Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\050510-27783-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\symbols;*http://msdl.microsoft.com/download/symbols/;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0x82e0c000 PsLoadedModuleList = 0x82f54810
Debug session time: Tue May 4 18:59:27.574 2010 (GMT-4)
System Uptime: 0 days 6:42:53.400
Loading Kernel Symbols
...............................................................
................................................................
.....................................................
Loading User Symbols
Loading unloaded module list
............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1, {90dd854e, 0, ffff, 0}
Unable to load image \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for RapportPG.sys
*** ERROR: Module load completed but symbols could not be loaded for RapportPG.sys
Probably caused by : RapportPG.sys ( RapportPG+154e )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
APC_INDEX_MISMATCH (1)
This is a kernel internal error. The most common reason to see this
bugcheck is when a filesystem or a driver has a mismatched number of
calls to disable and re-enable APCs. The key data item is the
Thread->KernelApcDisable field. A negative value indicates that a driver
has disabled APC calls without re-enabling them. A positive value indicates
that the reverse is true. This check is made on exit from a system call.
Arguments:
Arg1: 90dd854e, address of system function (system call)
Arg2: 00000000, Thread->ApcStateIndex << 8 | Previous ApcStateIndex
Arg3: 0000ffff, Thread->KernelApcDisable
Arg4: 00000000, Previous KernelApcDisable
Debugging Details:
------------------
FAULTING_IP:
RapportPG+154e
90dd854e 6a08 push 8
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x1
PROCESS_NAME: iTunes.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 772564f4 to 82e4f7d3
STACK_TEXT:
bbc9dd34 772564f4 badb0d00 002ab314 00000000 nt!KiServiceExit2+0x17a
WARNING: Frame IP not in any known module. Following frames may be wrong.
002ab3e4 00000000 00000000 00000000 00000000 0x772564f4
STACK_COMMAND: .bugcheck ; kb
FOLLOWUP_IP:
RapportPG+154e
90dd854e 6a08 push 8
SYMBOL_NAME: RapportPG+154e
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: RapportPG
IMAGE_NAME: RapportPG.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4ba8d23c
FAILURE_BUCKET_ID: 0x1_RapportPG+154e
BUCKET_ID: 0x1_RapportPG+154e
Followup: MachineOwner
---------
