Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\K\Desktop\020910-16941-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*d:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02c65000 PsLoadedModuleList = 0xfffff800`02ea2e50
Debug session time: Tue Feb 9 18:30:21.748 2010 (GMT-5)
System Uptime: 0 days 6:21:25.698
Loading Kernel Symbols
...............................................................
................................................................
......................................
Loading User Symbols
Loading unloaded module list
...............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1E, {ffffffffc0000005, fffff80002cf84a8, 0, ffffffffffffffff}
Probably caused by : memory_corruption ( nt!MiUnlinkPageFromLockedList+6a8 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002cf84a8, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!MiUnlinkPageFromLockedList+6a8
fffff800`02cf84a8 49890cc1 mov qword ptr [r9+rax*8],rcx
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f0d0e0
ffffffffffffffff
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x1E
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff80002d16a17 to fffff80002cd6f00
STACK_TEXT:
fffff880`0b40ce38 fffff800`02d16a17 : 00000000`0000001e ffffffff`c0000005 fffff800`02cf84a8 00000000`00000000 : nt!KeBugCheckEx
fffff880`0b40ce40 fffff800`02cd6542 : fffff880`0b40d618 fffffa80`04155420 fffff880`0b40d6c0 00000000`00000001 : nt! ?? ::FNODOBFM::`string'+0x460da
fffff880`0b40d4e0 fffff800`02cd4e4a : 00000001`00000001 00000000`00000011 00000000`80000000 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`0b40d6c0 fffff800`02cf84a8 : fffffa80`05afcf30 fffffa80`079f10b0 7ff00000`00000000 00000000`01d4c238 : nt!KiGeneralProtectionFault+0x10a
fffff880`0b40d850 fffff800`02d08d57 : 00000000`01d4b7b8 fffff680`00000000 0000007f`00000000 fffff680`0000ea58 : nt!MiUnlinkPageFromLockedList+0x6a8
fffff880`0b40d8e0 fffff800`02cf3506 : 00000000`00000000 00000000`01d4b7b8 fffff880`0b40d990 fffffa80`05da9d88 : nt!MiResolveTransitionFault+0x167
fffff880`0b40d970 fffff800`02cf0f23 : ffffffff`ffffffff 00000000`00052a00 00000000`00000020 00020bea`00020410 : nt!MiDispatchFault+0x946
fffff880`0b40da80 fffff800`02cd4fee : 00000000`00000000 00000000`01d4ad50 fffffa80`0ad41a01 00000000`00000000 : nt!MmAccessFault+0x343
fffff880`0b40dbe0 00000000`6af828d7 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
00000000`0430e070 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x6af828d7
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiUnlinkPageFromLockedList+6a8
fffff800`02cf84a8 49890cc1 mov qword ptr [r9+rax*8],rcx
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: nt!MiUnlinkPageFromLockedList+6a8
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc600
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x1E_nt!MiUnlinkPageFromLockedList+6a8
BUCKET_ID: X64_0x1E_nt!MiUnlinkPageFromLockedList+6a8
Followup: MachineOwner
---------