New
#1
svchost.exe
This problem started to occur after Windows update today it's not a BSOD but it is a bugcheck restart of the computer I attached also the crash files and debuged the windows Memory.dmp so that hopefully one of you folks could tell me how to fix this problem..TIA Seth
Code:Loading Dump File [C:\Windows\MEMORY.DMP] Kernel Summary Dump File: Only kernel address space is available Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols Executable search path is: Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7601.17592.amd64fre.win7sp1_gdr.110408-1631 Machine Name: Kernel base = 0xfffff800`02859000 PsLoadedModuleList = 0xfffff800`02a9e650 Debug session time: Tue Jun 14 20:28:58.080 2011 (UTC - 6:00) System Uptime: 0 days 2:25:23.189 Loading Kernel Symbols ............................................................... ................................................................ ........................... Loading User Symbols PEB is paged out (Peb.Ldr = 000007ff`fffde018). Type ".hh dbgerr001" for details Loading unloaded module list ..... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck C4, {91, 2, fffffa8005cd7b60, 0} Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4874 ) Followup: MachineOwner --------- 0: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* DRIVER_VERIFIER_DETECTED_VIOLATION (c4) A device driver attempting to corrupt the system has been caught. This is because the driver was specified in the registry as being suspect (by the administrator) and the kernel has enabled substantial checking of this driver. If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will be among the most commonly seen crashes. Arguments: Arg1: 0000000000000091, A driver switched stacks using a method that is not supported by the operating system. The only supported way to extend a kernel mode stack is by using KeExpandKernelStackAndCallout. Arg2: 0000000000000002 Arg3: fffffa8005cd7b60 Arg4: 0000000000000000 Debugging Details: ------------------ BUGCHECK_STR: 0xc4_91 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT PROCESS_NAME: svchost.exe CURRENT_IRQL: 2 EXCEPTION_RECORD: fffff88002949588 -- (.exr 0xfffff88002949588) ExceptionAddress: fffff800028db8e2 (nt!SwapContext_PatchXRstor) ExceptionCode: c0000005 (Access violation) ExceptionFlags: 00000000 NumberParameters: 2 Parameter[0]: 0000000000000000 Parameter[1]: ffffffffffffffff Attempt to read from address ffffffffffffffff TRAP_FRAME: fffff88002949630 -- (.trap 0xfffff88002949630) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=0000000000000001 rbx=0000000000000000 rcx=fffff88002949e00 rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000 rip=fffff800028db8e2 rsp=fffff880029497c0 rbp=fffff88002949db0 r8=fffff80002a50400 r9=0000000000000000 r10=0000000000000040 r11=fffffa8005351010 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei pl nz na pe nc nt!SwapContext_PatchXRstor: fffff800`028db8e2 0fae09 fxrstor [rcx] ds:6de8:9e00=?? Resetting default scope LAST_CONTROL_TRANSFER: from fffff800029303aa to fffff800028d8d00 STACK_TEXT: fffff880`02948688 fffff800`029303aa : 00000000`000000c4 00000000`00000091 00000000`00000002 fffffa80`05cd7b60 : nt!KeBugCheckEx fffff880`02948690 fffff800`02902f53 : 