Loading Dump File [C:\DUMPS\namelessjoker\020511-30248-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a62000 PsLoadedModuleList = 0xfffff800`02c9fe50
Debug session time: Sat Feb 5 15:41:06.934 2011 (UTC + 0:00)
System Uptime: 0 days 0:08:42.010
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {c0000014, 2, 1, fffff8800110b716}
Unable to load image \SystemRoot\System32\Drivers\sptd.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys
Probably caused by : sptd.sys ( sptd+42716 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000000c0000014, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff8800110b716, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002d0a0e0
00000000c0000014
CURRENT_IRQL: 2
FAULTING_IP:
sptd+42716
fffff880`0110b716 0000 add byte ptr [rax],al
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: SearchFilterHo
TRAP_FRAME: fffff88002f22cd0 -- (.trap 0xfffff88002f22cd0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffffa80046bd718
rdx=fffffa8007044e11 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800110b716 rsp=fffff88002f22e60 rbp=fffffa80054704b0
r8=fffffa8007044e00 r9=0000000000000030 r10=fffff880009ebac0
r11=fffffa8003bd22c0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
sptd+0x42716:
fffff880`0110b716 0000 add byte ptr [rax],al ds:0185:00000000`00000000=??
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002ad1ca9 to fffff80002ad2740
STACK_TEXT:
fffff880`02f22b88 fffff800`02ad1ca9 : 00000000`0000000a 00000000`c0000014 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`02f22b90 fffff800`02ad0920 : fffffa80`73556f49 fffffa80`046bd000 fffffa80`062e7200 fffff800`02ad4d26 : nt!KiBugCheckDispatch+0x69
fffff880`02f22cd0 fffff880`0110b716 : fffffa80`046bd000 fffffa80`0396d050 fffffa80`062e7000 fffffa80`046bd738 : nt!KiPageFault+0x260
fffff880`02f22e60 fffffa80`046bd000 : fffffa80`0396d050 fffffa80`062e7000 fffffa80`046bd738 00000000`00000000 : sptd+0x42716
fffff880`02f22e68 fffffa80`0396d050 : fffffa80`062e7000 fffffa80`046bd738 00000000`00000000 00000000`00000000 : 0xfffffa80`046bd000
fffff880`02f22e70 fffffa80`062e7000 : fffffa80`046bd738 00000000`00000000 00000000`00000000 00000000`00000040 : 0xfffffa80`0396d050
fffff880`02f22e78 fffffa80`046bd738 : 00000000`00000000 00000000`00000000 00000000`00000040 00000000`00000022 : 0xfffffa80`062e7000
fffff880`02f22e80 00000000`00000000 : 00000000`00000000 00000000`00000040 00000000`00000022 00000000`00000000 : 0xfffffa80`046bd738
STACK_COMMAND: kb
FOLLOWUP_IP:
sptd+42716
fffff880`0110b716 0000 add byte ptr [rax],al
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: sptd+42716
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: sptd
IMAGE_NAME: sptd.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4ad24632
FAILURE_BUCKET_ID: X64_0xD1_sptd+42716
BUCKET_ID: X64_0xD1_sptd+42716
Followup: MachineOwner