Microsoft (R) Windows Debugger Version 6.2.9200.20512 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\admin\Downloads\DK-LAPTOP-Thu_11_20_2014_101612_01\112014-39062-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18526.amd64fre.win7sp1_gdr.140706-1506
Machine Name:
Kernel base = 0xfffff800`03207000 PsLoadedModuleList = 0xfffff800`0344a890
Debug session time: Thu Nov 20 23:34:33.291 2014 (UTC + 6:00)
System Uptime: 0 days 23:36:29.556
Loading Kernel Symbols
...............................................................
................................................................
.....................................................
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {fffff98039b88e80, 2, 0, fffff880054140e9}
*** WARNING: Unable to verify timestamp for L1C62x64.sys
*** ERROR: Module load completed but symbols could not be loaded for L1C62x64.sys
Probably caused by : L1C62x64.sys ( L1C62x64+70e9 )
Followup: MachineOwner
---------
5: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff98039b88e80, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff880054140e9, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800034b4100
GetUlongFromAddress: unable to read from fffff800034b41c0
fffff98039b88e80
CURRENT_IRQL: 2
FAULTING_IP:
L1C62x64+70e9
fffff880`054140e9 4d8b36 mov r14,qword ptr [r14]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VERIFIER_ENABLED_VISTA_MINIDUMP
BUGCHECK_STR: 0xD1
PROCESS_NAME: uTorrent.exe
TRAP_FRAME: fffff88009c38ea0 -- (.trap 0xfffff88009c38ea0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000282
rdx=0000000000000005 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880054140e9 rsp=fffff88009c39030 rbp=fffff9800553afb0
r8=0000000000000000 r9=0000000000000000 r10=b0014a03c824e052
r11=fffff88009c38dd0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
L1C62x64+0x70e9:
fffff880`054140e9 4d8b36 mov r14,qword ptr [r14] ds:00000000`00000000=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff8000327c169 to fffff8000327cbc0
STACK_TEXT:
fffff880`09c38d58 fffff800`0327c169 : 00000000`0000000a fffff980`39b88e80 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`09c38d60 fffff800`0327ade0 : 00000000`00000002 fffff800`037f0a56 fffffa80`09101040 fffffa80`090dfa20 : nt!KiBugCheckDispatch+0x69
fffff880`09c38ea0 fffff880`054140e9 : fffffa80`095dd1a0 fffffa80`090dfa20 fffff980`0553afb0 fffff980`0553afb0 : nt!KiPageFault+0x260
fffff880`09c39030 fffffa80`095dd1a0 : fffffa80`090dfa20 fffff980`0553afb0 fffff980`0553afb0 fffffa80`093909c0 : L1C62x64+0x70e9
fffff880`09c39038 fffffa80`090dfa20 : fffff980`0553afb0 fffff980`0553afb0 fffffa80`093909c0 fffffa80`000001c0 : 0xfffffa80`095dd1a0
fffff880`09c39040 fffff980`0553afb0 : fffff980`0553afb0 fffffa80`093909c0 fffffa80`000001c0 00000000`00000000 : 0xfffffa80`090dfa20
fffff880`09c39048 fffff980`0553afb0 : fffffa80`093909c0 fffffa80`000001c0 00000000`00000000 00000000`00000000 : 0xfffff980`0553afb0
fffff880`09c39050 fffffa80`093909c0 : fffffa80`000001c0 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffff980`0553afb0
fffff880`09c39058 fffffa80`000001c0 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff980`39b88e80 : 0xfffffa80`093909c0
fffff880`09c39060 00000000`00000000 : 00000000`00000000 00000000`00000000 fffff980`39b88e80 fffff980`39b88d50 : 0xfffffa80`000001c0
STACK_COMMAND: kb
FOLLOWUP_IP:
L1C62x64+70e9
fffff880`054140e9 4d8b36 mov r14,qword ptr [r14]
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: L1C62x64+70e9
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: L1C62x64
IMAGE_NAME: L1C62x64.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 51e4eeac
FAILURE_BUCKET_ID: X64_0xD1_VRF_L1C62x64+70e9
BUCKET_ID: X64_0xD1_VRF_L1C62x64+70e9
Followup: MachineOwner
---------
5: kd> lmvm L1C62x64
start end module name
fffff880`0540d000 fffff880`0542f000 L1C62x64 T (no symbols)
Loaded symbol image file: L1C62x64.sys
Image path: \SystemRoot\system32\DRIVERS\L1C62x64.sys
Image name: L1C62x64.sys
Timestamp: Tue Jul 16 12:56:44 2013 (51E4EEAC)
CheckSum: 0002912C
ImageSize: 00022000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4