Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Yowan\Desktop\100811-45942-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17640.x86fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0x8303e000 PsLoadedModuleList = 0x831874f0
Debug session time: Sat Oct 8 07:22:44.183 2011 (GMT+4)
System Uptime: 0 days 2:37:53.993
Loading Kernel Symbols
...............................................................
................................................................
.............................................
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000008E, {c0000005, 830cb903, aaf9ba14, 0}
Unable to load image \??\C:\Windows\system32\drivers\aswMonFlt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswMonFlt.sys
*** ERROR: Module load completed but symbols could not be loaded for aswMonFlt.sys
Probably caused by : aswMonFlt.sys ( aswMonFlt+3341f )
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 830cb903, The address that the exception occurred at
Arg3: aaf9ba14, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!FsRtlLookupPerStreamContextInternal+9a
830cb903 395008 cmp dword ptr [eax+8],edx
TRAP_FRAME: aaf9ba14 -- (.trap 0xffffffffaaf9ba14)
ErrCode = 00000000
eax=00004345 ebx=aaf9bafc ecx=ae44e5d4 edx=860e15a8 esi=00000000 edi=ae44e5a8
eip=830cb903 esp=aaf9ba88 ebp=aaf9ba94 iopl=0 nv up ei pl nz na pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010207
nt!FsRtlLookupPerStreamContextInternal+0x9a:
830cb903 395008 cmp dword ptr [eax+8],edx ds:0023:0000434d=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: DVDFab.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 837d3f3b to 830cb903
STACK_TEXT:
aaf9ba94 837d3f3b 00000000 860e15a8 00000000 nt!FsRtlLookupPerStreamContextInternal+0x9a
aaf9bad8 837cd43a 860e15a8 85dcf108 00000000 fltmgr!FltpGetStreamListCtrl+0x5b
aaf9baf4 9e10041f 00000000 85dcf108 aaf9bb14 fltmgr!FltGetStreamHandleContext+0x1a
WARNING: Stack unwind information not available. Following frames may be wrong.
aaf9bb18 837ccaeb 8615c268 aaf9bb38 aaf9bb64 aswMonFlt+0x3341f
aaf9bb84 837cf9f0 aaf9bbd8 85e2de00 85e2dfb4 fltmgr!FltpPerformPreCallbacks+0x34d
aaf9bb9c 837cff01 aaf9bbd8 00000000 888907d8 fltmgr!FltpPassThroughInternal+0x40
aaf9bbc0 837d03ba 12f9bbd8 888907d8 00000000 fltmgr!FltpPassThrough+0x203
aaf9bbf0 8307558e 888907d8 85e2de00 85dcf108 fltmgr!FltpDispatch+0xb4
aaf9bc08 83270aa6 85b97590 85dcf0f0 00000001 nt!IofCallDriver+0x63
aaf9bc48 83261f47 88ed4480 85dcf108 00000001 nt!IopCloseFile+0x2f3
aaf9bc94 83283394 88ed4480 ae4188a8 888f7868 nt!ObpDecrementHandleCount+0x139
aaf9bcdc 832830d4 ae4188a8 b86431e8 88ed4480 nt!ObpCloseHandleTableEntry+0x203
aaf9bd0c 8328346e 88ed4480 888f7801 0012fe1c nt!ObpCloseHandle+0x7f
aaf9bd28 8307c1fa 000008f4 0012fe20 77ad70b4 nt!NtClose+0x4e
aaf9bd28 77ad70b4 000008f4 0012fe20 77ad70b4 nt!KiFastCallEntry+0x12a
0012fe20 00000000 00000000 00000000 00000000 0x77ad70b4
STACK_COMMAND: kb
FOLLOWUP_IP:
aswMonFlt+3341f
9e10041f ?? ???
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: aswMonFlt+3341f
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: aswMonFlt
IMAGE_NAME: aswMonFlt.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4e668449
FAILURE_BUCKET_ID: 0x8E_aswMonFlt+3341f
BUCKET_ID: 0x8E_aswMonFlt+3341f
Followup: MachineOwner
---------
