*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 7E, {ffffffffc0000005, fffff88005ab5fc6, fffff88003cc7758, fffff88003cc6fb0}
*** WARNING: Unable to verify timestamp for [URL="http://www.carrona.org/drivers/driver.php?id=lvrs64.sys"]lvrs64.sys[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://www.carrona.org/drivers/driver.php?id=lvrs64.sys"]lvrs64.sys[/URL]
Probably caused by : [URL="http://www.carrona.org/drivers/driver.php?id=lvrs64.sys"]lvrs64.sys[/URL] ( lvrs64+2fc6 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff88005ab5fc6, The address that the exception occurred at
Arg3: fffff88003cc7758, Exception Record Address
Arg4: fffff88003cc6fb0, Context Record Address
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
lvrs64+2fc6
fffff880`05ab5fc6 ?? ???
EXCEPTION_RECORD: fffff88003cc7758 -- (.exr 0xfffff88003cc7758)
ExceptionAddress: fffff88005ab5fc6 (lvrs64+0x0000000000002fc6)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 0000000001e65c94
Attempt to read from address 0000000001e65c94
CONTEXT: fffff88003cc6fb0 -- (.cxr 0xfffff88003cc6fb0)
rax=0000000000000000 rbx=fffffa80081ff6e0 rcx=0000000000000001
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88005ab5fc6 rsp=fffff88003cc7990 rbp=0000000001e65c70
r8=0000000000000000 r9=0000000001e65c70 r10=0000000000000002
r11=0000000001e65c70 r12=fffffa80087e11f0 r13=0000000000000000
r14=0000000001e65c70 r15=0000000001e65c70
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
lvrs64+0x2fc6:
fffff880`05ab5fc6 ?? ???
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 0000000001e65c94
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003cb9100
GetUlongFromAddress: unable to read from fffff80003cb91c0
0000000001e65c94 Nonpaged pool
FOLLOWUP_IP:
lvrs64+2fc6
fffff880`05ab5fc6 ?? ???
FAILED_INSTRUCTION_ADDRESS:
lvrs64+2fc6
fffff880`05ab5fc6 ?? ???
BUGCHECK_STR: 0x7E
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff88005ab5fc6
STACK_TEXT:
fffff880`03cc7990 00000000`00000000 : fffffa80`0aea6b28 00000000`00000000 00000000`00000000 fffffa80`0aea6b70 : lvrs64+0x2fc6
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: lvrs64+2fc6
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: lvrs64
IMAGE_NAME: lvrs64.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 505cb9b9
STACK_COMMAND: .cxr 0xfffff88003cc6fb0 ; kb
FAILURE_BUCKET_ID: X64_0x7E_BAD_IP_lvrs64+2fc6
BUCKET_ID: X64_0x7E_BAD_IP_lvrs64+2fc6
Followup: MachineOwner
---------
2: kd> lmvm lvrs64
start end module name
fffff880`05ab3000 fffff880`05b07000 lvrs64 T (no symbols)
Loaded symbol image file: lvrs64.sys
Image path: lvrs64.sys
Image name: lvrs64.sys
Timestamp: Sat Sep 22 00:32:17 2012 (505CB9B9)
CheckSum: 000612AC
ImageSize: 00054000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4