Kernel base = 0xfffff800`02a1d000 PsLoadedModuleList = 0xfffff800`02c5ae50
Debug session time: Thu Sep 23 20:08:15.102 2010 (GMT-4)
System Uptime: 0 days 13:24:16.804
Loading Kernel Symbols
...............................................................
................................................................
......................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1E, {ffffffffc0000005, fffff80002d8ce7f, 0, 16c}
Probably caused by : ntkrnlmp.exe ( nt!AlpcpSendMessage+4f )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002d8ce7f, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 000000000000016c, Parameter 1 of the exception
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!AlpcpSendMessage+4f
fffff800`02d8ce7f 418b826c010000 mov eax,dword ptr [r10+16Ch]
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 000000000000016c
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cc50e0
000000000000016c
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x1E
PROCESS_NAME: ashDisp.exe
CURRENT_IRQL: 0
EXCEPTION_RECORD: fffff88007a97488 -- (.exr 0xfffff88007a97488)
ExceptionAddress: fffff80002d8ce7f (nt!AlpcpSendMessage+0x000000000000004f)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 000000000000016c
Attempt to read from address 000000000000016c
TRAP_FRAME: fffff88007a97530 -- (.trap 0xfffff88007a97530)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff88007a977e0
rdx=fffff88007a97878 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002d8ce7f rsp=fffff88007a976c0 rbp=fffff88007a97ae0
r8=0000000000000000 r9=0000000000000000 r10=0000000000000000
r11=fffff88007a977b8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
nt!AlpcpSendMessage+0x4f:
fffff800`02d8ce7f 418b826c010000 mov eax,dword ptr [r10+16Ch] ds:0001:00000000`0000016c=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002ac7a39 to fffff80002a8d740
STACK_TEXT:
fffff880`07a96cb8 fffff800`02ac7a39 : 00000000`0000001e ffffffff`c0000005 fffff800`02d8ce7f 00000000`00000000 : nt!KeBugCheckEx
fffff880`07a96cc0 fffff800`02a8cd82 : fffff880`07a97488 00000000`00000000 fffff880`07a97530 00000000`00000000 : nt!KiDispatchException+0x1b9
fffff880`07a97350 fffff800`02a8b8fa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000001 : nt!KiExceptionDispatch+0xc2
fffff880`07a97530 fffff800`02d8ce7f : fffff900`00000000 00001f80`01005c68 01cb5b0c`0006ce34 fffffa80`03e55b60 : nt!KiPageFault+0x23a
fffff880`07a976c0 fffff800`02d7336f : fffff880`07a977d0 00000000`00000048 00000000`00000000 fffff880`07a99000 : nt!AlpcpSendMessage+0x4f
fffff880`07a977c0 fffff800`02d72901 : 00000000`40010004 00000000`00000000 00000000`00000000 00000000`00000502 : nt!LpcRequestPort+0x33
fffff880`07a97830 fffff800`02d4b635 : 00000000`40010004 fffff800`02a96c00 80000000`78457300 00000000`00000000 : nt!PspExitThread+0x461
fffff880`07a978f0 fffff800`02a6a1db : 00000000`00000095 fffff800`02a921fa fffff880`07a97a10 fffffa80`03e84a90 : nt!PsExitSpecialApc+0x1d
fffff880`07a97920 fffff800`02a6a620 : 00000000`ffffffff fffff880`07a979a0 fffff800`02d4b74c 00000000`00000001 : nt!KiDeliverApc+0x2eb
fffff880`07a979a0 fffff800`02a6a4bb : 00000000`ffffffff 00000000`00000000 fffff800`02d4b74c 00000000`00000000 : nt!KiInitiateUserApc+0x70
fffff880`07a97ae0 00000000`74c70bfa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiApcInterrupt+0x10b
00000000`0334fd88 fffff800`02a85080 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x74c70bfa
fffff880`07a97ee0 00000000`00000000 : fffff800`03000b7f 00000000`00000002 fffff900`c08271d0 fffff900`c20ca010 : nt!KiCallUserMode
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!AlpcpSendMessage+4f
fffff800`02d8ce7f 418b826c010000 mov eax,dword ptr [r10+16Ch]
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: nt!AlpcpSendMessage+4f
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9
FAILURE_BUCKET_ID: X64_0x1E_nt!AlpcpSendMessage+4f
BUCKET_ID: X64_0x1E_nt!AlpcpSendMessage+4f
Followup: MachineOwner
---------
Kernel base = 0xfffff800`02a1b000 PsLoadedModuleList = 0xfffff800`02c58e50
Debug session time: Mon Oct 4 15:41:33.050 2010 (GMT-4)
System Uptime: 0 days 3:48:45.751
Loading Kernel Symbols
...............................................................
