Loading Dump File [D:\Kingston\BSODDmpFiles\Chatta66\032812-22370-01\032812-22370-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17727.amd64fre.win7sp1_gdr.111118-2330
Machine Name:
Kernel base = 0xfffff800`02e5f000 PsLoadedModuleList = 0xfffff800`030a3650
Debug session time: Wed Mar 28 19:43:42.814 2012 (UTC - 6:00)
System Uptime: 0 days 0:01:48.375
Loading Kernel Symbols
...............................................................
................................................................
.......................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C4, {f6, 4bc, fffffa8009bafb30, fffff88005372530}
Unable to load image LMouKE.Sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for LMouKE.Sys
*** ERROR: Module load completed but symbols could not be loaded for LMouKE.Sys
Probably caused by : LMouKE.Sys ( LMouKE+e530 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught. This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 00000000000000f6, Referencing user handle as KernelMode.
Arg2: 00000000000004bc, Handle value being referenced.
Arg3: fffffa8009bafb30, Address of the current process.
Arg4: fffff88005372530, Address inside the driver that is performing the incorrect reference.
Debugging Details:
------------------
BUGCHECK_STR: 0xc4_f6
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: KHALMNPR.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff800033643dc to fffff80002edbd40
STACK_TEXT:
fffff880`0b4fdf98 fffff800`033643dc : 00000000`000000c4 00000000`000000f6 00000000`000004bc fffffa80`09bafb30 : nt!KeBugCheckEx
fffff880`0b4fdfa0 fffff800`03379ae4 : 00000000`000004bc fffffa80`09bafb30 00000000`00000002 00000000`00000000 : nt!VerifierBugCheckIfAppropriate+0x3c
fffff880`0b4fdfe0 fffff800`03218a85 : 00000000`00000010 00000000`000004bc fffff880`0b4fe170 ffffffff`fffffd90 : nt!VfCheckUserHandle+0x1b4
fffff880`0b4fe0c0 fffff800`02edafd3 : fffffa80`0afdab60 fffff800`02f06b4b fffff8a0`08aa85d0 fffff8a0`08aa85d0 : nt! ?? ::NNGAKEGL::`string'+0x23045
fffff880`0b4fe0f0 fffff800`02ed7570 : fffff880`05372530 fffff880`0b4fe5a9 fffff880`0b4fe5a0 ffffffff`fffffd90 : nt!KiSystemServiceCopyEnd+0x13
fffff880`0b4fe288 fffff880`05372530 : fffff880`0b4fe5a9 fffff880`0b4fe5a0 ffffffff`fffffd90 00000000`00000009 : nt!KiServiceLinkage
fffff880`0b4fe290 fffff880`0b4fe5a9 : fffff880`0b4fe5a0 ffffffff`fffffd90 00000000`00000009 00000000`00000000 : LMouKE+0xe530
fffff880`0b4fe298 fffff880`0b4fe5a0 : ffffffff`fffffd90 00000000`00000009 00000000`00000000 fffff880`00000000 : 0xfffff880`0b4fe5a9
fffff880`0b4fe2a0 ffffffff`fffffd90 : 00000000`00000009 00000000`00000000 fffff880`00000000 fffff880`0b4fe2e0 : 0xfffff880`0b4fe5a0
fffff880`0b4fe2a8 00000000`00000009 : 00000000`00000000 fffff880`00000000 fffff880`0b4fe2e0 fffff880`00000000 : 0xffffffff`fffffd90
fffff880`0b4fe2b0 00000000`00000000 : fffff880`00000000 fffff880`0b4fe2e0 fffff880`00000000 00000000`00140012 : 0x9
STACK_COMMAND: kb
FOLLOWUP_IP:
LMouKE+e530
fffff880`05372530 488d4c2440 lea rcx,[rsp+40h]
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: LMouKE+e530
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: LMouKE
IMAGE_NAME: LMouKE.Sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a391eda
FAILURE_BUCKET_ID: X64_0xc4_f6_LMouKE+e530
BUCKET_ID: X64_0xc4_f6_LMouKE+e530
Followup: MachineOwner
---------