Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Nickle\AppData\Local\Temp\Rar$DI06.316\041810-17004-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02c67000 PsLoadedModuleList = 0xfffff800`02ea4e50
Debug session time: Sun Apr 18 02:10:48.209 2010 (UTC - 4:00)
System Uptime: 0 days 2:41:29.676
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 24, {1904fb, fffff88008901728, fffff88008900f90, fffff80002cc0577}
Probably caused by : Ntfs.sys ( Ntfs!NtfsDeleteScb+ad )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff88008901728
Arg3: fffff88008900f90
Arg4: fffff80002cc0577
Debugging Details:
------------------
EXCEPTION_RECORD: fffff88008901728 -- (.exr 0xfffff88008901728)
ExceptionAddress: fffff80002cc0577 (nt!FsRtlUninitializeOplock+0x00000000000000ab)
[COLOR=Blue]ExceptionCode: c0000005 (Access violation)[/COLOR][COLOR=Red]<--------?????Denied access AV/firewall to blame?????[/COLOR]
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
CONTEXT: fffff88008900f90 -- (.cxr 0xfffff88008900f90)
rax=fffff8a00deda950 rbx=fffffa8007f77fc0 rcx=fffff8a00dedaa40
rdx=fffff8a008730c58 rsi=fdfff8a008730c58 rdi=fffffa8003fb0040
rip=fffff80002cc0577 rsp=fffff88008901960 rbp=0000000000000130
r8=fffff8a00deda800 r9=0000000000000000 r10=fffff8a00deda750
r11=fffff88008901b52 r12=0000000000000705 r13=fffff8a008730c10
r14=0000000000000000 r15=fffff8a00dedaae8
iopl=0 nv up ei ng nz na po cy
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010287
nt!FsRtlUninitializeOplock+0xab:
fffff800`02cc0577 488b0e mov rcx,qword ptr [rsi] ds:002b:fdfff8a0`08730c58=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f0f0e0
ffffffffffffffff
FOLLOWUP_IP:
Ntfs!NtfsDeleteScb+ad
fffff880`0129bb71 4c8b1b mov r11,qword ptr [rbx]
FAULTING_IP:
nt!FsRtlUninitializeOplock+ab
fffff800`02cc0577 488b0e mov rcx,qword ptr [rsi]
BUGCHECK_STR: 0x24
LAST_CONTROL_TRANSFER: from fffff8800129bb71 to fffff80002cc0577
STACK_TEXT:
fffff880`08901960 fffff880`0129bb71 : fffff8a0`08730c10 fffff880`08901a28 00000000`00000706 00000000`00000705 : nt!FsRtlUninitializeOplock+0xab
fffff880`089019a0 fffff880`0129b8d5 : fffffa00`01010000 00000000`00000000 fffff800`02e7c500 00000000`00000001 : Ntfs!NtfsDeleteScb+0xad
fffff880`089019e0 fffff880`0120ecb4 : fffff8a0`0deda780 fffff8a0`0deda880 fffff800`02e7c500 fffff880`08901b52 : Ntfs!NtfsRemoveScb+0x61
fffff880`08901a20 fffff880`012992dc : fffff8a0`0deda750 fffff800`02e7c5a0 fffff880`08901b52 fffffa80`03bf35a0 : Ntfs!NtfsPrepareFcbForRemoval+0x50
fffff880`08901a50 fffff880`01217882 : fffffa80`03bf35a0 fffffa80`03bf35a0 fffff8a0`0deda750 00000000`00000000 : Ntfs!NtfsTeardownStructures+0xdc
fffff880`08901ad0 fffff880`012b0813 : fffffa80`03bf35a0 fffff800`02e7c5a0 fffff8a0`0deda750 00000000`00000009 : Ntfs!NtfsDecrementCloseCounts+0xa2
fffff880`08901b10 fffff880`0128a38f : fffffa80`03bf35a0 fffff8a0`0deda880 fffff8a0`0deda750 fffffa80`055d0180 : Ntfs!NtfsCommonClose+0x353
fffff880`08901be0 fffff800`02ce4861 : 00000000`00000000 fffff800`02ccb200 fffff800`02ede101 fffffa80`00000002 : Ntfs!NtfsFspClose+0x15f
fffff880`08901cb0 fffff800`02f7ca86 : 00000000`00000000 fffffa80`03fb0040 00000000`00000080 fffffa80`03705b30 : nt!ExpWorkerThread+0x111
