bf3670 00000000`00000040 fffffa80`06d4cf30 : nt!ObpLookupObjectName+0x585
fffff880`09bf3610 fffff800`0315602a : fffff880`09bf37d0 00000000`000aeb50 00000000`00000001 fffff800`02f1d859 : nt!ObOpenObjectByName+0x1cd
fffff880`09bf36c0 fffff800`02e74813 : fffffa80`0a74ab60 fffffa80`07a00000 fffffa80`0a74ab60 fffffa80`0a74ab60 : nt!NtQueryAttributesFile+0x149
fffff880`09bf3960 00000000`7723fa8a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`000aeab8 fffff800`02e6cf00 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7723fa8a
fffff880`09bf3d70 00000000`00000000 : 00000000`00000000 00000000`000000c0 fffff800`02f6b6fb fffff8a0`02ebc000 : nt!KiCallUserMode
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiCheckSpecialPoolSlop+83
fffff800`02f053a3 cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!MiCheckSpecialPoolSlop+83
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4e02aa44
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0xC1_32_nt!MiCheckSpecialPoolSlop+83
BUCKET_ID: X64_0xC1_32_nt!MiCheckSpecialPoolSlop+83
Followup: MachineOwner
---------
[*]
Loading Dump File [C:\Users\Mike\Downloads\BSODDmpFiles\Kapinoida\Windows_NT6_BSOD_jcgriff2\011612-17487-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\users\mike\documents\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16841.amd64fre.win7_gdr.110622-1503
Machine Name:
Kernel base = 0xfffff800`02e05000 PsLoadedModuleList = 0xfffff800`03042e70
Debug session time: Mon Jan 16 17:35:24.256 2012 (UTC - 7:00)
System Uptime: 0 days 0:00:25.988
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000007E, {ffffffffc0000005, fffff80002faa0f3, fffff88003371788, fffff88003370ff0}
Probably caused by : rdyboost.sys ( rdyboost!SmFpFree+d4 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002faa0f3, The address that the exception occurred at
Arg3: fffff88003371788, Exception Record Address
Arg4: fffff88003370ff0, Context Record Address
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!ExFreePoolWithTag+43
fffff800`02faa0f3 418b45f0 mov eax,dword ptr [r13-10h]
EXCEPTION_RECORD: fffff88003371788 -- (.exr 0xfffff88003371788)
ExceptionAddress: fffff80002faa0f3 (nt!ExFreePoolWithTag+0x0000000000000043)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
CONTEXT: fffff88003370ff0 -- (.cxr 0xfffff88003370ff0)
rax=0000000000000000 rbx=fffffa8008c0df00 rcx=fffff6fb7dbed000
rdx=0000ef0600004bbe rsi=0000000000000000 rdi=fffff8800ef43000
rip=fffff80002faa0f3 rsp=fffff880033719c0 rbp=fffffa80093fb390
r8=0000000000004bbe r9=0000000000000001 r10=0000000000000000
r11=0000000000000000 r12=0000000000000002 r13=0000ef0600004bbe
r14=fffffa8009b550d0 r15=fffff88003371bc8
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
nt!ExFreePoolWithTag+0x43:
fffff800`02faa0f3 418b45f0 mov eax,dword ptr [r13-10h] ds:002b:0000ef06`00004bae=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030ad0e0
ffffffffffffffff
FOLLOWUP_IP:
rdyboost!SmFpFree+d4
fffff880`0101aff0 488b5c2440 mov rbx,qword ptr [rsp+40h]
BUGCHECK_STR: 0x7E
LAST_CONTROL_TRANSFER: from fffff8800101aff0 to fffff80002faa0f3
STACK_TEXT:
fffff880`033719c0 fffff880`0101aff0 : 00000000`00000002 fffffa80`093fb390 00000000`00000000 00000000`000006c6 : nt!ExFreePoolWithTag+0x43
fffff880`03371a70 fffff880`01010a78 : fffffa80`08c0d078 00000000`000006c6 00000000`00000000 fffffa80`09b550d0 : rdyboost!SmFpFree+0xd4
fffff880`03371ab0 fffff880`0100f9b7 : 00000000`000006c6 fffff800`00000020 fffffa80`09b550d0 fffff880`03371b80 : rdyboost!ST_STORE<SMD_TRAITS>::StDmpSinglePageRetrieve+0x2e8
fffff880`03371b50 fffff880`0100f5fc : 00000000`0000000a 00000000`00000008 fffffa80`09b550d0 fffffa80`08c0d010 : rdyboost!ST_STORE<SMD_TRAITS>::StDmPageRetrieve+0x153
fffff880`03371c80 fffff880`0100e3fe : fffffa80`09b550d0 00000000`00000080 00000000`00000080 fffffa80`08c0dee8 : rdyboost!ST_STORE<SMD_TRAITS>::StWorkItemProcess+0x224
fffff880`03371ce0 fffff800`031156fa : 00000000`00000000 fffff880`00000000 fffffa80`08addb60 fffffa80`06d43ae0 : rdyboost!SMKM_STORE<SMD_TRAITS>::SmStWorker+0x152
fffff880`03371d40 fffff800`02e53b46 : fffff880`02f64180 fffffa80`08addb60 fffff880`02f6efc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`03371d80 00000000`00000000 : fffff880`03372000 fffff880`0336c000 fffff880`03371820 00000000`00000000 : nt!KiStartSystemThread+0x16
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: rdyboost!SmFpFree+d4
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: rdyboost
IMAGE_NAME: rdyboost.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc48a
STACK_COMMAND: .cxr 0xfffff88003370ff0 ; kb
FAILURE_BUCKET_ID: X64_0x7E_rdyboost!SmFpFree+d4
BUCKET_ID: X64_0x7E_rdyboost!SmFpFree+d4
Followup: MachineOwner
---------
[/list]