Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\USER\Downloads\Compressed\ADMIN-PC-Thu_11_13_2014_154835_07\111314-35786-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18526.amd64fre.win7sp1_gdr.140706-1506
Machine Name:
Kernel base = 0xfffff800`0284a000 PsLoadedModuleList = 0xfffff800`02a8d890
Debug session time: Fri Nov 14 00:56:44.529 2014 (UTC + 6:00)
System Uptime: 0 days 11:55:30.185
Loading Kernel Symbols
...............................................................
................................................................
...................................
Loading User Symbols
Loading unloaded module list
............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {538, 2, 0, fffff8800387f836}
*** WARNING: Unable to verify timestamp for athrx.sys
*** ERROR: Module load completed but symbols could not be loaded for athrx.sys
Probably caused by : athrx.sys ( athrx+59836 )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000538, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8800387f836, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002af7100
GetUlongFromAddress: unable to read from fffff80002af71c0
0000000000000538 Nonpaged pool
CURRENT_IRQL: 2
FAULTING_IP:
athrx+59836
fffff880`0387f836 0fb78038050000 movzx eax,word ptr [rax+538h]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: System
TRAP_FRAME: fffff880085ac270 -- (.trap 0xfffff880085ac270)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffffa80109805b0
rdx=0000000000000002 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800387f836 rsp=fffff880085ac408 rbp=0000000000000000
r8=fffffa801247b000 r9=0000000000000000 r10=fffff80002a4f588
r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
athrx+0x59836:
fffff880`0387f836 0fb78038050000 movzx eax,word ptr [rax+538h] ds:00000000`00000538=????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800028bf169 to fffff800028bfbc0
STACK_TEXT:
fffff880`085ac128 fffff800`028bf169 : 00000000`0000000a 00000000`00000538 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`085ac130 fffff800`028bdde0 : 00000000`00000000 fffffa80`11af8c50 00000000`00000246 00000000`000000bd : nt!KiBugCheckDispatch+0x69
fffff880`085ac270 fffff880`0387f836 : fffff880`038820f1 fffffa80`109805b0 fffff880`0387c9f3 fffffa80`1319338d : nt!KiPageFault+0x260
fffff880`085ac408 fffff880`038820f1 : fffffa80`109805b0 fffff880`0387c9f3 fffffa80`1319338d 00000000`000000bd : athrx+0x59836
fffff880`085ac410 fffffa80`109805b0 : fffff880`0387c9f3 fffffa80`1319338d 00000000`000000bd fffffa80`11c2a040 : athrx+0x5c0f1
fffff880`085ac418 fffff880`0387c9f3 : fffffa80`1319338d 00000000`000000bd fffffa80`11c2a040 fffffa80`109805b0 : 0xfffffa80`109805b0
fffff880`085ac420 fffffa80`1319338d : 00000000`000000bd fffffa80`11c2a040 fffffa80`109805b0 fffff880`085ac970 : athrx+0x569f3
fffff880`085ac428 00000000`000000bd : fffffa80`11c2a040 fffffa80`109805b0 fffff880`085ac970 fffff880`03854b20 : 0xfffffa80`1319338d
fffff880`085ac430 fffffa80`11c2a040 : fffffa80`109805b0 fffff880`085ac970 fffff880`03854b20 fffffa80`11c2a040 : 0xbd
fffff880`085ac438 fffffa80`109805b0 : fffff880`085ac970 fffff880`03854b20 fffffa80`11c2a040 fffff880`00000001 : 0xfffffa80`11c2a040
fffff880`085ac440 fffff880`085ac970 : fffff880`03854b20 fffffa80`11c2a040 fffff880`00000001 fffffa80`1247b080 : 0xfffffa80`109805b0
fffff880`085ac448 fffff880`03854b20 : fffffa80`11c2a040 fffff880`00000001 fffffa80`1247b080 fffff880`03879501 : 0xfffff880`085ac970
fffff880`085ac450 fffffa80`11c2a040 : fffff880`00000001 fffffa80`1247b080 fffff880`03879501 fffffa80`1247b040 : athrx+0x2eb20
fffff880`085ac458 fffff880`00000001 : fffffa80`1247b080 fffff880`03879501 fffffa80`1247b040 80000000`00000000 : 0xfffffa80`11c2a040
fffff880`085ac460 fffffa80`1247b080 : fffff880`03879501 fffffa80`1247b040 80000000`00000000 ffff0100`c0000001 : 0xfffff880`00000001
fffff880`085ac468 fffff880`03879501 : fffffa80`1247b040 80000000`00000000 ffff0100`c0000001 fffff880`00000002 : 0xfffffa80`1247b080
fffff880`085ac470 fffffa80`1247b040 : 80000000`00000000 ffff0100`c0000001 fffff880`00000002 00000000`000000bd : athrx+0x53501
fffff880`085ac478 80000000`00000000 : ffff0100`c0000001 fffff880`00000002 00000000`000000bd fffff880`03862587 : 0xfffffa80`1247b040
fffff880`085ac480 ffff0100`c0000001 : fffff880`00000002 00000000`000000bd fffff880`03862587 fffffa80`11de4030 : 0x80000000`00000000
fffff880`085ac488 fffff880`00000002 : 00000000`000000bd fffff880`03862587 fffffa80`11de4030 00000000`00000000 : 0xffff0100`c0000001
fffff880`085ac490 00000000`000000bd : fffff880`03862587 fffffa80`11de4030 00000000`00000000 00000000`028f0000 : 0xfffff880`00000002
fffff880`085ac498 fffff880`03862587 : fffffa80`11de4030 00000000`00000000 00000000`028f0000 fffffa80`131932a0 : 0xbd
fffff880`085ac4a0 fffffa80`11de4030 : 00000000`00000000 00000000`028f0000 fffffa80`131932a0 00000000`00000000 : athrx+0x3c587
fffff880`085ac4a8 00000000`00000000 : 00000000`028f0000 fffffa80`131932a0 00000000`00000000 fffff880`03862aef : 0xfffffa80`11de4030
STACK_COMMAND: kb
FOLLOWUP_IP:
athrx+59836
fffff880`0387f836 0fb78038050000 movzx eax,word ptr [rax+538h]
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: athrx+59836
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: athrx
IMAGE_NAME: athrx.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4ae25d38
FAILURE_BUCKET_ID: X64_0xD1_athrx+59836
BUCKET_ID: X64_0xD1_athrx+59836
Followup: MachineOwner
---------
3: kd> lmvm athrx
start end module name
fffff880`03826000 fffff880`039a3000 athrx T (no symbols)
Loaded symbol image file: athrx.sys
Image path: \SystemRoot\system32\DRIVERS\athrx.sys
Image name: athrx.sys
Timestamp: Sat Oct 24 07:49:44 2009 (4AE25D38)
CheckSum: 0017F4D3
ImageSize: 0017D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4