fffff880`08901d40 fffff800`02cb5b06 : fffff880`009e7180 fffffa80`03fb0040 fffff880`009f1fc0 fffff880`01214534 : nt!PspSystemThreadStartup+0x5a
fffff880`08901d80 00000000`00000000 : fffff880`08902000 fffff880`088fc000 fffff880`08901240 00000000`00000000 : nt!KxStartSystemThread+0x16
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: Ntfs!NtfsDeleteScb+ad
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc14f
STACK_COMMAND: .cxr 0xfffff88008900f90 ; kb
FAILURE_BUCKET_ID: X64_0x24_Ntfs!NtfsDeleteScb+ad
BUCKET_ID: X64_0x24_Ntfs!NtfsDeleteScb+ad
Followup: MachineOwner
---------
1: kd> .exr 0xfffff88008901728
ExceptionAddress: fffff80002cc0577 (nt!FsRtlUninitializeOplock+0x00000000000000ab)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
1: kd> lmsm
start end module name
fffff880`02bb5000 fffff880`02bf3000 1394ohci (deferred)
fffff880`00f12000 fffff880`00f69000 ACPI (deferred)
fffff880`0413a000 fffff880`041c4000 afd (deferred)
fffff880`04ab8000 fffff880`04ace000 AgileVpn (deferred)
fffff880`0434d000 fffff880`04362000 amdppm (deferred)
fffff880`00dcd000 fffff880`00dd8000 amdxata (deferred)
fffff880`04a4f000 fffff880`04a57000 ASACPI (deferred)
fffff880`065c7000 fffff880`065d2000 asyncmac (deferred)
fffff880`00d9a000 fffff880`00da3000 atapi (deferred)
fffff880`00da3000 fffff880`00dcd000 ataport (deferred)
fffff880`04ad9000 fffff880`050f0000 atikmdag (deferred)
fffff960`00920000 fffff960`00981000 ATMFD (deferred)
fffff880`02a95000 fffff880`02a9c000 Beep (deferred)
fffff880`04316000 fffff880`04327000 blbdrive (deferred)
fffff880`0396c000 fffff880`0398a000 bowser (deferred)
fffff960`00720000 fffff960`00747000 cdd (deferred)
fffff880`02a05000 fffff880`02a2f000 cdrom (deferred)
fffff880`00cc0000 fffff880`00d80000 CI (deferred)
fffff880`011cc000 fffff880`011fc000 CLASSPNP (deferred)
fffff880`00c62000 fffff880`00cc0000 CLFS (deferred)
fffff880`010c3000 fffff880`01136000 cng (deferred)
fffff880`04a57000 fffff880`04a67000 CompositeBus (deferred)
fffff880`05bf0000 fffff880`05bfe000 crashdmp (deferred)
fffff880`042f8000 fffff880`04316000 dfsc (deferred)
fffff880`042e9000 fffff880`042f8000 discache (deferred)
fffff880`013de000 fffff880`013f4000 disk (deferred)
fffff880`056ee000 fffff880`05710000 drmk (deferred)
fffff880`05778000 fffff880`05781000 dump_atapi (deferred)
fffff880`0576c000 fffff880`05778000 dump_ataport (deferred)
fffff880`05781000 fffff880`05794000 dump_dumpfve (deferred)
fffff880`05794000 fffff880`057a0000 Dxapi (deferred)
fffff880`050f0000 fffff880`051e4000 dxgkrnl (deferred)
fffff880`04a00000 fffff880`04a46000 dxgmms1 (deferred)
fffff880`01051000 fffff880`01065000 fileinfo (deferred)
fffff880`01005000 fffff880`01051000 fltmgr (deferred)
fffff880`013d4000 fffff880`013de000 Fs_Rec (deferred)
fffff880`00c00000 fffff880`00c3a000 fvevol (deferred)
fffff880`01136000 fffff880`01180000 fwpkclnt (deferred)
fffff800`02c1e000 fffff800`02c67000 hal (deferred)
fffff880`043ce000 fffff880`043f2000 HDAudBus (deferred)
fffff880`05710000 fffff880`0576c000 HdAudio (deferred)
fffff880`057e6000 fffff880`057ff000 HIDCLASS (deferred)
