Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\041711-21044-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16695.x86fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0x83246000 PsLoadedModuleList = 0x8338e810
Debug session time: Sun Apr 17 06:57:22.344 2011 (GMT-4)
System Uptime: 0 days 0:17:03.186
Loading Kernel Symbols
...............................................................
................................................................
..............................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {b3c9fa0b, 2, 1, 8929c1da}
Unable to load image \SystemRoot\system32\DRIVERS\iaStor.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys
Probably caused by : iaStor.sys ( iaStor+51da )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: b3c9fa0b, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 8929c1da, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 833ae718
Unable to read MiSystemVaType memory at 8338e160
b3c9fa0b
CURRENT_IRQL: 2
FAULTING_IP:
iaStor+51da
8929c1da c6400301 mov byte ptr [eax+3],1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: firefox.exe
TRAP_FRAME: 8078acc8 -- (.trap 0xffffffff8078acc8)
ErrCode = 00000002
eax=b3c9fa08 ebx=00000013 ecx=00000000 edx=00000000 esi=864412c8 edi=00000000
eip=8929c1da esp=8078ad3c ebp=8078add0 iopl=0 nv up ei ng nz ac pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00210297
iaStor+0x51da:
8929c1da c6400301 mov byte ptr [eax+3],1 ds:0023:b3c9fa0b=??
Resetting default scope
LAST_CONTROL_TRANSFER: from 8929c1da to 8328c81b
STACK_TEXT:
8078acc8 8929c1da badb0d00 00000000 00000000 nt!KiTrap0E+0x2cf
WARNING: Stack unwind information not available. Following frames may be wrong.
8078add0 8929d1a7 b3c9fa08 85678008 8078af4c iaStor+0x51da
8078aeec 892dbdcd 864412c8 00000000 8078af38 iaStor+0x61a7
8078aefc 83a5a894 8643f728 8643f000 00000000 iaStor+0x44dcd
8078af48 832ae4f5 8643f728 8643f000 00000000 sptd+0x11894
8078afa4 832ae358 8336fd20 a531ed48 00000000 nt!KiExecuteAllDpcs+0xf9
8078aff4 832adb1c 9ff25ce4 00000000 00000000 nt!KiRetireDpcList+0xd5
8078aff8 9ff25ce4 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2c
832adb1c 00000000 0000001a 00d6850f bb830000 0x9ff25ce4
STACK_COMMAND: kb
FOLLOWUP_IP:
iaStor+51da
8929c1da c6400301 mov byte ptr [eax+3],1
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: iaStor+51da
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: iaStor
IMAGE_NAME: iaStor.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a7c1b38
FAILURE_BUCKET_ID: 0xD1_iaStor+51da
BUCKET_ID: 0xD1_iaStor+51da
Followup: MachineOwner
---------
Thanks zigzag.