................................................................
......................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {a04, 2, 0, fffff88004b58a33}
Probably caused by : hidusb.sys ( hidusb!WppAutoLogTrace+83 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000a04, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88004b58a33, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cc30e0
0000000000000a04
CURRENT_IRQL: 2
FAULTING_IP:
hidusb!WppAutoLogTrace+83
fffff880`04b58a33 418b431c mov eax,dword ptr [r11+1Ch]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: System
TRAP_FRAME: fffff88002f1b690 -- (.trap 0xfffff88002f1b690)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000100 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88004b58a33 rsp=fffff88002f1b820 rbp=0000000000000000
r8=0000000000000004 r9=fffff88004b5a1c0 r10=0000000000000010
r11=00000000000009e8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe cy
hidusb!WppAutoLogTrace+0x83:
fffff880`04b58a33 418b431c mov eax,dword ptr [r11+1Ch] ds:00000000`00000a04=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002a8aca9 to fffff80002a8b740
STACK_TEXT:
fffff880`02f1b548 fffff800`02a8aca9 : 00000000`0000000a 00000000`00000a04 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`02f1b550 fffff800`02a89920 : 00000000`00000011 fffffa80`00fe7830 fffffa80`03fe0830 fffff880`04b6e3b0 : nt!KiBugCheckDispatch+0x69
fffff880`02f1b690 fffff880`04b58a33 : fffffa80`03ff9c60 00000000`00000000 00000000`00000000 fffff800`02a8dd26 : nt!KiPageFault+0x260
fffff880`02f1b820 fffff880`04b55d2d : fffffa80`04483010 fffffa80`03fe0830 00000000`00000004 fffff880`04b6da33 : hidusb!WppAutoLogTrace+0x83
fffff880`02f1b880 fffff880`04b55e76 : fffffa80`03feff20 fffffa80`0400bb40 00000000`0000000d fffff880`04b6472a : hidusb!WPP_RECORDER_SF_qq+0xa1
fffff880`02f1b8e0 fffff880`04b6665d : fffffa80`03feff01 fffffa80`03feff20 fffffa80`03855930 00000000`00000004 : hidusb!HumInternalIoctl+0x52
fffff880`02f1b950 fffff880`04b66e7d : fffffa80`03feff20 fffffa80`0400bcb0 00000000`00000000 00000000`00000004 : HIDCLASS!HidpSubmitInterruptRead+0xdd
fffff880`02f1b9b0 fffff800`02a8dd26 : fffffa80`03855b23 00000000`00000000 fffffa80`0400bb01 fffffa80`03855900 : HIDCLASS!HidpInterruptReadComplete+0x37d
fffff880`02f1ba40 fffff880`041645d9 : fffffa80`038cc050 fffffa80`0268c000 00000000`00000000 00000000`00000000 : nt!IopfCompleteRequest+0x3a6
