Note
To rename drivers, first create a system restore point. Use Windows Explorer and navigate to C:\Windows\System32\Drivers, locate the driver and rename the driver from .sys to .bak. This will break the software or hardware the driver is associated with.
Code:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a55000 PsLoadedModuleList = 0xfffff800`02c92e50
Debug session time: Sun Nov 28 11:16:55.864 2010 (GMT-5)
System Uptime: 0 days 0:37:00.815
Loading Kernel Symbols
...............................................................
................................................................
.................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff9600012909f, fffff88008217960, 0}
Probably caused by : win32k.sys ( win32k!GetStyleWindow+13 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff9600012909f, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88008217960, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
win32k!GetStyleWindow+13
fffff960`0012909f 84540828 test byte ptr [rax+rcx+28h],dl
CONTEXT: fffff88008217960 -- (.cxr 0xfffff88008217960)
rax=000000000000000b rbx=fffff900c0886a30 rcx=00fff900c0800b90
rdx=0000000000000b02 rsi=0000000000000004 rdi=fffff900c2241010
rip=fffff9600012909f rsp=fffff88008218338 rbp=fffff900c07c5c30
r8=000000000000000b r9=fffff900c0886a30 r10=0000000004c00000
r11=0000000000000100 r12=fffff900c0800b90 r13=0000000000000000
r14=0000000000000001 r15=0000000000000001
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
win32k!GetStyleWindow+0x13:
fffff960`0012909f 84540828 test byte ptr [rax+rcx+28h],dl ds:002b:00fff900`c0800bc3=??
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: mirc.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff9600012909f
STACK_TEXT:
fffff880`08218338 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!GetStyleWindow+0x13
FOLLOWUP_IP:
win32k!GetStyleWindow+13
fffff960`0012909f 84540828 test byte ptr [rax+rcx+28h],dl
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32k!GetStyleWindow+13
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4c7dc13c
STACK_COMMAND: .cxr 0xfffff88008217960 ; kb
FAILURE_BUCKET_ID: X64_0x3B_win32k!GetStyleWindow+13
BUCKET_ID: X64_0x3B_win32k!GetStyleWindow+13
Followup: MachineOwner
---------
0: kd> lmtsmn
start end module name
fffff880`0102f000 fffff880`01086000 ACPI ACPI.sys Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`03e24000 fffff880`03eae000 afd afd.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0526e000 fffff880`05284000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00ff2000 fffff880`00ffd000 amdxata amdxata.sys Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`02d89000 fffff880`02dce000 anw17eno anw17eno.SYS Tue Jul 14 17:12:55 2009 (4A5CF4D7)
fffff880`045c5000 fffff880`045cd000 ASACPI ASACPI.sys Sun Mar 27 22:30:36 2005 (42476C4C)
fffff880`00fbf000 fffff880`00fc8000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fc8000 fffff880`00ff2000 ataport ataport.SYS Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`0443b000 fffff880`045b8000 athrx athrx.sys Mon Oct 05 12:33:57 2009 (4ACA1FF5)
fffff880`0481c000 fffff880`04ff2000 atikmdag atikmdag.sys Tue Sep 28 21:41:26 2010 (4CA29946)
fffff880`0403c000 fffff880`04087000 atikmpag atikmpag.sys Tue Sep 28 21:14:49 2010 (4CA29309)
fffff880`02ca7000 fffff880`02cb8000 avgfwd6a avgfwd6a.sys Sun Jul 11 21:38:24 2010 (4C3A7210)
fffff880`0736f000 fffff880`073a3000 AVGIDSDriver AVGIDSDriver.Sys Tue Aug 03 18:24:45 2010 (4C58972D)
fffff880`014c9000 fffff880`014d3000 AVGIDSEH AVGIDSEH.Sys Mon Sep 13 18:46:38 2010 (4C8EA9CE)
fffff880`047e6000 fffff880`047f2000 AVGIDSFilter AVGIDSFilter.Sys Tue Aug 03 18:23:21 2010 (4C5896D9)
fffff880`04196000 fffff880`041e5000 avgldx64 avgldx64.sys Mon Sep 06 20:49:29 2010 (4C858C19)
fffff880`00c2a000 fffff880`00c39000 avgmfx64 avgmfx64.sys Mon Sep 06 20:49:14 2010 (4C858C0A)
fffff880`015f6000 fffff880`01600000 avgrkx64 avgrkx64.sys Mon Sep 06 20:49:37 2010 (4C858C21)
fffff880`02ce3000 fffff880`02d44000 avgtdia avgtdia.sys Tue Nov 09 15:13:33 2010 (4CD9AB6D)
fffff880`0162a000 fffff880`01631000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04185000 fffff880`04196000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`04712000 fffff880`04730000 bowser bowser.sys Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff880`0602b000 fffff880`06036000 BVRPMPR5a64 BVRPMPR5a64.SYS Wed Feb 21 12:56:15 2007 (45DC87BF)
fffff960`006a0000 fffff960`006c7000 cdd cdd.dll Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`00c00000 fffff880`00c2a000 cdrom cdrom.sys Tue Jul 21 02:54:09 2009 (4A656611)
fffff880`00d02000 fffff880`00dc2000 CI CI.dll Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`013cc000 fffff880`013fc000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00ca4000 fffff880`00d02000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01552000 fffff880`015c5000 cng cng.sys Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`045d9000 fffff880`045e9000 CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`0618d000 fffff880`0619b000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`040e4000 fffff880`04167000 csc csc.sys Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`04167000 fffff880`04185000 dfsc dfsc.sys Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03fb6000 fffff880`03fc5000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`015e0000 fffff880`015f6000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0503d000 fffff880`0505f000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`061a7000 fffff880`061b0000 dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0619b000 fffff880`061a7000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`061b0000 fffff880`061c3000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`061c3000 fffff880`061cf000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04272000 fffff880`04366000 dxgkrnl dxgkrnl.sys Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04366000 fffff880`043ac000 dxgmms1 dxgmms1.sys Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`07552000 fffff880`07588000 fastfat fastfat.SYS Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`051ec000 fffff880`051f9000 fdc fdc.