Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Mike\Downloads\BSODDmpFiles\mamilan\Windows_NT6_BSOD_jcgriff2\011612-19624-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\users\mike\documents\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02c67000 PsLoadedModuleList = 0xfffff800`02eac670
Debug session time: Mon Jan 16 02:09:02.177 2012 (UTC - 7:00)
System Uptime: 0 days 0:30:07.145
Loading Kernel Symbols
...............................................................
................................................................
..................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {6c, 2, 0, fffff880056f675b}
Unable to load image \SystemRoot\system32\DRIVERS\athrx.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for athrx.sys
*** ERROR: Module load completed but symbols could not be loaded for athrx.sys
Probably caused by : athrx.sys ( athrx+c975b )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 000000000000006c, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff880056f675b, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f16100
000000000000006c
CURRENT_IRQL: 2
FAULTING_IP:
athrx+c975b
fffff880`056f675b 03416c add eax,dword ptr [rcx+6Ch]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: System
TRAP_FRAME: fffff80004033190 -- (.trap 0xfffff80004033190)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=000000006a8d2f8a rbx=0000000000000000 rcx=0000000000000000
rdx=000000000000804c rsi=0000000000000000 rdi=0000000000000000
rip=fffff880056f675b rsp=fffff80004033320 rbp=fffffa80053528e0
r8=0000000000000000 r9=0000000000000000 r10=0000000000000000
r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
athrx+0xc975b:
fffff880`056f675b 03416c add eax,dword ptr [rcx+6Ch] ds:00000000`0000006c=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002ce31e9 to fffff80002ce3c40
STACK_TEXT:
fffff800`04033048 fffff800`02ce31e9 : 00000000`0000000a 00000000`0000006c 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff800`04033050 fffff800`02ce1e60 : fffff800`02e84268 00000000`00000000 fffffa80`05277c68 fffffa80`06e6c1a0 : nt!KiBugCheckDispatch+0x69
fffff800`04033190 fffff880`056f675b : fffffa80`07480030 00000000`00000000 00000000`00000000 00000000`00000007 : nt!KiPageFault+0x260
fffff800`04033320 fffffa80`07480030 : 00000000`00000000 00000000`00000000 00000000`00000007 fffffa80`07386a70 : athrx+0xc975b
fffff800`04033328 00000000`00000000 : 00000000`00000000 00000000`00000007 fffffa80`07386a70 fffff800`02d919e8 : 0xfffffa80`07480030
STACK_COMMAND: kb
FOLLOWUP_IP:
athrx+c975b
fffff880`056f675b 03416c add eax,dword ptr [rcx+6Ch]
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: athrx+c975b
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: athrx
IMAGE_NAME: athrx.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4c9fdcaa
FAILURE_BUCKET_ID: X64_0xD1_athrx+c975b
BUCKET_ID: X64_0xD1_athrx+c975b
Followup: MachineOwner
---------