Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\FUBAR-RC1-Desktop\Downloads\crash dump\Mini051609-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*[URL="http://msdl.microsoft.com/download/symbols"]Symbol information[/URL]
Executable search path is:
Windows Vista Kernel Version 6000 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6000.16830.x86fre.vista_gdr.090302-1506
Machine Name:
Kernel base = 0x82000000 PsLoadedModuleList = 0x82108ad0
Debug session time: Fri May 15 17:31:55.604 2009 (GMT-4)
System Uptime: 0 days 2:01:41.087
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {16, 1b, 0, 82067b45}
Unable to load image \SystemRoot\system32\DRIVERS\LPCFilter.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for LPCFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for LPCFilter.sys
Probably caused by : LPCFilter.sys ( LPCFilter+102e )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000016, memory referenced
Arg2: 0000001b, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82067b45, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from 821275a0
Unable to read MiSystemVaType memory at 821086a0
00000016
CURRENT_IRQL: 1b
FAULTING_IP:
nt!IoAcquireRemoveLockEx+c8
82067b45 80781601 cmp byte ptr [eax+16h],1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: cfmain.exe
TRAP_FRAME: 8ddd6a38 -- (.trap 0xffffffff8ddd6a38)
ErrCode = 00000000
eax=00000000 ebx=00000000 ecx=821283c0 edx=00000000 esi=84877a7c edi=84877a8c
eip=82067b45 esp=8ddd6aac ebp=8ddd6ab8 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!IoAcquireRemoveLockEx+0xc8:
82067b45 80781601 cmp byte ptr [eax+16h],1 ds:0023:00000016=??
Resetting default scope
LAST_CONTROL_TRANSFER: from 82067b45 to 82049354
STACK_TEXT:
8ddd6a38 82067b45 badb0d00 00000000 8ddd6a64 nt!KiTrap0E+0x2ac
8ddd6ab8 8041f02e 84877a00 84abc678 804202d8 nt!IoAcquireRemoveLockEx+0xc8
WARNING: Stack unwind information not available. Following frames may be wrong.
8ddd6ae0 82067a20 848779b0 84abc678 8410dfa4 LPCFilter+0x102e
8ddd6af8 821ff78b 60427882 b150ec00 000003d6 nt!IofCallDriver+0x63
8ddd6b34 8220060a 83d6bc18 00000009 00000001 nt!IopQueryXxxInformation+0x17e
8ddd6b94 82219f12 83d6bc18 00000000 60427858 nt!IopQueryNameInternal+0x1d7
8ddd6bb4 8220d462 83d6bc18 8366b100 60427858 nt!IopQueryName+0x1b
8ddd6c58 822072de 83d6bc18 60427858 000003fe nt!ObpQueryNameString+0xd6
8ddd6d28 8204607a 0000085c 00000001 60427858 nt!NtQueryObject+0x213
8ddd6d28 775f0f34 0000085c 00000001 60427858 nt!KiFastCallEntry+0x12a
00299cf8 00000000 00000000 00000000 00000000 0x775f0f34
STACK_COMMAND: kb
FOLLOWUP_IP:
LPCFilter+102e
8041f02e ?? ???
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: LPCFilter+102e
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: LPCFilter
IMAGE_NAME: LPCFilter.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 44b83984
FAILURE_BUCKET_ID: 0xA_LPCFilter+102e
BUCKET_ID: 0xA_LPCFilter+102e
Followup: MachineOwner
---------
0: kd> lmvm LPCFilter
start end module name
8041e000 80428000 LPCFilter T (no symbols)
Loaded symbol image file: LPCFilter.sys
Image path: \SystemRoot\system32\DRIVERS\LPCFilter.sys
Image name: LPCFilter.sys
Timestamp: Fri Jul 14 20:40:36 2006 (44B83984)
CheckSum: 00012453
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4