00000000`02790000 00000000`00000000 00000000`00000003 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x4874 fffff880`029486d0 fffff800`029143b1 : fffff880`02949588 fffff880`029492e0 fffff880`02949630 fffffa80`04fad670 : nt!RtlDispatchException+0x33 fffff880`02948db0 fffff800`028d8382 : fffff880`02949588 fffff800`02a4be80 fffff880`02949630 fffffa80`05cd7b60 : nt!KiDispatchException+0x135 fffff880`02949450 fffff800`028d6c8a : 00000000`00001572 00000000`00000001 fffff683`fffffb48 00000000`05560001 : nt!KiExceptionDispatch+0xc2 fffff880`02949630 fffff800`028db8e2 : fffff8a0`07c08090 00000000`05420000 fa800445`0d4004c0 02000000`00069879 : nt!KiGeneralProtectionFault+0x10a fffff880`029497c0 00000000`05420000 : fa8005b3`5f9004c0 02000000`0005edca 00000000`00105e2c 00000000`00025ac2 : nt!SwapContext_PatchXRstor fffff880`02949800 fa8005b3`5f9004c0 : 02000000`0005edca 00000000`00105e2c 00000000`00025ac2 fffff8a0`09abfcc8 : 0x5420000 fffff880`02949808 02000000`0005edca : 00000000`00105e2c 00000000`00025ac2 fffff8a0`09abfcc8 00000000`05420000 : 0xfa8005b3`5f9004c0 fffff880`02949810 00000000`00105e2c : 00000000`00025ac2 fffff8a0`09abfcc8 00000000`05420000 fa8005f6`985004c0 : 0x2000000`0005edca fffff880`02949818 00000000`00025ac2 : fffff8a0`09abfcc8 00000000`05420000 fa8005f6`985004c0 02000000`000bad23 : 0x105e2c fffff880`02949820 fffff8a0`09abfcc8 : 00000000`05420000 fa8005f6`985004c0 02000000`000bad23 00000000`0010d5fd : 0x25ac2 fffff880`02949828 00000000`05420000 : fa8005f6`985004c0 02000000`000bad23 00000000`0010d5fd 00000000`000b59f3 : 0xfffff8a0`09abfcc8 fffff880`02949830 fa8005f6`985004c0 : 02000000`000bad23 00000000`0010d5fd 00000000`000b59f3 fffff8a0`01e12828 : 0x5420000 fffff880`02949838 02000000`000bad23 : 00000000`0010d5fd 00000000`000b59f3 fffff8a0`01e12828 00000000`05420000 : 0xfa8005f6`985004c0 fffff880`02949840 00000000`0010d5fd : 00000000`000b59f3 fffff8a0`01e12828 00000000`05420000 fa8005c1`591004c0 : 0x2000000`000bad23 fffff880`02949848 00000000`000b59f3 : fffff8a0`01e12828 00000000`05420000 fa8005c1`591004c0 02000000`0009d5a0 : 0x10d5fd fffff880`02949850 fffff8a0`01e12828 : 00000000`05420000 fa8005c1`591004c0 02000000`0009d5a0 00000000`000bdf76 : 0xb59f3 fffff880`02949858 00000000`05420000 : fa8005c1`591004c0 02000000`0009d5a0 00000000`000bdf76 00000000`000bd224 : 0xfffff8a0`01e12828 fffff880`02949860 fa8005c1`591004c0 : 02000000`0009d5a0 00000000`000bdf76 00000000`000bd224 fffff8a0`09780110 : 0x5420000 fffff880`02949868 02000000`0009d5a0 : 00000000`000bdf76 00000000`000bd224 fffff8a0`09780110 00000000`05420000 : 0xfa8005c1`591004c0 fffff880`02949870 00000000`000bdf76 : 00000000`000bd224 fffff8a0`09780110 00000000`05420000 fa800574`e60004c0 : 0x2000000`0009d5a0 fffff880`02949878 00000000`000bd224 : fffff8a0`09780110 00000000`05420000 fa800574`e60004c0 02000000`00100dc8 : 0xbdf76 fffff880`02949880 fffff8a0`09780110 : 00000000`05420000 fa800574`e60004c0 02000000`00100dc8 00000000`000b3207 : 0xbd224 fffff880`02949888 00000000`05420000 : fa800574`e60004c0 02000000`00100dc8 00000000`000b3207 00000000`000b55d5 : 0xfffff8a0`09780110 fffff880`02949890 fa800574`e60004c0 : 02000000`00100dc8 00000000`000b3207 00000000`000b55d5 fffff8a0`01e00fc8 : 0x5420000 fffff880`02949898 02000000`00100dc8 : 