Microsoft (R) Windows Debugger Version 6.2.9200.16384 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Skyler\AppData\Local\Temp\Rar$DIa0.646\080813-32682-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Machine Name:
Kernel base = 0xfffff800`02e5b000 PsLoadedModuleList = 0xfffff800`0309e670
Debug session time: Wed Aug 7 17:28:32.822 2013 (UTC - 5:00)
System Uptime: 0 days 5:37:53.024
Loading Kernel Symbols
...............................................................
................................................................
..............................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {fffff88008be7638, 2, 8, fffff88008be7638}
[COLOR="Red"]*** WARNING: Unable to verify timestamp for MijXfilt.sys
*** ERROR: Module load completed but symbols could not be loaded for MijXfilt.sys
Probably caused by : MijXfilt.sys ( MijXfilt+1b638 )[/COLOR]
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff88008be7638, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: fffff88008be7638, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003108100
GetUlongFromAddress: unable to read from fffff800031081c0
fffff88008be7638 Nonpaged pool
CURRENT_IRQL: 2
FAULTING_IP:
MijXfilt+1b638
fffff880`08be7638 48895c2408 mov qword ptr [rsp+8],rbx
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: System
TAG_NOT_DEFINED_c000000f: FFFFF88002F94FB0
TRAP_FRAME: fffff88002f94b00 -- (.trap 0xfffff88002f94b00)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000057ff94e9738
rdx=0000057ff4c2ffd8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88008be7638 rsp=fffff88002f94c98 rbp=fffff88002f94ce0
r8=0000000009a12488 r9=0000000000000000 r10=fffffa8009953e40
r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
MijXfilt+0x1b638:
fffff880`08be7638 48895c2408 mov qword ptr [rsp+8],rbx ss:0018:fffff880`02f94ca0=20003d0b80faffff
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002ed01a9 to fffff80002ed0c00
FAILED_INSTRUCTION_ADDRESS:
MijXfilt+1b638
fffff880`08be7638 48895c2408 mov qword ptr [rsp+8],rbx
STACK_TEXT:
fffff880`02f949b8 fffff800`02ed01a9 : 00000000`0000000a fffff880`08be7638 00000000`00000002 00000000`00000008 : nt!KeBugCheckEx
fffff880`02f949c0 fffff800`02ecee20 : fffffa80`09953e40 fffff880`00e9c602 00000000`00000000 fffffa80`0b3d0020 : nt!KiBugCheckDispatch+0x69
fffff880`02f94b00 fffff880`08be7638 : fffff880`00e95042 fffffa80`0b3d0020 fffffa80`0b3d0020 fffff880`02f94ce0 : nt!KiPageFault+0x260
fffff880`02f94c98 fffff880`00e95042 : fffffa80`0b3d0020 fffffa80`0b3d0020 fffff880`02f94ce0 00000000`000006e4 : MijXfilt+0x1b638
fffff880`02f94ca0 fffff880`00e9442f : fffffa80`06b16800 fffffa80`00000000 fffffa80`06b168c0 fffffa80`0799b208 : Wdf01000!FxIoQueue::DispatchRequestToDriver+0x542
fffff880`02f94d20 fffff880`00e9ffbb : fffffa80`09953e40 fffffa80`0b3d0002 00000000`00000000 fffffa80`0b3d0020 : Wdf01000!FxIoQueue::DispatchEvents+0x66f
fffff880`02f94da0 fffff880`00e9930a : fffffa80`09953e02 fffffa80`0b3d0020 fffffa80`077d2510 fffff880`02f94e80 : Wdf01000!FxIoQueue::QueueRequest+0x2ab
fffff880`02f94e10 fffff880`00e989da : fffffa80`0b3d0020 fffffa80`077d2510 00000000`00000000 fffffa80`077d2510 : Wdf01000!FxPkgIo::Dispatch+0x4da
fffff880`02f94e80 fffff880`00e98aa6 : fffffa80`077d2510 00000000`00000000 fffffa80`09022d40 00003eb0`caeb3c1a : Wdf01000!FxDevice::Dispatch+0x19a
fffff880`02f94ec0 fffff800`02edb2fc : fffff880`02f65180 00000000`00000000 fffffa80`08a5ec68 00000000`00000054 : Wdf01000!FxDevice::DispatchWithLock+0xa6
fffff880`02f94f00 fffff800`02ed3d05 : 00000000`00000000 fffffa80`06734660 00000000`00000000 fffff880`00eeb5e8 : nt!KiRetireDpcList+0x1bc
fffff880`02f94fb0 fffff800`02ed3b1c : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KyRetireDpcList+0x5
fffff880`03316470 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchInterruptContinue
STACK_COMMAND: kb
FOLLOWUP_IP:
MijXfilt+1b638
fffff880`08be7638 48895c2408 mov qword ptr [rsp+8],rbx
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: MijXfilt+1b638
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: MijXfilt
IMAGE_NAME: MijXfilt.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4fade6a0
FAILURE_BUCKET_ID: X64_0xD1_CODE_AV_BAD_IP_MijXfilt+1b638
BUCKET_ID: X64_0xD1_CODE_AV_BAD_IP_MijXfilt+1b638
Followup: MachineOwner
---------