fffff880`02f1bb20 fffff880`04164ab7 : fffffa80`02d79302 fffffa80`03855930 00000000`ffffffff fffffa80`038ccea8 : USBPORT!USBPORT_Core_iCompleteDoneTransfer+0xa15
fffff880`02f1bc00 fffff880`0416264f : fffffa80`038ccea8 fffffa80`038cc1a0 fffffa80`038cd040 00000000`00000000 : USBPORT!USBPORT_Core_iIrpCsqCompleteDoneTransfer+0x3a7
fffff880`02f1bc60 fffff880`04153f89 : fffffa80`038cc050 00000000`00000000 fffffa80`038cce02 fffffa80`038ccea8 : USBPORT!USBPORT_Core_UsbIocDpc_Worker+0xf3
fffff880`02f1bca0 fffff800`02a96bfc : fffff880`009e9180 fffffa80`038ccea8 fffffa80`038ccec0 00000000`00000000 : USBPORT!USBPORT_Xdpc_Worker+0x1d9
fffff880`02f1bcd0 fffff800`02a93eea : fffff880`009e9180 fffff880`009f3fc0 00000000`00000000 fffff880`04153db0 : nt!KiRetireDpcList+0x1bc
fffff880`02f1bd80 00000000`00000000 : fffff880`02f1c000 fffff880`02f16000 fffff880`02f1bd40 00000000`00000000 : nt!KiIdleLoop+0x5a
STACK_COMMAND: kb
FOLLOWUP_IP:
hidusb!WppAutoLogTrace+83
fffff880`04b58a33 418b431c mov eax,dword ptr [r11+1Ch]
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: hidusb!WppAutoLogTrace+83
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: hidusb
IMAGE_NAME: hidusb.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bcbfe
FAILURE_BUCKET_ID: X64_0xD1_hidusb!WppAutoLogTrace+83
BUCKET_ID: X64_0xD1_hidusb!WppAutoLogTrace+83
Followup: MachineOwner
---------
Kernel base = 0xfffff800`02a62000 PsLoadedModuleList = 0xfffff800`02c9fe50
Debug session time: Tue Oct 5 07:14:45.031 2010 (GMT-4)
System Uptime: 0 days 1:04:31.107
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff80002c064ee, fffff880084c3c00, 0}
Probably caused by : ntkrnlmp.exe ( nt!ExAllocatePoolWithTag+11e )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002c064ee, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff880084c3c00, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!ExAllocatePoolWithTag+11e
fffff800`02c064ee 884303 mov byte ptr [rbx+3],al
CONTEXT: fffff880084c3c00 -- (.cxr 0xfffff880084c3c00)
rax=0000000000000003 rbx=0000000002fffff0 rcx=0000000000000001
rdx=0000000003000001 rsi=fffff80002c4ee40 rdi=0000000000000001
rip=fffff80002c064ee rsp=fffff880084c45d0 rbp=fffffa8002445000
r8=0000000003000000 r9=fffff80002a62000 r10=fffff80002c4ee40
r11=fffff8a008391f20 r12=000000000000001f r13=0000000000000000
r14=0000000000000002 r15=000000006353624f
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
nt!ExAllocatePoolWithTag+0x11e:
fffff800`02c064ee 884303 mov byte ptr [rbx+3],al ds:002b:00000000`02fffff3=??