fffff880`05600000 fffff880`05608080 HIDPARSE (deferred)
fffff880`057d8000 fffff880`057e6000 hidusb (deferred)
fffff880`038a4000 fffff880`0396c000 HTTP (deferred)
fffff880`015e8000 fffff880`015f1000 hwpolicy (deferred)
fffff880`0438b000 fffff880`043a9000 i8042prt (deferred)
fffff880`043a9000 fffff880`043b8000 kbdclass (deferred)
fffff800`00bd1000 fffff800`00bdb000 kdcom (deferred)
fffff880`03c11000 fffff880`0413a000 kl1 (deferred)
fffff880`015da000 fffff880`015e8000 klbg (deferred)
fffff880`02a2f000 fffff880`02a8c000 klif (deferred)
fffff880`041f3000 fffff880`041fd000 klim6 (deferred)
fffff880`05616000 fffff880`05620000 klmouflt (deferred)
fffff880`04a75000 fffff880`04ab8000 ks (deferred)
fffff880`013a9000 fffff880`013c3000 ksecdd (deferred)
fffff880`01595000 fffff880`015c0000 ksecpkg (deferred)
fffff880`04a6f000 fffff880`04a74200 ksthunk (deferred)
fffff880`049c4000 fffff880`049d9000 lltdio (deferred)
fffff880`0562e000 fffff880`05651000 luafv (deferred)
fffff880`04946000 fffff880`04982880 mcdbus (deferred)
fffff880`00c41000 fffff880`00c4e000 mcupdate (deferred)
fffff880`05620000 fffff880`0562e000 monitor (deferred)
fffff880`051f0000 fffff880`051ff000 mouclass (deferred)
fffff880`05609000 fffff880`05616000 mouhid (deferred)
fffff880`00d80000 fffff880`00d9a000 mountmgr (deferred)
fffff880`0398a000 fffff880`039a2000 mpsdrv (deferred)
fffff880`039a2000 fffff880`039cf000 mrxsmb (deferred)
fffff880`03800000 fffff880`0384e000 mrxsmb10 (deferred)
fffff880`0384e000 fffff880`03871000 mrxsmb20 (deferred)
fffff880`02afa000 fffff880`02b05000 Msfs (deferred)
fffff880`00f72000 fffff880`00f7c000 msisadrv (deferred)
fffff880`01065000 fffff880`010c3000 msrpc (deferred)
fffff880`042de000 fffff880`042e9000 mssmbios (deferred)
fffff880`015c8000 fffff880`015da000 mup (deferred)
fffff880`01443000 fffff880`01535000 ndis (deferred)
fffff880`051e4000 fffff880`051f0000 ndistapi (deferred)
fffff880`048c1000 fffff880`048f0000 ndiswan (deferred)
fffff880`056d9000 fffff880`056ee000 NDProxy (deferred)
fffff880`03c00000 fffff880`03c0f000 netbios (deferred)
fffff880`02b41000 fffff880`02b86000 netbt (deferred)
fffff880`01535000 fffff880`01595000 NETIO (deferred)
fffff880`02b05000 fffff880`02b16000 Npfs (deferred)
fffff880`042d2000 fffff880`042de000 nsiproxy (deferred)
fffff800`02c67000 fffff800`03243000 nt (pdb symbols) c:\websymbols\ntkrnlmp.pdb\7E9A3CAB626845DE8E10816E3080A3B72\ntkrnlmp.pdb
fffff880`01206000 fffff880`013a9000 Ntfs (pdb symbols) c:\websymbols\ntfs.pdb\A3FA3C11632A4FC09223AB611D6EFF7F2\ntfs.pdb
fffff880`02a8c000 fffff880`02a95000 Null (deferred)
fffff880`0484b000 fffff880`0489c500 nvmf6264 (deferred)
fffff880`043b8000 fffff880`043c3000 nvsmu (deferred)
fffff880`041cd000 fffff880`041f3000 pacer (deferred)
fffff880`00fbc000 fffff880`00fd1000 partmgr (deferred)
fffff880`00f7c000 fffff880`00faf000 pci (deferred)
fffff880`00fe6000 fffff880`00fed000 pciide (deferred)
fffff880`00fed000 fffff880`00ffd000 PCIIDEX (deferred)
fffff880`013c3000 fffff880`013d4000 pcw (deferred)
fffff880`06069000 fffff880`0610f000 peauth (deferred)
fffff880`05a00000 fffff880`05a3d000 portcls (deferred)
fffff880`00c4e000 fffff880`00c62000 PSHED (deferred)
