Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\060811-33421-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17592.amd64fre.win7sp1_gdr.110408-1631
Machine Name:
Kernel base = 0xfffff800`03850000 PsLoadedModuleList = 0xfffff800`03a95650
Debug session time: Tue Jun 7 20:53:33.645 2011 (GMT-4)
System Uptime: 5 days 14:17:19.656
Loading Kernel Symbols
...............................................................
................................................................
....................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {fffffa858c646818, 2, 0, fffff88003eff337}
Unable to load image \SystemRoot\system32\DRIVERS\vsdatant.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for vsdatant.sys
*** ERROR: Module load completed but symbols could not be loaded for vsdatant.sys
Probably caused by : vsdatant.sys ( vsdatant+48337 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffffa858c646818, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88003eff337, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003aff100
fffffa858c646818
CURRENT_IRQL: 2
FAULTING_IP:
vsdatant+48337
fffff880`03eff337 4a8b44ca08 mov rax,qword ptr [rdx+r9*8+8]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: System
TRAP_FRAME: fffff88009799240 -- (.trap 0xfffff88009799240)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa80054a9cf0 rbx=0000000000000000 rcx=0000000000000000
rdx=fffffa8005636010 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88003eff337 rsp=fffff880097993d8 rbp=000000000000ff1f
r8=00000000017505e2 r9=00000000b0e02100 r10=0000000058701584
r11=00000000fffff880 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
vsdatant+0x48337:
fffff880`03eff337 4a8b44ca08 mov rax,qword ptr [rdx+r9*8+8] ds:0001:fffffa85`8c646818=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800038cf2a9 to fffff800038cfd00
STACK_TEXT:
fffff880`097990f8 fffff800`038cf2a9 : 00000000`0000000a fffffa85`8c646818 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`09799100 fffff800`038cdf20 : 00000001`00000000 00000000`00000001 00000000`00000001 00000000`84157058 : nt!KiBugCheckDispatch+0x69
fffff880`09799240 fffff880`03eff337 : fffff880`03ef01af fffffa80`054a9cf0 00000000`58701584 00000000`84157058 : nt!KiPageFault+0x260
fffff880`097993d8 fffff880`03ef01af : fffffa80`054a9cf0 00000000`58701584 00000000`84157058 00000000`00009854 : vsdatant+0x48337
fffff880`097993e0 fffffa80`054a9cf0 : 00000000`58701584 00000000`84157058 00000000`00009854 fffff880`0979949c : vsdatant+0x391af
fffff880`097993e8 00000000`58701584 : 00000000`84157058 00000000`00009854 fffff880`0979949c fffff880`03ef03dd : 0xfffffa80`054a9cf0
fffff880`097993f0 00000000`84157058 : 00000000`00009854 fffff880`0979949c fffff880`03ef03dd 00000000`84157058 : 0x58701584
fffff880`097993f8 00000000`00009854 : fffff880`0979949c fffff880`03ef03dd 00000000`84157058 00000000`000005be : 0x84157058
fffff880`09799400 fffff880`0979949c : fffff880`03ef03dd 00000000`84157058 00000000`000005be fffff880`09799620 : 0x9854
fffff880`09799408 fffff880`03ef03dd : 00000000`84157058 00000000`000005be fffff880`09799620 00000000`0000000d : 0xfffff880`0979949c
fffff880`09799410 00000000`84157058 : 00000000`000005be fffff880`09799620 00000000`0000000d 00000000`0a01a8c0 : vsdatant+0x393dd
fffff880`09799418 00000000`000005be : fffff880`09799620 00000000`0000000d 00000000`0a01a8c0 fffff880`03ef265d : 0x84157058
fffff880`09799420 fffff880`09799620 : 00000000`0000000d 00000000`0a01a8c0 fffff880`03ef265d fffff880`0979949c : 0x5be
fffff880`09799428 00000000`0000000d : 00000000`0a01a8c0 fffff880`03ef265d fffff880`0979949c fffff880`09799494 : 0xfffff880`09799620
fffff880`09799430 00000000`0a01a8c0 : fffff880`03ef265d fffff880`0979949c fffff880`09799494 fffff880`00000001 : 0xd
fffff880`09799438 fffff880`03ef265d : fffff880`0979949c fffff880`09799494 fffff880`00000001 fffffa80`041f4960 : 0xa01a8c0
fffff880`09799440 fffff880`0979949c : fffff880`09799494 fffff880`00000001 fffffa80`041f4960 00000000`00000000 : vsdatant+0x3b65d
fffff880`09799448 fffff880`09799494 : fffff880`00000001 fffffa80`041f4960 00000000`00000000 00000000`00009854 : 0xfffff880`0979949c
fffff880`09799450 fffff880`00000001 : fffffa80`041f4960 00000000`00000000 00000000`00009854 00000000`000005be : 0xfffff880`09799494
fffff880`09799458 fffffa80`041f4960 : 00000000`00000000 00000000`00009854 00000000`000005be fffff880`09799674 : 0xfffff880`00000001
fffff880`09799460 00000000`00000000 : 00000000`00009854 00000000`000005be fffff880`09799674 0a01a8c0`0000000d : 0xfffffa80`041f4960
STACK_COMMAND: kb
FOLLOWUP_IP:
vsdatant+48337
fffff880`03eff337 4a8b44ca08 mov rax,qword ptr [rdx+r9*8+8]
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: vsdatant+48337
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: vsdatant
IMAGE_NAME: vsdatant.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4be6e2ca
FAILURE_BUCKET_ID: X64_0xD1_vsdatant+48337
BUCKET_ID: X64_0xD1_vsdatant+48337
Followup: MachineOwner
---------
1: kd> lmvm vsdatant
start end module name
fffff880`03eb7000 fffff880`03f4c000 vsdatant T (no symbols)
Loaded symbol image file: vsdatant.sys
Image path: \SystemRoot\system32\DRIVERS\vsdatant.sys
Image name: vsdatant.sys
Timestamp: Sun May 09 12:28:58 2010 (4BE6E2CA)
CheckSum: 0007FD21
ImageSize: 00095000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4