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff80002c064ee
STACK_TEXT:
fffff880`084c45d0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExAllocatePoolWithTag+0x11e
FOLLOWUP_IP:
nt!ExAllocatePoolWithTag+11e
fffff800`02c064ee 884303 mov byte ptr [rbx+3],al
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!ExAllocatePoolWithTag+11e
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9
STACK_COMMAND: .cxr 0xfffff880084c3c00 ; kb
FAILURE_BUCKET_ID: X64_0x3B_nt!ExAllocatePoolWithTag+11e
BUCKET_ID: X64_0x3B_nt!ExAllocatePoolWithTag+11e
Followup: MachineOwner
---------
Kernel base = 0xfffff800`02a68000 PsLoadedModuleList = 0xfffff800`02ca5e50
Debug session time: Mon Oct 11 12:40:22.588 2010 (GMT-4)
System Uptime: 0 days 1:15:11.664
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3D, {fffff88002ffad50, 0, 0, fffff8800f46598a}
Probably caused by : ntkrnlmp.exe ( nt!KiInterruptHandler+29 )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
INTERRUPT_EXCEPTION_NOT_HANDLED (3d)
Arguments:
Arg1: fffff88002ffad50
Arg2: 0000000000000000
Arg3: 0000000000000000
Arg4: fffff8800f46598a
Debugging Details:
------------------
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3D
PROCESS_NAME: System
CURRENT_IRQL: b
EXCEPTION_RECORD: fffff88002ffb4e8 -- (.exr 0xfffff88002ffb4e8)
Cannot read Exception record @ fffff88002ffb4e8
TRAP_FRAME: fffff88002ffb590 -- (.trap 0xfffff88002ffb590)
Unable to read trap frame at fffff880`02ffb590
LAST_CONTROL_TRANSFER: from fffff80002ad7ca9 to fffff80002ad8740
STACK_TEXT:
fffff880`02ffa498 fffff800`02ad7ca9 : 00000000`0000003d fffff880`02ffad50 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
fffff880`02ffa4a0 fffff800`02ad3fe9 : 00000000`00000000 fffffa80`03f66030 fffff880`02ffad50 fffff800`02b05668 : nt!KiBugCheckDispatch+0x69
fffff880`02ffa5e0 fffff800`02afe40d : fffff800`02ce6120 fffff800`02c278f4 fffff800`02a68000 fffff880`02ffb4e8 : nt!KiInterruptHandler+0x29
fffff880`02ffa610 fffff800`02b05a90 : fffff800`02c278ec fffff880`02ffa688 fffff880`02ffb4e8 fffff800`02a68000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`02ffa640 fffff800`02b129ef : fffff880`02ffb4e8 fffff880`02ffad50 fffff880`00000000 00000000`00000004 : nt!RtlDispatchException+0x410
fffff880`02ffad20 fffff800`02ad7d82 : fffff880`02ffb4e8 fffffa80`024e4240 fffff880`02ffb590 fffffa80`037a5000 : nt!KiDispatchException+0x16f
fffff880`02ffb3b0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatch+0xc2
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiInterruptHandler+29
fffff800`02ad3fe9 90 nop
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiInterruptHandler+29
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9
FAILURE_BUCKET_ID: X64_0x3D_nt!KiInterruptHandler+29
BUCKET_ID: X64_0x3D_nt!KiInterruptHandler+29
Followup: MachineOwner
---------
Kernel base = 0xfffff800`02a01000 PsLoadedModuleList = 0xfffff800`02c3ee50
Debug session time: Mon Oct 11 12:54:36.341 2010 (GMT-4)
System Uptime: 0 days 0:13:11.416
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 50, {fffff90000cfbcf8, 0, fffff96000112b9f, 2}
Could not read faulting driver name
Probably caused by : win32k.sys ( win32k!TimersProc+73 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff90000cfbcf8, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff96000112b9f, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000002, (reserved)
Debugging Details:
------------------
Could not read faulting driver name
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ca90e0
fffff90000cfbcf8
FAULTING_IP:
win32k!TimersProc+73
fffff960`00112b9f 8b5348 mov edx,dword ptr [rbx+48h]
MM_INTERNAL_CODE: 2
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: csrss.exe
CURRENT_IRQL: 0
TRAP_FRAME: fffff880038eb910 -- (.trap 0xfffff880038eb910)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000004f37 rbx=0000000000000000 rcx=0000000000004f37
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff96000112b9f rsp=fffff880038ebaa0 rbp=0000000000000000
r8=fffffa80045537b8 r9=0000000000000000 r10=fffffffffffffffd
r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe cy
win32k!TimersProc+0x73:
fffff960`00112b9f 8b5348 mov edx,dword ptr [rbx+48h] ds:f2c0:00000000`00000048=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002af08f2 to fffff80002a71740
STACK_TEXT:
fffff880`038eb7a8 fffff800`02af08f2 : 00000000`00000050 fffff900`00cfbcf8 00000000`00000000 fffff880`038eb910 : nt!KeBugCheckEx
fffff880`038eb7b0 fffff800`02a6f82e : 00000000`00000000 fffff900`00cfbcb0 fffffa80`044c0800 fffff800`02fe4b7f : nt! ?? ::FNODOBFM::`string'+0x40ec0
fffff880`038eb910 fffff960`00112b9f : 00000000`00000000 00000000`00000001 00000000`00000004 fffff800`02a7d1e3 : nt!KiPageFault+0x16e
fffff880`038ebaa0 fffff960`001136a4 : 00000000`00000000 fffff960`0032fa90 00000000`00000004 00000000`00000001 : win32k!TimersProc+0x73
