Windows 7 Kernel Version 7600 MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0x82a17000 PsLoadedModuleList = 0x82b5f810
Debug session time: Sun Nov 21 12:53:06.025 2010 (GMT-5)
System Uptime: 0 days 0:12:25.976
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000008E, {c0000005, 82aa99bd, a3d358fc, 0}
Probably caused by : ntkrpamp.exe ( nt!CcSetDirtyInMask+46c )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 82aa99bd, The address that the exception occurred at
Arg3: a3d358fc, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!CcSetDirtyInMask+46c
82aa99bd 0fb700 movzx eax,word ptr [eax]
TRAP_FRAME: a3d358fc -- (.trap 0xffffffffa3d358fc)
ErrCode = 00000000
eax=856cba4e ebx=858288e0 ecx=856cb9c8 edx=a3d359e0 esi=00000000 edi=879f1ec4
eip=82aa99bd esp=a3d35970 ebp=a3d359ac iopl=0 nv up ei pl zr ac pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010256
nt!CcSetDirtyInMask+0x46c:
82aa99bd 0fb700 movzx eax,word ptr [eax] ds:0023:856cba4e=0000
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: msiexec.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 82aa9d24 to 82aa99bd
STACK_TEXT:
a3d359ac 82aa9d24 879f1e18 a3d359e0 00000078 nt!CcSetDirtyInMask+0x46c
a3d35a38 82aacc1c 879f1e18 00fc6758 a3d35a88 nt!CcMapAndCopyInToCache+0x2dd
a3d35a94 8aed1c24 85729c30 a3d35b9c 00000078 nt!CcCopyWrite+0x1d9
a3d35bc0 8abb7fec 85729c30 a3d35ac0 00000078 Ntfs!NtfsCopyWriteA+0x248
a3d35bf4 8abb81bb 00000004 00000000 87c732c4 fltmgr!FltpPerformFastIoCall+0x22e
a3d35c20 8abcadcf 00d35c44 85729c30 8abcac6c fltmgr!FltpPassThroughFastIo+0x7d
a3d35c64 82c55477 85729c30 a3d35cac 00000078 fltmgr!FltpFastIoWrite+0x163
a3d35d08 82a5a44a 85eae288 00000000 00000000 nt!NtWriteFile+0x342
a3d35d08 771264f4 85eae288 00000000 00000000 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
00e7e4c8 00000000 00000000 00000000 00000000 0x771264f4
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!CcSetDirtyInMask+46c
82aa99bd 0fb700 movzx eax,word ptr [eax]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!CcSetDirtyInMask+46c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c3fac
FAILURE_BUCKET_ID: 0x8E_nt!CcSetDirtyInMask+46c
BUCKET_ID: 0x8E_nt!CcSetDirtyInMask+46c
Followup: MachineOwner
---------
Debug session time: Sun Nov 21 13:48:52.657 2010 (GMT-5)
System Uptime: 0 days 0:47:16.998
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
.........
2: kd> !Analyze
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck FC, {8cf00120, 6b4f5963, 9875ca92, 0}
Probably caused by : ntkrpamp.exe ( nt!KiTrap0E+dc )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
An attempt was made to execute non-executable memory. The guilty driver
is on the stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: 8cf00120, Virtual address for the attempted execute.
Arg2: 6b4f5963, PTE contents.
Arg3: 9875ca92, (reserved)
Arg4: 00000000, (reserved)
Debugging Details:
------------------
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xFC
PROCESS_NAME: explorer.exe
CURRENT_IRQL: 2
TRAP_FRAME: 9875ca92 -- (.trap 0xffffffff9875ca92)
ErrCode = 00000011
eax=0000000c ebx=867e5bcc ecx=867e5b02 edx=00000002 esi=8cf00120 edi=867e5b98
eip=8cf00120 esp=9875cb06 ebp=9875c630 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
8cf00120 0100 add dword ptr [eax],eax ds:0023:0000000c=????????
Resetting default scope
UNALIGNED_STACK_POINTER: 9875cb06
LAST_CONTROL_TRANSFER: from 82a7d638 to 82abc903
STACK_TEXT:
9875ca7a 82a7d638 00000008 8cf00120 00000000 nt!MmAccessFault+0x106
9875ca7a 8cf00120 00000008 8cf00120 00000000 nt!KiTrap0E+0xdc
WARNING: Frame IP not in any known module. Following frames may be wrong.
9875cb02 02560000 00000000 00000000 01200000 0x8cf00120
9875cb06 00000000 00000000 01200000 e2008cf0 0x2560000
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiTrap0E+dc
82a7d638 85c0 test eax,eax
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!KiTrap0E+dc
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c3fac
FAILURE_BUCKET_ID: 0xFC_nt!KiTrap0E+dc
BUCKET_ID: 0xFC_nt!KiTrap0E+dc
Followup: MachineOwner
---------