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`00dc2000 fffff880`00dd6000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`053d0000 fffff880`053db000 flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`00e00000 fffff880`00e4c000 fltmgr fltmgr.sys Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`015d6000 fffff880`015e0000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0148f000 fffff880`014c9000 fvevol fvevol.sys Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`017ae000 fffff880`017f8000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02a0c000 fffff800`02a55000 hal hal.dll Tue Jul 21 06:29:39 2009 (4A659893)
fffff880`043ac000 fffff880`043d0000 HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`060bb000 fffff880`06117000 HdAudio HdAudio.sys Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`06144000 fffff880`0615d000 HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`0615d000 fffff880`06165080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`06136000 fffff880`06144000 hidusb hidusb.sys Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`0464a000 fffff880`04712000 HTTP HTTP.sys Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01486000 fffff880`0148f000 hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04026000 fffff880`0403c000 intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`05344000 fffff880`05353000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`06172000 fffff880`06180000 kbdhid kbdhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00ba0000 fffff800`00baa000 kdcom kdcom.dll Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`06166000 fffff880`06172000 KMWDFILTER KMWDFILTER.sys Wed Apr 29 02:20:48 2009 (49F7F1C0)
fffff880`04087000 fffff880`040ca000 ks ks.sys Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`01538000 fffff880`01552000 ksecdd ksecdd.sys Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01783000 fffff880`017ae000 ksecpkg ksecpkg.sys Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`051e6000 fffff880`051eb200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`06036000 fffff880`0604b000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`061dd000 fffff880`06200000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c4c000 fffff880`00c90000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`061cf000 fffff880`061dd000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`05353000 fffff880`05362000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`06180000 fffff880`0618d000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00fa5000 fffff880`00fbf000 mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`04730000 fffff880`04748000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`04748000 fffff880`04775000 mrxsmb mrxsmb.sys Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`04775000 fffff880`047c3000 mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`047c3000 fffff880`047e6000 mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`02c8b000 fffff880`02c96000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01086000 fffff880`01090000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`014da000 fffff880`01538000 msrpc msrpc.sys Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03fab000 fffff880`03fb6000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01618000 fffff880`0162a000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01631000 fffff880`01723000 ndis ndis.sys Fri Jul 24 02:14:51 2009 (4A69515B)
fffff880`052a8000 fffff880`052b4000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0609e000 fffff880`060b1000 ndisuio ndisuio.sys Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`052b4000 fffff880`052e3000 ndiswan ndiswan.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`053db000 fffff880`053f0000 NDProxy NDProxy.SYS Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03ef3000 fffff880`03f02000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d44000 fffff880`02d89000 netbt netbt.sys Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01723000 fffff880`01783000 NETIO NETIO.SYS Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`02c96000 fffff880`02ca7000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03f9f000 fffff880`03fab000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a55000 fffff800`03031000 nt ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01229000 fffff880`013cc000 Ntfs Ntfs.sys Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`00e4c000 fffff880`00e55000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`0604b000 fffff880`0609e000 nwifi nwifi.sys Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`05061000 fffff880`051e6000 P17 P17.sys Fri Oct 16 02:44:53 2009 (4AD81665)