fffff880`038ebaf0 fffff960`000a46cc : fffffa80`0000007b 00000000`0000000f fffff880`00000001 ffffffff`8000027c : win32k!RawInputThread+0x9b4
fffff880`038ebbc0 fffff960`00123fa6 : fffffa80`00000002 fffff880`038d0f40 00000000`00000020 00000000`00000000 : win32k!xxxCreateSystemThreads+0x58
fffff880`038ebbf0 fffff800`02a70993 : fffffa80`045e1840 00000000`00000004 000007ff`fffd3000 00000000`00000000 : win32k!NtUserCallNoParam+0x36
fffff880`038ebc20 000007fe`fcec3d3a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`01abf768 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fcec3d3a
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k!TimersProc+73
fffff960`00112b9f 8b5348 mov edx,dword ptr [rbx+48h]
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: win32k!TimersProc+73
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c483f
FAILURE_BUCKET_ID: X64_0x50_win32k!TimersProc+73
BUCKET_ID: X64_0x50_win32k!TimersProc+73
Followup: MachineOwner
---------
1: kd> lmtsmn
start end module name
fffff880`04000000 fffff880`0403e000 1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f0f000 fffff880`00f66000 ACPI ACPI.sys Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02c68000 fffff880`02cf2000 afd afd.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`02de9000 fffff880`02dff000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`010f9000 fffff880`01104000 amdxata amdxata.sys Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`0fdeb000 fffff880`0fdf3000 ASACPI ASACPI.sys Sun Mar 27 22:30:36 2005 (42476C4C)
fffff880`04868000 fffff880`04871000 aswFsBlk aswFsBlk.sys Tue Nov 24 18:50:04 2009 (4B0C712C)
fffff880`0484e000 fffff880`04868000 aswMonFlt aswMonFlt.sys Tue Nov 24 18:49:55 2009 (4B0C7123)
fffff880`02cf2000 fffff880`02cfb000 aswRdr aswRdr.SYS Tue Nov 24 18:48:59 2009 (4B0C70EB)
fffff880`04124000 fffff880`04140000 aswSP aswSP.SYS Tue Nov 24 18:50:24 2009 (4B0C7140)
fffff880`01800000 fffff880`01810000 aswTdi aswTdi.SYS Tue Nov 24 18:49:09 2009 (4B0C70F5)
fffff880`00c1a000 fffff880`00c23000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`010cf000 fffff880`010f9000 ataport ataport.SYS Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`008b0000 fffff960`00911000 ATMFD ATMFD.DLL Thu May 27 00:11:31 2010 (4BFDF0F3)
fffff880`01952000 fffff880`01959000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04113000 fffff880`04124000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`06181000 fffff880`0619f000 bowser bowser.sys Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00700000 fffff960`00727000 cdd cdd.dll Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`0191f000 fffff880`01949000 cdrom cdrom.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00ce5000 fffff880`00da5000 CI CI.dll Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`018b9000 fffff880`018e9000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c87000 fffff880`00ce5000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01000000 fffff880`01073000 cng cng.sys Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`02dd9000 fffff880`02de9000 CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`04b8d000 fffff880`04b9b000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04072000 fffff880`040f5000 csc csc.sys Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`040f5000 fffff880`04113000 dfsc dfsc.sys Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02dca000 fffff880`02dd9000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`018a3000 fffff880`018b9000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04b65000 fffff880`04b87000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`04ba7000 fffff880`04bb0000 dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`04b9b000 fffff880`04ba7000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`04bb0000 fffff880`04bc3000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`04bc3000 fffff880`04bcf000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0fcea000 fffff880`0fdde000 dxgkrnl dxgkrnl.sys Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`0f000000 fffff880`0f046000 dxgmms1 dxgmms1.sys Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`0fdde000 fffff880`0fdeb000 fdc fdc.