Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [D:\ DOWNLOADS\Sven6847.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\XSymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16695.x86fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0x82c07000 PsLoadedModuleList = 0x82d4f810
Debug session time: Tue Feb 15 04:07:19.510 2011 (UTC + 0:00)
System Uptime: 0 days 23:50:10.773
Loading Kernel Symbols
...............................................................
................................................................
..........................................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {8c897bf0, 2, 1, 82c6e2f9}
Unable to load image \SystemRoot\System32\Drivers\NIPALK.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for NIPALK.sys
*** ERROR: Module load completed but symbols could not be loaded for NIPALK.sys
Probably caused by : NIPALK.sys ( NIPALK+120e6 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 8c897bf0, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82c6e2f9, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 82d6f718
Unable to read MiSystemVaType memory at 82d4f160
8c897bf0
CURRENT_IRQL: 2
FAULTING_IP:
nt!KeWaitForSingleObject+27d
82c6e2f9 f00fba2807 lock bts dword ptr [eax],7
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: nipalsm.exe
TRAP_FRAME: a09b7964 -- (.trap 0xffffffffa09b7964)
ErrCode = 00000003
eax=8c897bf0 ebx=8c897bf0 ecx=854f9148 edx=00000000 esi=854f90e8 edi=854f91a8
eip=82c6e2f9 esp=a09b79d8 ebp=a09b7a3c iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!KeWaitForSingleObject+0x27d:
82c6e2f9 f00fba2807 lock bts dword ptr [eax],7 ds:0023:8c897bf0=00084402
Resetting default scope
LAST_CONTROL_TRANSFER: from 82c6e2f9 to 82c4d81b
STACK_TEXT:
a09b7964 82c6e2f9 badb0d00 00000000 00007b7b nt!KiTrap0E+0x2cf
a09b7a3c 8ad6a0e6 8c897bf0 00000000 00000000 nt!KeWaitForSingleObject+0x27d
WARNING: Stack unwind information not available. Following frames may be wrong.
a09b7a6c 8ad6a072 00000000 ffffffff a09b7b9c NIPALK+0x120e6
a09b7a80 8ad72898 ffffffff a09b7b9c 854dc430 NIPALK+0x12072
a09b7ba0 8ad5bdd1 854dc430 85abce18 8adb77dc NIPALK+0x1a898
a09b7bc0 8ad73c65 8ad68e6b 00000000 86195450 NIPALK+0x3dd1
a09b7bd4 8ad68ea9 00000002 8adb7840 a09b7bf0 NIPALK+0x1bc65
a09b7be4 8ad5aeea 00000002 a09b7c08 82c434ac NIPALK+0x10ea9
a09b7bf0 82c434ac 86195450 85abce18 87946a08 NIPALK+0x2eea
a09b7c08 82e63380 8541dc58 879469f0 00000001 nt!IofCallDriver+0x63
a09b7c48 82e29fae 854dc430 87946a08 00000001 nt!IopCloseFile+0x2f3
a09b7c94 82e4cc42 854dc430 9f82b540 854f90e8 nt!ObpDecrementHandleCount+0x139
a09b7cdc 82e4e442 9f82b540 9f9001a0 854dc430 nt!ObpCloseHandleTableEntry+0x203
a09b7d0c 82e4e5ba 854dc430 854f9001 007ffd60 nt!ObpCloseHandle+0x7f
a09b7d28 82c4a43a 000000d0 007ffd64 771c6344 nt!NtClose+0x4e
a09b7d28 771c6344 000000d0 007ffd64 771c6344 nt!KiFastCallEntry+0x12a
007ffd64 00000000 00000000 00000000 00000000 0x771c6344
STACK_COMMAND: kb
FOLLOWUP_IP:
NIPALK+120e6
8ad6a0e6 ?? ???
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: NIPALK+120e6
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: NIPALK
IMAGE_NAME: NIPALK.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 3ec01041
FAILURE_BUCKET_ID: 0xA_NIPALK+120e6
BUCKET_ID: OLD_IMAGE_NIPALK.sys
Followup: MachineOwner