fffff880`0489d000 fffff880`048c1000 rasl2tp (deferred)
fffff880`048f0000 fffff880`0490b000 raspppoe (deferred)
fffff880`0490b000 fffff880`0492c000 raspptp (deferred)
fffff880`0492c000 fffff880`04946000 rassstp (deferred)
fffff880`04281000 fffff880`042d2000 rdbss (deferred)
fffff880`02adf000 fffff880`02ae8000 RDPCDD (deferred)
fffff880`02ae8000 fffff880`02af1000 rdpencdd (deferred)
fffff880`02af1000 fffff880`02afa000 rdprefmp (deferred)
fffff880`01400000 fffff880`0143a000 rdyboost (deferred)
fffff880`049d9000 fffff880`049f1000 rspndr (deferred)
fffff880`05a43000 fffff880`05bef900 RTKVHD64 (deferred)
fffff880`04983000 fffff880`049b2000 SCSIPORT (deferred)
fffff880`0610f000 fffff880`0611a000 secdrv (deferred)
fffff880`0437f000 fffff880`0438b000 serenum (deferred)
fffff880`04362000 fffff880`0437f000 serial (deferred)
fffff880`0654e000 fffff880`06556000 serscan (deferred)
fffff880`015c0000 fffff880`015c8000 spldr (deferred)
fffff880`064ae000 fffff880`06546000 srv (deferred)
fffff880`06159000 fffff880`061c2000 srv2 (deferred)
fffff880`0611a000 fffff880`06147000 srvnet (deferred)
fffff880`04ace000 fffff880`04acf480 swenum (deferred)
fffff880`01601000 fffff880`017fe000 tcpip (deferred)
fffff880`06147000 fffff880`06159000 tcpipreg (deferred)
fffff880`02b34000 fffff880`02b41000 TDI (deferred)
fffff880`02b16000 fffff880`02b34000 tdx (deferred)
fffff880`02ba1000 fffff880`02bb5000 termdd (deferred)
fffff960`00490000 fffff960`0049a000 TSDDD (deferred)
fffff880`04327000 fffff880`0434d000 tunnel (deferred)
fffff880`049b2000 fffff880`049c4000 umbus (deferred)
fffff880`057bd000 fffff880`057d7c00 usbaudio (deferred)
fffff880`057a0000 fffff880`057bd000 usbccgp (deferred)
fffff880`05bfe000 fffff880`05bfff00 USBD (deferred)
fffff880`04256000 fffff880`04267000 usbehci (deferred)
fffff880`0567f000 fffff880`056d9000 usbhub (deferred)
fffff880`043c3000 fffff880`043ce000 usbohci (deferred)
fffff880`04200000 fffff880`04256000 USBPORT (deferred)
fffff880`00faf000 fffff880`00fbc000 vdrvroot (deferred)
fffff880`02a9c000 fffff880`02aaa000 vga (deferred)
fffff880`02aaa000 fffff880`02acf000 VIDEOPRT (deferred)
fffff880`00fd1000 fffff880`00fe6000 volmgr (deferred)
fffff880`00e00000 fffff880`00e5c000 volmgrx (deferred)
fffff880`01180000 fffff880`011cc000 volsnap (deferred)
fffff880`02b86000 fffff880`02ba1000 wanarp (deferred)
fffff880`02acf000 fffff880`02adf000 watchdog (deferred)
fffff880`00e5f000 fffff880`00f03000 Wdf01000 (deferred)
fffff880`00f03000 fffff880`00f12000 WDFLDR (deferred)
fffff880`041c4000 fffff880`041cd000 wfplwf (deferred)
fffff960`00080000 fffff960`0038f000 win32k (deferred)
fffff880`04a46000 fffff880`04a4f000 wmiacpi (deferred)
fffff880`00f69000 fffff880`00f72000 WMILIB (deferred)
fffff880`05651000 fffff880`05672000 WudfPf (deferred)
Unloaded modules:
fffff880`06556000 fffff880`065c7000 spsys.sys
fffff880`06546000 fffff880`0654e000 serscan.sys
fffff880`04a67000 fffff880`04a6f000 serscan.sys
fffff880`015f1000 fffff880`015ff000 crashdmp.sys
fffff880`013f4000 fffff880`01400000 dump_ataport
fffff880`0143a000 fffff880`01443000 dump_atapi.s
fffff880`00dd8000 fffff880`00deb000 dump_dumpfve