00000000`000b3207 00000000`000b55d5 fffff8a0`01e00fc8 00000000`05420000 : 0xfa800574`e60004c0 fffff880`029498a0 00000000`000b3207 : 00000000`000b55d5 fffff8a0`01e00fc8 00000000`05420000 fa80055d`e0c80460 : 0x2000000`00100dc8 fffff880`029498a8 00000000`000b55d5 : fffff8a0`01e00fc8 00000000`05420000 fa80055d`e0c80460 02000000`0012fcb1 : 0xb3207 fffff880`029498b0 fffff8a0`01e00fc8 : 00000000`05420000 fa80055d`e0c80460 02000000`0012fcb1 00000000`00044fdf : 0xb55d5 fffff880`029498b8 00000000`05420000 : fa80055d`e0c80460 02000000`0012fcb1 00000000`00044fdf 00000000`000164cf : 0xfffff8a0`01e00fc8 fffff880`029498c0 fa80055d`e0c80460 : 02000000`0012fcb1 00000000`00044fdf 00000000`000164cf fffff680`00011b72 : 0x5420000 fffff880`029498c8 02000000`0012fcb1 : 00000000`00044fdf 00000000`000164cf fffff680`00011b72 00000000`00400000 : 0xfa80055d`e0c80460 fffff880`029498d0 00000000`00044fdf : 00000000`000164cf fffff680`00011b72 00000000`00400000 00000000`00000080 : 0x2000000`0012fcb1 fffff880`029498d8 00000000`000164cf : fffff680`00011b72 00000000`00400000 00000000`00000080 00000000`0007bc60 : 0x44fdf fffff880`029498e0 fffff680`00011b72 : 00000000`00400000 00000000`00000080 00000000`0007bc60 00000000`0011046f : 0x164cf fffff880`029498e8 00000000`00400000 : 00000000`00000080 00000000`0007bc60 00000000`0011046f 00000000`00112771 : 0xfffff680`00011b72 fffff880`029498f0 00000000`00000080 : 00000000`0007bc60 00000000`0011046f 00000000`00112771 fffff8a0`01f9e800 : 0x400000 fffff880`029498f8 00000000`0007bc60 : 00000000`0011046f 00000000`00112771 fffff8a0`01f9e800 00000000`05420000 : 0x80 fffff880`02949900 00000000`0011046f : 00000000`00112771 fffff8a0`01f9e800 00000000`05420000 fa8003d5`03780460 : 0x7bc60 fffff880`02949908 00000000`00112771 : fffff8a0`01f9e800 00000000`05420000 fa8003d5`03780460 02000000`000157e3 : 0x11046f fffff880`02949910 fffff8a0`01f9e800 : 00000000`05420000 fa8003d5`03780460 02000000`000157e3 00000000`000b9b6a : 0x112771 fffff880`02949918 00000000`05420000 : fa8003d5`03780460 02000000`000157e3 00000000`000b9b6a 00000000`000b8ce5 : 0xfffff8a0`01f9e800 fffff880`02949920 fa8003d5`03780460 : 02000000`000157e3 00000000`000b9b6a 00000000`000b8ce5 fffff8a0`07c085f0 : 0x5420000 fffff880`02949928 02000000`000157e3 : 00000000`000b9b6a 00000000`000b8ce5 fffff8a0`07c085f0 00000000`05420000 : 0xfa8003d5`03780460 fffff880`02949930 00000000`000b9b6a : 00000000`000b8ce5 fffff8a0`07c085f0 00000000`05420000 fa800445`0d4004c0 : 0x2000000`000157e3 fffff880`02949938 00000000`000b8ce5 : fffff8a0`07c085f0 00000000`05420000 fa800445`0d4004c0 02000000`00069879 : 0xb9b6a fffff880`02949940 fffff8a0`07c085f0 : 00000000`05420000 fa800445`0d4004c0 02000000`00069879 00000000`0005d1da : 0xb8ce5 fffff880`02949948 00000000`05420000 : fa800445`0d4004c0 02000000`00069879 00000000`0005d1da 00000000`0011166a : 0xfffff8a0`07c085f0 fffff880`02949950 fa800445`0d4004c0 : 02000000`00069879 00000000`0005d1da 00000000`0011166a fffff680`003f77da : 0x5420000 fffff880`02949958 02000000`00069879 : 00000000`0005d1da 00000000`0011166a fffff680`003f77da 00000000`00400000 : 0xfa800445`0d4004c0 fffff880`02949960 00000000`0005d1da : 00000000`0011166a fffff680`003f77da 00000000`00400000 00000000`00000080 : 0x2000000`00069879 fffff880`02949968 00000000`0011166a : fffff680`003f77da 00000000`00400000 00000000`00000080 00000000`0007e817 : 0x5d1da fffff880`02949970 fffff680`003f77da : 00000000`00400000 00000000`00000080 00000000`0007e817 00000000`0011cb14 : 0x11166a fffff880`02949978 00000000`00400000 : 00000000`00000080 00000000`0007e817 00000000`0011cb14 00000000`0010598a : 0xfffff680`003f77da fffff880`02949980 00000000`00000080 : 00000000`0007e817 00000000`0011cb14 00000000`0010598a fffff8a0`0317b178 : 0x400000 fffff880`02949988 00000000`0007e817 : 00000000`0011cb14 00000000`0010598a fffff8a0`0317b178 00000000`05420000 : 0x80 fffff880`02949990 00000000`0011cb14 : 00000000`0010598a fffff8a0`0317b178 00000000`05420000 fa8005aa`1f9004c0 : 0x7e817 fffff880`02949998 00000000`0010598a : fffff8a0`0317b178 00000000`05420000 fa8005aa`1f9004c0 02000000`000b3958 : 0x11cb14 fffff880`029499a0 fffff8a0`0317b178 : 00000000`05420000 fa8005aa`1f9004c0 02000000`000b3958 00000000`000b3d92 : 0x10598a fffff880`029499a8 00000000`05420000 : fa8005aa`1f9004c0 02000000`000b3958 00000000`000b3d92 00000000`000b62d1 : 0xfffff8a0`0317b178 fffff880`029499b0 fa8005aa`1f9004c0 : 02000000`000b3958 00000000`000b3d92 00000000`000b62d1 fffff8a0`01e12528 : 0x5420000 fffff880`029499b8 02000000`000b3958 : 00000000`000b3d92 00000000`000b62d1 fffff8a0`01e12528 00000000`05420000 : 0xfa8005aa`1f9004c0 fffff880`029499c0 00000000`000b3d92 : 00000000`000b62d1 fffff8a0`01e12528 00000000`05420000 fa8005c1`591004c0 : 0x2000000`000b3958 fffff880`029499c8 00000000`000b62d1 : fffff8a0`01e12528 00000000`05420000 fa8005c1`591004c0 02000000`0009d5a0 : 0xb3d92 fffff880`029499d0 fffff8a0`01e12528 : 00000000`05420000 fa8005c1`591004c0 02000000`0009d5a0 00000000`0010d9f6 : 0xb62d1 fffff880`029499d8 00000000`05420000 : fa8005c1`591004c0 02000000`0009d5a0 00000000`0010d9f6 00000000`000bb0d4 : 0xfffff8a0`01e12528 fffff880`029499e0 fa8005c1`591004c0 : 02000000`0009d5a0 00000000`0010d9f6 00000000`000bb0d4 fffff8a0`027c2980 : 0x5420000 fffff880`029499e8 02000000`0009d5a0 : 00000000`0010d9f6 00000000`000bb0d4 fffff8a0`027c2980 00000000`05420000 : 0xfa8005c1`591004c0 fffff880`029499f0 00000000`0010d9f6 : 00000000`000bb0d4 fffff8a0`027c2980 00000000`05420000 fa8005a4`6b1004c0 : 0x2000000`0009d5a0 fffff880`029499f8 00000000`000bb0d4 : fffff8a0`027c2980 00000000`05420000 fa8005a4`6b1004c0 02000000`00130611 : 0x10d9f6 fffff880`02949a00 fffff8a0`027c2980 : 00000000`05420000 fa8005a4`6b1004c0 02000000`00130611 00000000`00114f0f : 0xbb0d4 fffff880`02949a08 00000000`05420000 : fa8005a4`6b1004c0 02000000`00130611 00000000`00114f0f 00000000`000bd4ed : 0xfffff8a0`027c2980 fffff880`02949a10 fa8005a4`6b1004c0 : 02000000`00130611 00000000`00114f0f 00000000`000bd4ed fffff8a0`07b0d920 : 0x5420000 fffff880`02949a18 02000000`00130611 : 00000000`00114f0f 00000000`000bd4ed fffff8a0`07b0d920 00000000`05420000 : 0xfa8005a4`6b1004c0 STACK_COMMAND: kb FOLLOWUP_IP: nt! ?? ::FNODOBFM::`string'+4874 fffff800`029303aa cc int 3 SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+4874 FOLLOWUP_NAME: MachineOwner MODULE_NAME: nt IMAGE_NAME: ntkrnlmp.exe DEBUG_FLR_IMAGE_TIMESTAMP: 4d9fdd5b FAILURE_BUCKET_ID: X64_0xc4_91_nt!_??_::FNODOBFM::_string_+4874 BUCKET_ID: X64_0xc4_91_nt!_??_::FNODOBFM::_string_+4874 Followup: MachineOwner ---------