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`01150000 fffff880`01164000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`04371000 fffff880`0437c000 flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`01104000 fffff880`01150000 fltmgr fltmgr.sys Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`013e9000 fffff880`013f3000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01869000 fffff880`018a3000 fvevol fvevol.sys Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01400000 fffff880`0144a000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02fdd000 fffff800`03026000 hal hal.dll Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`041d2000 fffff880`041f6000 HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`04bdd000 fffff880`04bf6000 HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`04bf6000 fffff880`04bfe080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`04bcf000 fffff880`04bdd000 hidusb hidusb.sys Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`060b9000 fffff880`06181000 HTTP HTTP.sys Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`013f3000 fffff880`013fc000 hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`0403e000 fffff880`0405c000 i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04166000 fffff880`0417c000 intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00da5000 fffff880`00dc5000 jraid jraid.sys Wed Jan 27 03:58:17 2010 (4B600029)
fffff880`0405c000 fffff880`0406b000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00bcc000 fffff800`00bd6000 kdcom kdcom.dll Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`042c2000 fffff880`04305000 ks ks.sys Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013be000 fffff880`013d8000 ksecdd ksecdd.sys Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`015bb000 fffff880`015e6000 ksecpkg ksecpkg.sys Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`04b87000 fffff880`04b8c200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0f064000 fffff880`0f078000 l160x64 l160x64.sys Mon Oct 12 22:08:28 2009 (4AD3E11C)
fffff880`04892000 fffff880`048a7000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0482b000 fffff880`0484e000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c2f000 fffff880`00c73000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`0481d000 fffff880`0482b000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`042b1000 fffff880`042c0000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`04802000 fffff880`0480f000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00c00000 fffff880`00c1a000 mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0619f000 fffff880`061b7000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`061b7000 fffff880`061e4000 mrxsmb mrxsmb.sys Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`06000000 fffff880`0604e000 mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`0604e000 fffff880`06071000 mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`019b7000 fffff880`019c2000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f6f000 fffff880`00f79000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01164000 fffff880`011c2000 msrpc msrpc.sys Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02c5d000 fffff880`02c68000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015e6000 fffff880`015f8000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01469000 fffff880`0155b000 ndis ndis.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`01834000 fffff880`01840000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04221000 fffff880`04250000 ndiswan ndiswan.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0437c000 fffff880`04391000 NDProxy NDProxy.SYS Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02d6f000 fffff880`02d7e000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02cfb000 fffff880`02d40000 netbt netbt.sys Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`0155b000 fffff880`015bb000 NETIO NETIO.SYS Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`019c2000 fffff880`019d3000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02c51000 fffff880`02c5d000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a01000 fffff800`02fdd000 nt ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0121b000 fffff880`013be000 Ntfs Ntfs.sys Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01949000 fffff880`01952000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`0fce8000 fffff880`0fce9180 nvBridge nvBridge.kmd Mon Jun 07 18:07:11 2010 (4C0D6D8F)
fffff880`0f07a000 fffff880`0fce7c80 nvlddmkm nvlddmkm.sys Mon Jun 07 18:16:55 2010 (4C0D6FD7)
fffff880`02d49000 fffff880`02d6f000 pacer pacer.sys Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00fb9000 fffff880`00fce000 partmgr partmgr.sys Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f79000 fffff880`00fac000 pci pci.sys Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fe3000 fffff880`00fea000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fea000 fffff880`00ffa000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013d8000 fffff880`013e9000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06e0a000 fffff880`06eb0000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0480f000 fffff880`0481d000 point64k point64k.sys Tue Nov 03 21:55:38 2009 (4AF0ED2A)
