*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002e9a444, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff8800a255950, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!FsRtlLookupPerStreamContextInternal+7c
fffff800`02e9a444 48396810 cmp qword ptr [rax+10h],rbp
CONTEXT: fffff8800a255950 -- (.cxr 0xfffff8800a255950)
rax=ad5eb76d95925349 rbx=fffff8a00c087bc0 rcx=fffff8a00c087bf8
rdx=0000000000000011 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002e9a444 rsp=fffff8800a256320 rbp=fffffa8005b0c800
r8=0000000000000000 r9=fffff8800a2563f0 r10=0000000000000000
r11=fffff8800a2564e8 r12=0000000000000000 r13=0000000000000001
r14=fffff8800a2564f8 r15=fffff8800a256538
iopl=0 nv up ei ng nz na pe cy
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010283
nt!FsRtlLookupPerStreamContextInternal+0x7c:
fffff800`02e9a444 48396810 cmp qword ptr [rax+10h],rbp ds:002b:ad5eb76d`95925359=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff8800108f32e to fffff80002e9a444
STACK_TEXT:
fffff880`0a256320 fffff880`0108f32e : fffffa80`05204b20 fffff880`0a256480 fffffa80`05b0c800 fffff880`01225734 : nt!FsRtlLookupPerStreamContextInternal+0x7c
fffff880`0a256360 fffff880`0109ad31 : fffffa80`05b0c800 fffff880`0122af30 fffffa80`057e4270 00000000`00000001 : fltmgr!FltpGetStreamListCtrl+0x8e
fffff880`0a2563c0 fffff880`010e0052 : 00000000`00000000 fffff140`1d8209c7 fffff880`0a256600 fffff880`012c8bfb : fltmgr!FltGetStreamContext+0x21
fffff880`0a2563f0 fffff880`010deb07 : fffff140`1d8209c7 00000000`00000000 00000000`00000000 00000000`00000000 : fileinfo!FIStreamGet+0x52
fffff880`0a256460 fffff880`0108f242 : 00000000`00000000 00000000`00000000 fffffa80`06384fb8 00000000`00000000 : fileinfo!FIPostCreateCallback+0xf3
fffff880`0a2564f0 fffff880`0108e38b : fffffa80`05d02030 fffffa80`06b48d30 fffffa80`05a44bb0 fffffa80`05a44dd0 : fltmgr!FltpPerformPostCallbacks+0x392
fffff880`0a2565c0 fffff880`010ad2b9 : fffffa80`06384bd0 fffffa80`05b0c800 fffffa80`06384b00 fffffa80`05a1d9e0 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x39b
fffff880`0a256650 fffff880`07a2632b : fffffa80`06385000 fffff800`02edcdef fffffa80`08649da0 00000000`00000000 : fltmgr!FltpCreate+0x2a9
fffff880`0a256700 fffffa80`06385000 : fffff800`02edcdef fffffa80`08649da0 00000000`00000000 fffffa80`05204b20 : AVGIDSFilter+0x332b
fffff880`0a256708 fffff800`02edcdef : fffffa80`08649da0 00000000`00000000 fffffa80`05204b20 fffffa80`06384bd0 : 0xfffffa80`06385000
fffff880`0a256710 fffff800`031ba537 : 00000000`00000005 fffff800`031b9f90 fffffa80`05cbc010 fffffa80`05204bb8 : nt!RtlCopyUnicodeString+0x3f
fffff880`0a256740 fffff800`031b0ba4 : fffffa80`059d79d0 00000000`00000000 fffffa80`05cd36e0 fffffa80`07062901 : nt!IopParseDevice+0x5a7
fffff880`0a2568d0 fffff800`031b5b7d : fffffa80`05cd36e0 fffff880`0a256a30 00000000`00000040 fffffa80`04ef5360 : nt!ObpLookupObjectName+0x585
fffff880`0a2569d0 fffff800`031bc647 : 00055ff8`00000004 00000000`00000001 fffff880`07a26001 00000000`00000000 : nt!ObOpenObjectByName+0x1cd
fffff880`0a256a80 fffff800`031c6398 : 00000000`02c3f268 fffff8a0`00100080 0012019f`00000000 00000000`02c3f278 : nt!IopCreateFile+0x2b7
fffff880`0a256b20 fffff800`02eb9813 : fffffa80`07f36701 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtCreateFile+0x78
fffff880`0a256bb0 00000000`776cfc0a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`02c3f1e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x776cfc0a
FOLLOWUP_IP:
fileinfo!FIStreamGet+52
fffff880`010e0052 8bd8 mov ebx,eax
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: fileinfo!FIStreamGet+52
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: fileinfo
IMAGE_NAME: fileinfo.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc481
STACK_COMMAND: .cxr 0xfffff8800a255950 ; kb
FAILURE_BUCKET_ID: X64_0x3B_fileinfo!FIStreamGet+52
BUCKET_ID: X64_0x3B_fileinfo!FIStreamGet+52
Followup: MachineOwner
---------