fffff880`03eb7000 fffff880`03edd000 pacer pacer.sys Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00f08000 fffff880`00f1d000 partmgr partmgr.sys Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`0109d000 fffff880`010d0000 pci pci.sys Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00f8e000 fffff880`00f95000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00f95000 fffff880`00fa5000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`015c5000 fffff880`015d6000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`0727f000 fffff880`07325000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05000000 fffff880`0503d000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c90000 fffff880`00ca4000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`05284000 fffff880`052a8000 rasl2tp rasl2tp.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`052e3000 fffff880`052fe000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`052fe000 fffff880`0531f000 raspptp raspptp.sys Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`0531f000 fffff880`05339000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03f4e000 fffff880`03f9f000 rdbss rdbss.sys Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`05339000 fffff880`05344000 rdpbus rdpbus.sys Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`02c70000 fffff880`02c79000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02c79000 fffff880`02c82000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02c82000 fffff880`02c8b000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0144c000 fffff880`01486000 rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`05200000 fffff880`05218000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`01000000 fffff880`0102f000 SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`07325000 fffff880`07330000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`045cd000 fffff880`045d9000 serenum serenum.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`03f02000 fffff880`03f1f000 serial serial.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`01610000 fffff880`01618000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`010d0000 fffff880`011f6000 sptd sptd.sys Sun Oct 11 16:55:14 2009 (4AD24632)
fffff880`0521a000 fffff880`0526d680 srs_sscfilter_amd64 srs_sscfilter_amd64.sys Tue Dec 15 17:39:31 2009 (4B281023)
fffff880`074bc000 fffff880`07552000 srv srv.sys Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`07200000 fffff880`07267000 srv2 srv2.sys Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`07330000 fffff880`0735d000 srvnet srvnet.sys Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`05362000 fffff880`05363480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01803000 fffff880`01a00000 tcpip tcpip.sys Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`0735d000 fffff880`0736f000 tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02cd6000 fffff880`02ce3000 TDI TDI.SYS Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02cb8000 fffff880`02cd6000 tdx tdx.sys Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03f3a000 fffff880`03f4e000 termdd termdd.sys Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`004b0000 fffff960`004ba000 TSDDD TSDDD.dll unavailable (00000000)
fffff880`04000000 fffff880`04026000 tunnel tunnel.sys Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`05364000 fffff880`05376000 umbus umbus.sys Tue Jul 21 03:48:37 2009 (4A6572D5)
fffff880`06117000 fffff880`06134000 usbccgp usbccgp.sys Sat Jun 13 04:31:03 2009 (4A3363C7)
fffff880`06134000 fffff880`06135f00 USBD USBD.SYS Sat Jun 13 04:30:46 2009 (4A3363B6)
fffff880`04256000 fffff880`04267000 usbehci usbehci.sys Sat Jun 13 04:30:51 2009 (4A3363BB)
fffff880`05376000 fffff880`053d0000 usbhub usbhub.sys Tue Jul 21 03:49:00 2009 (4A6572EC)
fffff880`04200000 fffff880`04256000 USBPORT USBPORT.SYS Sat Jun 13 04:30:55 2009 (4A3363BF)
fffff880`043d0000 fffff880`043dd000 usbuhci usbuhci.sys Sat Jun 13 04:30:49 2009 (4A3363B9)
fffff880`06021000 fffff880`0602b000 uxpatch uxpatch.sys Mon Jul 13 01:09:18 2009 (4A5AC17E)
fffff880`01090000 fffff880`0109d000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00c39000 fffff880`00c47000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02c3b000 fffff880`02c60000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01600000 fffff880`01610000 vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00f1d000 fffff880`00f32000 volmgr volmgr.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00f32000 fffff880`00f8e000 volmgrx volmgrx.sys Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01400000 fffff880`0144c000 volsnap volsnap.sys Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`045b8000 fffff880`045c5000 vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`03edd000 fffff880`03ef3000 vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`03f1f000 fffff880`03f3a000 wanarp wanarp.sys Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02c60000 fffff880`02c70000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e55000 fffff880`00ef9000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ef9000 fffff880`00f08000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03eae000 fffff880`03eb7000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00070000 fffff960`0037f000 win32k win32k.sys Tue Aug 31 22:58:04 2010 (4C7DC13C)
fffff880`011f6000 fffff880`011ff000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`06000000 fffff880`06021000 WudfPf WudfPf.sys Mon Jul 13 20:05:37 2009 (4A5BCBD1)
Unloaded modules:
fffff880`07588000 fffff880`075f9000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01200000 fffff880`0120e000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0120e000 fffff880`0121a000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0121a000 fffff880`01223000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`00dd6000 fffff880`00de9000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
Debug session time: Sun Nov 28 10:39:22.574 2010 (GMT-5)
System Uptime: 0 days 3:57:58.387
Loading Kernel Symbols
...............................................................
