Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\K\Desktop\New folder (3)\012710-23259-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*F:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02c66000 PsLoadedModuleList = 0xfffff800`02ea3e50
Debug session time: Wed Jan 27 10:39:53.117 2010 (GMT-4)
System Uptime: 0 days 19:06:53.146
Loading Kernel Symbols
...............................................................
................................................................
...........
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 24, {1904fb, fffff88007fc2b78, fffff88007fc23d0, fffff880012f8c50}
Probably caused by : Ntfs.sys ( Ntfs!NtfsFindPrefixHashEntry+227 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff88007fc2b78
Arg3: fffff88007fc23d0
Arg4: fffff880012f8c50
Debugging Details:
------------------
EXCEPTION_RECORD: fffff88007fc2b78 -- (.exr 0xfffff88007fc2b78)
ExceptionAddress: fffff880012f8c50 (Ntfs!NtfsFindPrefixHashEntry+0x0000000000000227)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
CONTEXT: fffff88007fc23d0 -- (.cxr 0xfffff88007fc23d0)
rax=0000000000000052 rbx=fffff8a00562e3d0 rcx=00000000000004aa
rdx=0000000000000001 rsi=fffff8a000136bc0 rdi=fffffa800456b350
rip=fffff880012f8c50 rsp=fffff88007fc2db0 rbp=0000000000002bc0
r8=000000001fe21255 r9=0000000000000000 r10=0000000000000004
r11=fffff88007fc2df8 r12=bffff8a00bd3e5c8 r13=fffff88007fc3360
r14=0000000000000255 r15=0000000000001255
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
Ntfs!NtfsFindPrefixHashEntry+0x227:
fffff880`012f8c50 498b7c2418 mov rdi,qword ptr [r12+18h] ds:002b:bffff8a0`0bd3e5e0=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: rundll32.exe
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f0e0e0
ffffffffffffffff
FOLLOWUP_IP:
Ntfs!NtfsFindPrefixHashEntry+227
fffff880`012f8c50 498b7c2418 mov rdi,qword ptr [r12+18h]
FAULTING_IP:
Ntfs!NtfsFindPrefixHashEntry+227
fffff880`012f8c50 498b7c2418 mov rdi,qword ptr [r12+18h]
BUGCHECK_STR: 0x24
LAST_CONTROL_TRANSFER: from fffff880012f9ce2 to fffff880012f8c50
STACK_TEXT:
fffff880`07fc2db0 fffff880`012f9ce2 : fffffa80`03b0b7f0 fffffa80`0456b350 fffff8a0`00136bc0 00000000`0000ff01 : Ntfs!NtfsFindPrefixHashEntry+0x227
fffff880`07fc2ee0 fffff880`012f428d : fffffa80`03b0b7f0 fffffa80`07448c60 fffff880`07fc30c0 fffff880`07fc3108 : Ntfs!NtfsFindStartingNode+0x452
fffff880`07fc2fb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : Ntfs!NtfsCommonCreate+0x3dd
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: Ntfs!NtfsFindPrefixHashEntry+227
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc14f
STACK_COMMAND: .cxr 0xfffff88007fc23d0 ; kb
FAILURE_BUCKET_ID: X64_0x24_Ntfs!NtfsFindPrefixHashEntry+227
BUCKET_ID: X64_0x24_Ntfs!NtfsFindPrefixHashEntry+227
Followup: MachineOwner
---------