Microsoft (R) Windows Debugger Version 6.2.9200.20512 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Usra\Downloads\041314-45131-01\041314-45131-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Machine Name:
Kernel base = 0xfffff800`0284d000 PsLoadedModuleList = 0xfffff800`02a91670
Debug session time: Mon Apr 14 08:58:45.509 2014 (UTC + 6:00)
System Uptime: 0 days 10:52:03.961
Loading Kernel Symbols
...............................................................
................................................................
......................................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {0, 2, 8, 0}
*** WARNING: Unable to verify timestamp for fortknoxfw.sys
*** ERROR: Module load completed but symbols could not be loaded for fortknoxfw.sys
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : fortknoxfw.sys ( fortknoxfw+432c )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: 0000000000000000, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002afb100
GetUlongFromAddress: unable to read from fffff80002afb1c0
0000000000000000 Nonpaged pool
CURRENT_IRQL: 2
FAULTING_IP:
+0
00000000`00000000 ?? ???
PROCESS_NAME: System
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0xD1
TAG_NOT_DEFINED_c000000f: FFFFF80000BA2FB0
TRAP_FRAME: fffff80000b9ad80 -- (.trap 0xfffff80000b9ad80)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000001000 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000016 rsi=0000000000000000 rdi=0000000000000000
rip=0000000000000000 rsp=fffff80000b9af18 rbp=0000000000000001
r8=fffff80000b9b3a0 r9=0000000000000018 r10=fffff80002a3f7c0
r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
00000000`00000000 ?? ???
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800028cb769 to fffff800028cc1c0
FAILED_INSTRUCTION_ADDRESS:
+0
00000000`00000000 ?? ???
STACK_TEXT:
fffff800`00b9af18 fffff880`02e0432c : fffffa80`058aa390 fffffa80`058aa390 00000000`00000001 fffffa80`058aa4e0 : 0x0
fffff800`00b9af20 fffffa80`058aa390 : fffffa80`058aa390 00000000`00000001 fffffa80`058aa4e0 fffffa80`07261110 : fortknoxfw+0x432c
fffff800`00b9af28 fffffa80`058aa390 : 00000000`00000001 fffffa80`058aa4e0 fffffa80`07261110 00000000`00001000 : 0xfffffa80`058aa390
fffff800`00b9af30 00000000`00000001 : fffffa80`058aa4e0 fffffa80`07261110 00000000`00001000 00000000`00000042 : 0xfffffa80`058aa390
fffff800`00b9af38 fffffa80`058aa4e0 : fffffa80`07261110 00000000`00001000 00000000`00000042 00000000`00000042 : 0x1
fffff800`00b9af40 fffffa80`07261110 : 00000000`00001000 00000000`00000042 00000000`00000042 fffff800`00b9b328 : 0xfffffa80`058aa4e0
fffff800`00b9af48 00000000`00001000 : 00000000`00000042 00000000`00000042 fffff800`00b9b328 fffff880`04c5b6aa : 0xfffffa80`07261110
fffff800`00b9af50 00000000`00000042 : 00000000`00000042 fffff800`00b9b328 fffff880`04c5b6aa fffff800`00b9b2f8 : 0x1000
fffff800`00b9af58 00000000`00000042 : fffff800`00b9b328 fffff880`04c5b6aa fffff800`00b9b2f8 fffff800`02a53588 : 0x42
fffff800`00b9af60 fffff800`00b9b328 : fffff880`04c5b6aa fffff800`00b9b2f8 fffff800`02a53588 00000018`06e79302 : 0x42
fffff800`00b9af68 fffff880`04c5b6aa : fffff800`00b9b2f8 fffff800`02a53588 00000018`06e79302 fffffa80`07261110 : 0xfffff800`00b9b328
fffff800`00b9af70 fffff800`00b9b2f8 : fffff800`02a53588 00000018`06e79302 fffffa80`07261110 fffff800`00000011 : 0xfffff880`04c5b6aa
fffff800`00b9af78 fffff800`02a53588 : 00000018`06e79302 fffffa80`07261110 fffff800`00000011 fffff800`00b9b2f8 : 0xfffff800`00b9b2f8
fffff800`00b9af80 00000018`06e79302 : fffffa80`07261110 fffff800`00000011 fffff800`00b9b2f8 fffff800`00b9b328 : nt!NonPagedPoolDescriptor+0x8
fffff800`00b9af88 fffffa80`07261110 : fffff800`00000011 fffff800`00b9b2f8 fffff800`00b9b328 fffff880`04c5b6aa : 0x00000018`06e79302
fffff800`00b9af90 fffff800`00000011 : fffff800`00b9b2f8 fffff800`00b9b328 fffff880`04c5b6aa 00000002`000001c1 : 0xfffffa80`07261110
fffff800`00b9af98 fffff800`00b9b2f8 : fffff800`00b9b328 fffff880`04c5b6aa 00000002`000001c1 00000001`00000000 : 0xfffff800`00000011
fffff800`00b9afa0 fffff800`00b9b328 : fffff880`04c5b6aa 00000002`000001c1 00000001`00000000 00000011`00000000 : 0xfffff800`00b9b2f8
fffff800`00b9afa8 fffff880`04c5b6aa : 00000002`000001c1 00000001`00000000 00000011`00000000 0000001c`000004c4 : 0xfffff800`00b9b328
fffff800`00b9afb0 00000002`000001c1 : 00000001`00000000 00000011`00000000 0000001c`000004c4 00000000`a9d80002 : 0xfffff880`04c5b6aa
fffff800`00b9afb8 00000001`00000000 : 00000011`00000000 0000001c`000004c4 00000000`a9d80002 00000000`00000000 : 0x00000002`000001c1
fffff800`00b9afc0 00000011`00000000 : 0000001c`000004c4 00000000`a9d80002 00000000`00000000 be00a8c0`eb140002 : 0x00000001`00000000
fffff800`00b9afc8 0000001c`000004c4 : 00000000`a9d80002 00000000`00000000 be00a8c0`eb140002 00000000`00000000 : 0x00000011`00000000
fffff800`00b9afd0 00000000`a9d80002 : 00000000`00000000 be00a8c0`eb140002 00000000`00000000 00000000`00000010 : 0x0000001c`000004c4
fffff800`00b9afd8 00000000`00000000 : be00a8c0`eb140002 00000000`00000000 00000000`00000010 00000000`00000000 : 0xa9d80002
STACK_COMMAND: .trap 0xfffff80000b9ad80 ; kb
FOLLOWUP_IP:
fortknoxfw+432c
fffff880`02e0432c ?? ???
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: fortknoxfw+432c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: fortknoxfw
IMAGE_NAME: fortknoxfw.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4b0038e2
FAILURE_BUCKET_ID: X64_0xD1_CODE_AV_NULL_IP_fortknoxfw+432c
BUCKET_ID: X64_0xD1_CODE_AV_NULL_IP_fortknoxfw+432c
Followup: MachineOwner
---------
0: kd> lmvm fortknoxfw
start end module name
fffff880`02e00000 fffff880`02e14000 fortknoxfw T (no symbols)
Loaded symbol image file: fortknoxfw.sys
Image path: \SystemRoot\system32\drivers\fortknoxfw.sys
Image name: fortknoxfw.sys
Timestamp: Sun Nov 15 23:22:42 2009 (4B0038E2)
CheckSum: 0001CA3D
ImageSize: 00014000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4