fffff880`04b28000 fffff880`04b65000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c73000 fffff880`00c87000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`01810000 fffff880`01834000 rasl2tp rasl2tp.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04250000 fffff880`0426b000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0426b000 fffff880`0428c000 raspptp raspptp.sys Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`0428c000 fffff880`042a6000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02c00000 fffff880`02c51000 rdbss rdbss.sys Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`042a6000 fffff880`042b1000 rdpbus rdpbus.sys Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`0199c000 fffff880`019a5000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019a5000 fffff880`019ae000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019ae000 fffff880`019b7000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`011c2000 fffff880`011fc000 rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`048a7000 fffff880`048bf000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`048e1000 fffff880`04b27e00 RTKVHD64 RTKVHD64.sys Tue Jun 08 05:08:08 2010 (4C0E0878)
fffff880`00dc5000 fffff880`00df4000 SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`06eb0000 fffff880`06ebb000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0fdf3000 fffff880`0fdff000 serenum serenum.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02d7e000 fffff880`02d9b000 serial serial.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`0145a000 fffff880`01462000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`07225000 fffff880`072bb000 srv srv.sys Mon Jun 21 23:21:11 2010 (4C202C27)
fffff880`06f6b000 fffff880`06fd3000 srv2 srv2.sys Mon Jun 21 23:20:47 2010 (4C202C0F)
fffff880`06ebb000 fffff880`06ee8000 srvnet srvnet.sys Mon Jun 21 23:20:32 2010 (4C202C00)
fffff880`042c0000 fffff880`042c1480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01601000 fffff880`017fe000 tcpip tcpip.sys Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`06f59000 fffff880`06f6b000 tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`019f1000 fffff880`019fe000 TDI TDI.SYS Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`019d3000 fffff880`019f1000 tdx tdx.sys Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02db6000 fffff880`02dca000 termdd termdd.sys Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`005f0000 fffff960`005fa000 TSDDD TSDDD.dll unavailable (00000000)
fffff880`04140000 fffff880`04166000 tunnel tunnel.sys Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04305000 fffff880`04317000 umbus umbus.sys Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`04800000 fffff880`04801f00 USBD USBD.SYS Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0f053000 fffff880`0f064000 usbehci usbehci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04317000 fffff880`04371000 usbhub usbhub.sys Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`0417c000 fffff880`041d2000 USBPORT USBPORT.SYS Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0f046000 fffff880`0f053000 usbuhci usbuhci.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00fac000 fffff880`00fb9000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01959000 fffff880`01967000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01967000 fffff880`0198c000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0144a000 fffff880`0145a000 vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00fce000 fffff880`00fe3000 volmgr volmgr.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e00000 fffff880`00e5c000 volmgrx volmgrx.sys Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01073000 fffff880`010bf000 volsnap volsnap.sys Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02d9b000 fffff880`02db6000 wanarp wanarp.sys Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`0198c000 fffff880`0199c000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e5c000 fffff880`00f00000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f00000 fffff880`00f0f000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02d40000 fffff880`02d49000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00050000 fffff960`0035f000 win32k win32k.sys Sat Jun 19 00:31:59 2010 (4C1C483F)
fffff880`00f66000 fffff880`00f6f000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`04871000 fffff880`04892000 WudfPf WudfPf.sys Mon Jul 13 20:05:37 2009 (4A5BCBD1)
Unloaded modules:
fffff880`06ee8000 fffff880`06f59000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`06e92000 fffff880`06ea3000 STREAM.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`06e0f000 fffff880`06e92000 Ca1528av.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`018e9000 fffff880`018f7000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`018f7000 fffff880`01903000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01903000 fffff880`0190c000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0190c000 fffff880`0191f000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000