Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [E:\Temp\Rar$DI02.914\111610-20576-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02e63000 PsLoadedModuleList = 0xfffff800`030a0e50
Debug session time: Tue Nov 16 13:28:23.038 2010 (UTC - 5:00)
System Uptime: 0 days 2:06:37.287
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 50, {fffff80023006e80, 8, fffff80023006e80, 2}
Unable to load image \SystemRoot\system32\DRIVERS\klif.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for klif.sys
*** ERROR: Module load completed but symbols could not be loaded for klif.sys
Could not read faulting driver name
Probably caused by : klif.sys ( klif+29dc9 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff80023006e80, memory referenced.
Arg2: 0000000000000008, value 0 = read operation, 1 = write operation.
Arg3: fffff80023006e80, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000002, (reserved)
Debugging Details:
------------------
Could not read faulting driver name
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff8000310b0e0
fffff80023006e80
FAULTING_IP:
+68072faf019cde28
fffff800`23006e80 ?? ???
MM_INTERNAL_CODE: 2
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: System
CURRENT_IRQL: 0
TRAP_FRAME: fffff880031cbab0 -- (.trap 0xfffff880031cbab0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa8005250004 rbx=0000000000000000 rcx=fffff8a00e3f5000
rdx=fffffa8005258a81 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80023006e80 rsp=fffff880031cbc48 rbp=fffff800030785f8
r8=fffffa8005258a80 r9=0000000000000050 r10=fffff88002f63b80
r11=fffffa8005d43250 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
fffff800`23006e80 ?? ???
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002f528f2 to fffff80002ed3740
STACK_TEXT:
fffff880`031cb948 fffff800`02f528f2 : 00000000`00000050 fffff800`23006e80 00000000`00000008 fffff880`031cbab0 : nt!KeBugCheckEx
fffff880`031cb950 fffff800`02ed182e : 00000000`00000008 fffff8a0`0e3f5000 fffffa80`08a11b00 fffff880`0108021f : nt! ?? ::FNODOBFM::`string'+0x40ec0
fffff880`031cbab0 fffff800`23006e80 : fffff880`01829dc9 fffffa80`05d43250 fffffa80`05200b60 00000000`20206f49 : nt!KiPageFault+0x16e
fffff880`031cbc48 fffff880`01829dc9 : fffffa80`05d43250 fffffa80`05200b60 00000000`20206f49 00000000`00000000 : 0xfffff800`23006e80
fffff880`031cbc50 fffffa80`05d43250 : fffffa80`05200b60 00000000`20206f49 00000000`00000000 fffffa80`06123cf0 : klif+0x29dc9
fffff880`031cbc58 fffffa80`05200b60 : 00000000`20206f49 00000000`00000000 fffffa80`06123cf0 fffff800`031cfc43 : 0xfffffa80`05d43250
fffff880`031cbc60 00000000`20206f49 : 00000000`00000000 fffffa80`06123cf0 fffff800`031cfc43 00000000`00000000 : 0xfffffa80`05200b60
fffff880`031cbc68 00000000`00000000 : fffffa80`06123cf0 fffff800`031cfc43 00000000`00000000 fffffa80`05aca0d0 : 0x20206f49
STACK_COMMAND: kb
FOLLOWUP_IP:
klif+29dc9
fffff880`01829dc9 ?? ???
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: klif+29dc9
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: klif
IMAGE_NAME: klif.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4afabce0
FAILURE_BUCKET_ID: X64_0x50_klif+29dc9
BUCKET_ID: X64_0x50_klif+29dc9
Followup: MachineOwner
---------