Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\K\Desktop\Seven Forums\010111-38484-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0x82e39000 PsLoadedModuleList = 0x82f81810
Debug session time: Sat Jan 1 15:26:48.363 2011 (GMT-5)
System Uptime: 0 days 0:09:23.394
Loading Kernel Symbols
...............................................................
................................................................
..........................................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {8620cb20, 2, 0, 82ec2d6d}
*** WARNING: Unable to verify timestamp for SRTSP.SYS
*** ERROR: Module load completed but symbols could not be loaded for SRTSP.SYS
*** WARNING: Unable to verify timestamp for NAVENG.SYS
*** ERROR: Module load completed but symbols could not be loaded for NAVENG.SYS
*** WARNING: Unable to verify timestamp for NAVEX15.SYS
*** ERROR: Module load completed but symbols could not be loaded for NAVEX15.SYS
Probably caused by : SRTSP.SYS ( SRTSP+312d8 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 8620cb20, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82ec2d6d, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from 82fa1718
Unable to read MiSystemVaType memory at 82f81160
8620cb20
CURRENT_IRQL: 2
FAULTING_IP:
nt!ExpAddTagForBigPages+104
82ec2d6d 8b11 mov edx,dword ptr [ecx]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: System
TRAP_FRAME: 8b46acbc -- (.trap 0xffffffff8b46acbc)
ErrCode = 00000000
eax=862fa000 ebx=82f73b24 ecx=8620cb20 edx=00000001 esi=82f73b24 edi=040e12b2
eip=82ec2d6d esp=8b46ad30 ebp=8b46ad70 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
nt!ExpAddTagForBigPages+0x104:
82ec2d6d 8b11 mov edx,dword ptr [ecx] ds:0023:8620cb20=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 82ec2d6d to 82e7f82b
STACK_TEXT:
8b46acbc 82ec2d6d badb0d00 00000001 00000002 nt!KiTrap0E+0x2cf
8b46ad70 82ecd7e6 a497a000 65456153 00004010 nt!ExpAddTagForBigPages+0x104
8b46add0 82f58cd8 00000000 00000001 00004010 nt!ExpAllocateBigPool+0xdd
8b46ae30 9670c2d8 00000001 00004005 65456153 nt!ExAllocatePoolWithTag+0x12d
WARNING: Stack unwind information not available. Following frames may be wrong.
8b46ae4c 9876b762 00004005 00000001 00000001 SRTSP+0x312d8
8b46aea8 9876922c 94e927b8 96ab472c 94ef8518 NAVENG+0x3762
8b46aee8 9876941e 98760740 00000002 94ef8518 NAVENG+0x122c
8b46af2c 986235cf a2ad4178 94ef8518 a496e008 NAVENG+0x141e
8b46afb4 986255a3 00000000 98760740 a496e608 NAVEX15+0x65cf
8b46b028 986259a3 a496e608 00000003 94ef85d0 NAVEX15+0x85a3
8b46b060 96709d94 a2ad4178 94ef8518 a496e008 NAVEX15+0x89a3
8b46b0bc 9670af7f 8b46b134 00000008 a2ad4178 SRTSP+0x2ed94
8b46b140 96701ff2 8b46b1a4 94ef8518 94ef85c8 SRTSP+0x2ff7f
8b46b1d0 967027d4 94ef8500 94ef8500 84bf4501 SRTSP+0x26ff2
8b46b1f4 96702ca9 94ef8500 8b46b284 8b46b284 SRTSP+0x277d4
8b46b214 966f2c3d 8bd0d304 84bf4510 84bf45c8 SRTSP+0x27ca9
8b46b260 871b1324 84bf4570 0146b284 00000000 SRTSP+0x17c3d
8b46b2c8 871b4512 00bf4510 84bf4510 1000000c fltmgr!FltpPerformPostCallbacks+0x24a
8b46b2dc 871b4b46 84bf4510 86d94e00 8b46b31c fltmgr!FltpProcessIoCompletion+0x10
8b46b2ec 871b529c 85abfcf8 86d94e00 84bf4510 fltmgr!FltpPassThroughCompletion+0x98
8b46b31c 871c88c9 8b46b33c 00000000 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x33a
8b46b368 82e754bc 85abfcf8 8563d4f0 84b0c754 fltmgr!FltpCreate+0x2db
8b46b380 830796ad af4e4537 8b46b528 00000000 nt!IofCallDriver+0x63
8b46b458 8305a26b 8551c030 847ac040 86bb0008 nt!IopParseDevice+0xed7
8b46b4d4 830802d9 00000000 8b46b528 000002c0 nt!ObpLookupObjectName+0x4fa
8b46b530 8307862b 8b46b714 847ac040 87573700 nt!ObOpenObjectByName+0x165
8b46b5ac 830b367e 8b46b730 80000000 8b46b714 nt!IopCreateFile+0x673
8b46b5f4 82e7c44a 8b46b730 80000000 8b46b714 nt!NtOpenFile+0x2a
8b46b5f4 82e7a7c1 8b46b730 80000000 8b46b714 nt!KiFastCallEntry+0x12a
8b46b684 87109165 8b46b730 80000000 8b46b714 nt!ZwOpenFile+0x11
8b46b6ec 8710b523 8b46b730 8b46b7b8 a49573a0 CI!CipMinCrypK_OpenFile+0x27
8b46b738 8710d41b 8b46b77c 8b46b788 8b46b78c CI!I_MapAndSizeDataFile+0x4f
8b46b7b0 8710d77e 8b46b86c a4957370 00000000 CI!I_MapCatalog+0xfb
8b46b88c 8710d8bc 8b46b8b4 8b46a83a 8b46baa0 CI!I_ReloadCatalogs+0x22e
8b46b8d8 8710dbee 8b46bacc 00000000 00000001 CI!I_FindFileOrHeaderHashInCatalogs+0xc1
8b46b908 8710a08d 8b46bacc 00000001 00000000 CI!MinCrypK_FindPageHashesInCatalog+0x24
8b46b968 8710acce 864d7f80 8b46bacc 00008004 CI!CipGetPageHashesForFile+0xa9
8b46ba70 8710aead 864d7f80 a04c0000 00001000 CI!CipValidatePageHash+0x1ac
8b46bae4 83013d8e 864d7f80 a04c0000 00001000 CI!CiValidateImageHeader+0x14f
8b46bb00 83013bf9 864d7f80 a04c0000 00001000 nt!SeValidateImageHeader+0x4d
8b46bb74 8305c918 864d7f80 86c6fbc8 00000002 nt!MiValidateImageHeader+0x171
8b46bc9c 83069ed1 00000000 00000000 00000000 nt!MmCreateSection+0x77f
8b46bd10 00000000 00000000 00000000 00000000 nt!NtCreateSection+0x16e
STACK_COMMAND: kb
FOLLOWUP_IP:
SRTSP+312d8
9670c2d8 ?? ???
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: SRTSP+312d8
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: SRTSP
IMAGE_NAME: SRTSP.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 4b85bc4b
FAILURE_BUCKET_ID: 0xA_SRTSP+312d8
BUCKET_ID: 0xA_SRTSP+312d8
Followup: MachineOwner
---------