Dump:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {8e9daba8, 1b, 1, 8207ff57}
Probably caused by : fileinfo.sys ( fileinfo!FIStreamQueueQuery+a0 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 8e9daba8, memory referenced
Arg2: 0000001b, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 8207ff57, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 8217f868
Unable to read MiSystemVaType memory at 8215f420
8e9daba8
CURRENT_IRQL: 1b
FAULTING_IP:
nt!KiAttemptFastInsertQueue+8e
8207ff57 8939 mov dword ptr [ecx],edi
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: McSACore.exe
TRAP_FRAME: c17dba4c -- (.trap 0xffffffffc17dba4c)
ErrCode = 00000000
eax=00000000 ebx=0000000e ecx=0000000f edx=00000000 esi=84de1d78 edi=b2e40000
eip=8226dab3 esp=c17dbac0 ebp=c17dbb00 iopl=0 nv up ei ng nz ac pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010297
nt!CcMapData+0xaf:
8226dab3 8a17 mov dl,byte ptr [edi] ds:0023:b2e40000=??
Resetting default scope
LAST_CONTROL_TRANSFER: from 8207ff57 to 820a2d24
STACK_TEXT:
c17db694 8207ff57 badb0d00 000a0084 00000011 nt!KiTrap0E+0x2ac
c17db720 8207fec0 00000000 00000000 c17db748 nt!KiAttemptFastInsertQueue+0x8e
c17db730 8207fe7a 8214a13c af62d554 00000000 nt!KeInsertQueue+0x14
c17db748 805ad2b1 af62d554 00000001 af62d550 nt!ExQueueWorkItem+0x43
c17db768 805ad44c af62d550 00000001 c17db7f8 fltmgr!FltpQueueThrottledWorkItem+0x51
c17db784 805dc76c af62d550 8624b750 805dc314 fltmgr!FltQueueGenericWorkItem+0x80
c17db7ac 805d68d7 c35984c4 af62d550 8624b8ac fileinfo!FIStreamQueueQuery+0xa0
c17db80c 805a5809 84e17630 c17db82c c17db84c fileinfo!FIPreReadWriteCallback+0x14f
c17db868 805a7ff8 c17db8b0 00000000 c17db8b0 fltmgr!FltpPerformPreCallbacks+0x2e5
c17db87c 805a88f7 c17db8b0 00000000 86158a38 fltmgr!FltpPassThroughInternal+0x32
c17db898 805a8d53 c17db801 86158a38 84a70dd0 fltmgr!FltpPassThrough+0x1a3
c17db8c8 82103fd3 86158a38 84a03520 00000000 fltmgr!FltpDispatch+0xb1
c17db8e0 8208ff2e 84de1d78 84a70d84 84a70d50 nt!IofCallDriver+0x63
c17db8fc 820cccb1 00000043 84de1d78 84a70d90 nt!IoPageRead+0x172
c17db9b8 820ee093 b2e40000 c35a8800 00000000 nt!MiDispatchFault+0xd18
c17dba34 820a2b54 00000000 b2e40000 00000000 nt!MmAccessFault+0x10ac
c17dba34 8226dab3 00000000 b2e40000 00000000 nt!KiTrap0E+0xdc
c17dbb00 82c93987 84e52238 c17dbb38 00001000 nt!CcMapData+0xaf
c17dbb28 82c9512c 8486e858 c1c34998 00000000 Ntfs!NtfsMapStream+0x4a
c17dbb58 82c95854 8486e858 0000000c 00000000 Ntfs!ReadIndexBuffer+0xb2
c17dbb88 82c99676 8486e858 c3e50fa0 aadf9ed8 Ntfs!FindFirstIndexEntry+0x1b9
c17dbbd4 82c997e4 8486e858 c1c34998 aadf9ed8 Ntfs!NtfsFindIndexEntry+0x48
c17dbc08 82c969a4 8486e858 c1c34998 00000201 Ntfs!NtfsLookupEntry+0xa4
c17dbcec 82c1c2aa 8486e858 84e1f538 8cd4096c Ntfs!NtfsCommonCreate+0x945
c17dbd2c 82101288 8cd40904 00000000 ffffffff Ntfs!NtfsCommonCreateCallout+0x20
c17dbd2c 82101381 8cd40904 00000000 ffffffff nt!KiSwapKernelStackAndExit+0x118
8cd40894 00000000 00000000 00000000 00000000 nt!KiSwitchKernelStackAndCallout+0x31
STACK_COMMAND: kb
FOLLOWUP_IP:
fileinfo!FIStreamQueueQuery+a0
805dc76c 8bf8 mov edi,eax
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: fileinfo!FIStreamQueueQuery+a0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: fileinfo
IMAGE_NAME: fileinfo.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 47918be3
FAILURE_BUCKET_ID: 0xA_fileinfo!FIStreamQueueQuery+a0
BUCKET_ID: 0xA_fileinfo!FIStreamQueueQuery+a0
Followup: MachineOwner
---------
A McAffee add-on crashed your system. Uninstall it. Then schedule a chkdsk scan. Also, update all your drivers. Install SP2 too.