Microsoft (R) Windows Debugger Version 6.2.8400.0 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Skyler\AppData\Local\Temp\Rar$DIa0.185\091312-23618-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Machine Name:
Kernel base = 0xfffff800`03067000 PsLoadedModuleList = 0xfffff800`032ab670
Debug session time: Wed Sep 12 22:30:02.080 2012 (UTC - 5:00)
System Uptime: 0 days 0:43:01.704
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {fffff8000337ce6a, 2, 0, fffff8000310f912}
*** WARNING: Unable to verify timestamp for [COLOR="Red"]athurx.sys[/COLOR]
*** ERROR: Module load completed but symbols could not be loaded for athurx.sys
Probably caused by : memory_corruption
Followup: memory_corruption
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffff8000337ce6a, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8000310f912, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003315100
GetUlongFromAddress: unable to read from fffff800033151c0
fffff8000337ce6a Nonpaged pool
CURRENT_IRQL: 2
FAULTING_IP:
nt!RtlDispatchException+122
fffff800`0310f912 410fb60c24 movzx ecx,byte ptr [r12]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: CODE_CORRUPTION
BUGCHECK_STR: 0xA
PROCESS_NAME: System
TRAP_FRAME: fffff88004f9d9e0 -- (.trap 0xfffff88004f9d9e0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff88002fd84a8 rbx=0000000000000000 rcx=0000000002181443
rdx=fffff88002fd84c8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800031861f2 rsp=fffff88004f9db70 rbp=0000000000000000
r8=4e6f130ff0df94ee r9=fffff88004f9dc00 r10=0000000000000074
r11=3fc29ffb02181443 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po cy
nt!KeCheckForTimer+0x102:
fffff800`031861f2 4d8b4018 mov r8,qword ptr [r8+18h] ds:4e6f130f`f0df9506=????????????????
Resetting default scope
EXCEPTION_RECORD: fffff88004f9d938 -- (.exr 0xfffff88004f9d938)
ExceptionAddress: fffff800031861f2 (nt!KeCheckForTimer+0x0000000000000102)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
LAST_CONTROL_TRANSFER: from fffff800030e5769 to fffff800030e61c0
STACK_TEXT:
fffff880`04f9c7a8 fffff800`030e5769 : 00000000`0000000a fffff800`0337ce6a 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`04f9c7b0 fffff800`030e43e0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`0000005a : nt!KiBugCheckDispatch+0x69
fffff880`04f9c8f0 fffff800`0310f912 : fffff800`0337ce6a fffff880`04f9cac8 fffff880`04f9d938 fffff880`06016000 : nt!KiPageFault+0x260
fffff880`04f9ca80 fffff800`03120b81 : fffff880`04f9d938 fffff880`04f9d190 fffff880`00000000 fffff880`04f9dc40 : nt!RtlDispatchException+0x122
fffff880`04f9d160 fffff800`030e5842 : fffff880`04f9d938 fffff880`02fd8400 fffff880`04f9d9e0 fffff880`04f9dc80 : nt!KiDispatchException+0x135
fffff880`04f9d800 fffff800`030e414a : fffff880`04f9daa8 fffff800`0357f5d7 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`04f9d9e0 fffff800`031861f2 : bfc4aa75`2e0e5bf9 bf62d6fc`ce64716c c0078011`2609fc74 c0078011`2609fc74 : nt!KiGeneralProtectionFault+0x10a
fffff880`04f9db70 fffff800`035743b6 : 00000000`00000001 fffff880`0150684e 00000000`00000074 00000000`00000000 : nt!KeCheckForTimer+0x102
fffff880`04f9dbe0 fffff880`01506808 : 00000000`00002710 00000000`0000000d 00000000`00002710 fffffa80`06ef3030 : nt!VerifierKeInitializeTimerEx+0x26
fffff880`04f9dc10 fffff880`0601cf8e : fffffa80`067f2030 fffffa80`00000010 fffff880`04f9dcd0 fffff880`009f4fc0 : ndis!NdisMSleep+0x18
fffff880`04f9dc90 fffffa80`067f2030 : fffffa80`00000010 fffff880`04f9dcd0 fffff880`009f4fc0 fffffa80`069d2b50 : athurx+0x6f8e
fffff880`04f9dc98 fffffa80`00000010 : fffff880`04f9dcd0 fffff880`009f4fc0 fffffa80`069d2b50 00000000`00000002 : 0xfffffa80`067f2030
fffff880`04f9dca0 fffff880`04f9dcd0 : fffff880`009f4fc0 fffffa80`069d2b50 00000000`00000002 0000002f`00000002 : 0xfffffa80`00000010
fffff880`04f9dca8 fffff880`009f4fc0 : fffffa80`069d2b50 00000000`00000002 0000002f`00000002 fffffa80`067f2030 : 0xfffff880`04f9dcd0
fffff880`04f9dcb0 fffffa80`069d2b50 : 00000000`00000002 0000002f`00000002 fffffa80`067f2030 00000000`039d7b00 : 0xfffff880`009f4fc0
fffff880`04f9dcb8 00000000`00000002 : 0000002f`00000002 fffffa80`067f2030 00000000`039d7b00 fffff800`031e7e00 : 0xfffffa80`069d2b50
fffff880`04f9dcc0 0000002f`00000002 : fffffa80`067f2030 00000000`039d7b00 fffff800`031e7e00 fffff980`0afa8d80 : 0x2
fffff880`04f9dcc8 fffffa80`067f2030 : 00000000`039d7b00 fffff800`031e7e00 fffff980`0afa8d80 fffffa80`06ef3030 : 0x0000002f`00000002
fffff880`04f9dcd0 00000000`039d7b00 : fffff800`031e7e00 fffff980`0afa8d80 fffffa80`06ef3030 00000000`00000001 : 0xfffffa80`067f2030
fffff880`04f9dcd8 fffff800`031e7e00 : fffff980`0afa8d80 fffffa80`06ef3030 00000000`00000001 fffff880`04f9dd40 : 0x39d7b00
fffff880`04f9dce0 00000000`00000000 : 00000000`00000000 00000000`00000000 fffff880`04f9e000 fffff880`04f98000 : nt!EtwpCCSwapTrace+0x4d0
STACK_COMMAND: kb
CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
fffff8000310fd30 - nt!RtlDispatchException+540
[ b6:5c ]
1 error : !nt (fffff8000310fd30)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: ONE_BYTE
FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BYTE
BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BYTE
Followup: memory_corruption
---------