Loading Dump File [G:\Kingston\BSODDmpFiles\tyler91\Windows_NT6_BSOD_jcgriff2\020112-12776-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02c58000 PsLoadedModuleList = 0xfffff800`02e9d670
Debug session time: Wed Feb 1 09:06:23.736 2012 (GMT-7)
System Uptime: 0 days 0:11:29.813
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {2c, 2, 1, fffff88005b09bfe}
Unable to load image \SystemRoot\system32\DRIVERS\NETwNs64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for NETwNs64.sys
*** ERROR: Module load completed but symbols could not be loaded for NETwNs64.sys
Probably caused by : NETwNs64.sys ( NETwNs64+21abfe )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 000000000000002c, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff88005b09bfe, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f07100
000000000000002c
CURRENT_IRQL: 2
FAULTING_IP:
NETwNs64+21abfe
fffff880`05b09bfe 89732c mov dword ptr [rbx+2Ch],esi
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: System
TRAP_FRAME: fffff80000b9c3e0 -- (.trap 0xfffff80000b9c3e0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff88001695110 rbx=0000000000000000 rcx=fffff88001698ec0
rdx=fffff80002ed48d0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88005b09bfe rsp=fffff80000b9c570 rbp=fffffa8007b18bc8
r8=0000000000000000 r9=0000000000000000 r10=0069004c00200069
r11=fffffa800969e878 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
NETwNs64+0x21abfe:
fffff880`05b09bfe 89732c mov dword ptr [rbx+2Ch],esi ds:13d5:00000000`0000002c=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002cd41e9 to fffff80002cd4c40
STACK_TEXT:
fffff800`00b9c298 fffff800`02cd41e9 : 00000000`0000000a 00000000`0000002c 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff800`00b9c2a0 fffff800`02cd2e60 : fffffa80`0416a148 fffff880`0590e05e fffffa80`075aee20 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff800`00b9c3e0 fffff880`05b09bfe : 00000000`00000000 fffffa80`07b18bc8 fffffa80`00000002 00000000`000000c0 : nt!KiPageFault+0x260
fffff800`00b9c570 00000000`00000000 : fffffa80`07b18bc8 fffffa80`00000002 00000000`000000c0 00000000`000004ba : NETwNs64+0x21abfe
STACK_COMMAND: kb
FOLLOWUP_IP:
NETwNs64+21abfe
fffff880`05b09bfe 89732c mov dword ptr [rbx+2Ch],esi
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: NETwNs64+21abfe
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: NETwNs64
IMAGE_NAME: NETwNs64.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4d237525
FAILURE_BUCKET_ID: X64_0xD1_NETwNs64+21abfe
BUCKET_ID: X64_0xD1_NETwNs64+21abfe
Followup: MachineOwner
---------
0: kd> lmvm NETwNs64
start end module name
fffff880`058ef000 fffff880`0615b000 NETwNs64 T (no symbols)
Loaded symbol image file: NETwNs64.sys
Image path: \SystemRoot\system32\DRIVERS\NETwNs64.sys
Image name: NETwNs64.sys
Timestamp: Tue Jan 04 12:29:41 2011 (4D237525)
CheckSum: 00823E68
ImageSize: 0086C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
)