................................................................
.................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1, {76d0008a, 0, ffff0000, fffff880081fc8e0}
Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceExit+245 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
APC_INDEX_MISMATCH (1)
This is a kernel internal error. The most common reason to see this
bugcheck is when a filesystem or a driver has a mismatched number of
calls to disable and re-enable APCs. The key data item is the
Thread->KernelApcDisable field. A negative value indicates that a driver
has disabled APC calls without re-enabling them. A positive value indicates
that the reverse is true. This check is made on exit from a system call.
Arguments:
Arg1: 0000000076d0008a, address of system function (system call)
Arg2: 0000000000000000, Thread->ApcStateIndex << 8 | Previous ApcStateIndex
Arg3: 00000000ffff0000, Thread->KernelApcDisable
Arg4: fffff880081fc8e0, Previous KernelApcDisable
Debugging Details:
------------------
FAULTING_IP:
+5579952f01e2dc14
00000000`76d0008a ?? ???
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x1
PROCESS_NAME: explorer.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff80002ab9ca9 to fffff80002aba740
STACK_TEXT:
fffff880`081fc6a8 fffff800`02ab9ca9 : 00000000`00000001 00000000`76d0008a 00000000`00000000 00000000`ffff0000 : nt!KeBugCheckEx
fffff880`081fc6b0 fffff800`02ab9be0 : fffffa80`03a99b30 00000000`00000001 fffffa80`03e02b60 fffff800`02dd0414 : nt!KiBugCheckDispatch+0x69
fffff880`081fc7f0 00000000`76d0008a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x245
00000000`109197a8 fffff800`02ab2080 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76d0008a
fffff880`081fcc40 fffff880`081fcc58 : 00000000`00000000 fffff880`081fd008 fffff800`00000018 00000000`04ab1520 : nt!KiCallUserMode
fffff880`081fcc48 00000000`00000000 : fffff880`081fd008 fffff800`00000018 00000000`04ab1520 fffff880`081fd2f0 : 0xfffff880`081fcc58
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiSystemServiceExit+245
fffff800`02ab9be0 4883ec50 sub rsp,50h
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiSystemServiceExit+245
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9
FAILURE_BUCKET_ID: X64_0x1_nt!KiSystemServiceExit+245
BUCKET_ID: X64_0x1_nt!KiSystemServiceExit+245
Followup: MachineOwner
---------
Debug session time: Sun Nov 28 13:31:09.662 2010 (GMT-5)
System Uptime: 0 days 1:03:10.613
Loading Kernel Symbols
...............................................................
................................................................
...................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff88004b8dc85, fffff8800a4d37b0, 0}
Probably caused by : atikmdag.sys ( atikmdag+383c85 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff88004b8dc85, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff8800a4d37b0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
atikmdag+383c85
fffff880`04b8dc85 488b4110 mov rax,qword ptr [rcx+10h]
CONTEXT: fffff8800a4d37b0 -- (.cxr 0xfffff8800a4d37b0)
rax=fffff88004ce84a0 rbx=fffffa80083885c8 rcx=00fff8a01ba95100
rdx=fffffa80084e5880 rsi=fffff8800a4d4430 rdi=fffff8a00f402088
rip=fffff88004b8dc85 rsp=fffff8800a4d4188 rbp=0000000000000000
r8=fffffa80083885c8 r9=000000000001fe90 r10=00000000ffffffff
r11=fffff8a00f402058 r12=fffffa80084e5880 r13=fffff8a00f402088
r14=000000000000015b r15=fffffa800873d690
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
atikmdag+0x383c85:
fffff880`04b8dc85 488b4110 mov rax,qword ptr [rcx+10h] ds:002b:00fff8a0`1ba95110=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: DefenseGridThe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff88004b8dc85
STACK_TEXT:
fffff880`0a4d4188 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : atikmdag+0x383c85
FOLLOWUP_IP:
atikmdag+383c85
fffff880`04b8dc85 488b4110 mov rax,qword ptr [rcx+10h]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: atikmdag+383c85
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: atikmdag
IMAGE_NAME: atikmdag.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4ca29946
STACK_COMMAND: .cxr 0xfffff8800a4d37b0 ; kb
FAILURE_BUCKET_ID: X64_0x3B_atikmdag+383c85
BUCKET_ID: X64_0x3B_atikmdag+383c85
Followup: MachineOwner
---------