Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\061711-33852-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16792.x86fre.win7_gdr.110408-1633
Machine Name:
Kernel base = 0x82e1e000 PsLoadedModuleList = 0x82f66810
Debug session time: Fri Jun 17 15:43:30.998 2011 (GMT-4)
System Uptime: 0 days 0:00:38.229
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
......
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: c6025a1a, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 8d798203, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000002, (reserved)
Debugging Details:
------------------
Unable to load image \SystemRoot\System32\Drivers\aswSP.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswSP.SYS
*** ERROR: Module load completed but symbols could not be loaded for aswSP.SYS
Could not read faulting driver name
READ_ADDRESS: GetPointerFromAddress: unable to read from 82f86718
Unable to read MiSystemVaType memory at 82f66160
c6025a1a
FAULTING_IP:
aswSP+2c203
8d798203 0fb74e18 movzx ecx,word ptr [esi+18h]
MM_INTERNAL_CODE: 2
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: AvastSvc.exe
CURRENT_IRQL: 0
TRAP_FRAME: 9889b614 -- (.trap 0xffffffff9889b614)
ErrCode = 00000000
eax=00000000 ebx=c6025a02 ecx=86e529e8 edx=00000000 esi=c6025a02 edi=00000040
eip=8d798203 esp=9889b688 ebp=9889b7f0 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
aswSP+0x2c203:
8d798203 0fb74e18 movzx ecx,word ptr [esi+18h] ds:0023:c6025a1a=????
Resetting default scope
LAST_CONTROL_TRANSFER: from 82e64608 to 82ea3a0b
STACK_TEXT:
9889b5fc 82e64608 00000000 c6025a1a 00000000 nt!MmAccessFault+0x106
9889b5fc 8d798203 00000000 c6025a1a 00000000 nt!KiTrap0E+0xdc
WARNING: Stack unwind information not available. Following frames may be wrong.
9889b7f0 8d779db8 c6025a02 00000000 86e529e8 aswSP+0x2c203
9889b84c 8d77aad5 c6025a02 9889b880 9889ba70 aswSP+0xddb8
9889b89c 8d77e24a 9b8218c0 9889b908 15f30cd1 aswSP+0xead5
9889b8fc 830bc8e8 00000000 0000001d 9889b99c aswSP+0x1224a
9889b970 8305cf41 0000001d 9b81c828 8c76f100 nt!CmpCallCallBacks+0x336
9889b9b8 83055ede 0000001d 9b857448 9889ba70 nt!CmPostCallbackNotification+0x55
9889bb48 8303f57b 8880afd0 84939728 8606b008 nt!CmpParseKey+0x14b2
9889bbc4 83065729 00000000 9889bc18 00000040 nt!ObpLookupObjectName+0x4fa
9889bc20 8305ce74 015af9fc 84939728 86296d01 nt!ObOpenObjectByName+0x165
9889bd00 83057bc7 015afae0 00000002 015af9fc nt!CmOpenKey+0x1f4
9889bd1c 82e6141a 015afae0 00000002 015af9fc nt!NtOpenKeyEx+0x18
9889bd1c 772b6344 015afae0 00000002 015af9fc nt!KiFastCallEntry+0x12a
015afa3c 00000000 00000000 00000000 00000000 0x772b6344
STACK_COMMAND: kb
FOLLOWUP_IP:
aswSP+2c203
8d798203 0fb74e18 movzx ecx,word ptr [esi+18h]
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: aswSP+2c203
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: aswSP
IMAGE_NAME: aswSP.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 4d65202b
FAILURE_BUCKET_ID: 0x50_aswSP+2c203
BUCKET_ID: 0x50_aswSP+2c203
Followup: MachineOwner
---------
kd> lmvm aswSP
start end module name
8d76c000 8d7b3880 aswSP T (no symbols)
Loaded symbol image file: aswSP.SYS
Image path: \SystemRoot\System32\Drivers\aswSP.SYS
Image name: aswSP.SYS
Timestamp: Wed Feb 23 09:56:43 2011 (4D65202B)
CheckSum: 00059699
ImageSize: 00047880
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
