Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp1_Bsod%20Files[1].zip\Windows_NT6_BSOD_jcgriff2\Mini122110-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18267.x86fre.vistasp2_gdr.100608-0458
Machine Name:
Kernel base = 0x81e48000 PsLoadedModuleList = 0x81f5fc70
Debug session time: Tue Dec 21 06:39:22.183 2010 (GMT-5)
System Uptime: 0 days 0:09:14.954
Loading Kernel Symbols
...............................................................
...............................................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D0, {2925985a, 2, 0, 81ec3c77}
Probably caused by : memory_corruption ( nt!MiResolveMappedFileFault+483 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_CORRUPTED_MMPOOL (d0)
Arguments:
Arg1: 2925985a, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 81ec3c77, address which referenced memory
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool. You can also set
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\ProtectNonPagedPool
to a DWORD 1 value and reboot. Then the system will unmap freed nonpaged pool,
preventing drivers (although not DMA-hardware) from corrupting the pool.
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from 81f7f868
Unable to read MiSystemVaType memory at 81f5f420
2925985a
CURRENT_IRQL: 2
FAULTING_IP:
nt!MiResolveMappedFileFault+483
81ec3c77 394d0c cmp dword ptr [ebp+0Ch],ecx
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xD0
PROCESS_NAME: MsMpEng.exe
TRAP_FRAME: a9259774 -- (.trap 0xffffffffa9259774)
ErrCode = 00000000
eax=80f623f8 ebx=a6477468 ecx=80000000 edx=00000001 esi=84204830 edi=a9259820
eip=81ec3c77 esp=a92597e8 ebp=a9259864 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!MiResolveMappedFileFault+0x483:
81ec3c77 394d0c cmp dword ptr [ebp+0Ch],ecx ss:0010:a9259870=bcb10000
Resetting default scope
LAST_CONTROL_TRANSFER: from 81ec3c77 to 81e95fd9
STACK_TEXT:
a9259774 81ec3c77 badb0d00 00000001 00000000 nt!KiTrap0E+0x2e1
a9259864 81ec2669 00000000 bcb10000 a87e2680 nt!MiResolveMappedFileFault+0x483
a92598b0 81ebfbb5 00000000 bcb10000 c05e5880 nt!MiResolveProtoPteFault+0x3f4
a9259978 81ee1345 bcb10000 a87e2680 00000000 nt!MiDispatchFault+0x9a2
a92599f0 81f049d7 00000000 bcb10000 00000000 nt!MmAccessFault+0x10c6
a9259a58 8201cc88 bcb10000 00000000 44157723 nt!MmCheckCachedPageState+0x801
a9259ae4 8827ed11 acbd93c0 01ad0000 00004000 nt!CcFastCopyRead+0x1bb
a9259c00 87cecadc a7573ba8 00f3c8fc 00004000 Ntfs!NtfsCopyReadA+0x21a
a9259c34 87ceccab 00000003 00000000 80f3c8f4 fltmgr!FltpPerformFastIoCall+0x22e
a9259c60 87cfeab4 00259c84 87cfe96e 00000000 fltmgr!FltpPassThroughFastIo+0x7d
a9259ca4 82052c64 acbd93c0 a9259ce4 00004000 fltmgr!FltpFastIoRead+0x146
a9259d38 81e92c7a 840b45d0 00000000 00000000 nt!NtReadFile+0x2d0
a9259d38 772e5e74 840b45d0 00000000 00000000 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
043df0d4 00000000 00000000 00000000 00000000 0x772e5e74
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiResolveMappedFileFault+483
81ec3c77 394d0c cmp dword ptr [ebp+0Ch],ecx
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!MiResolveMappedFileFault+483
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4c0e557c
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: 0xD0_nt!MiResolveMappedFileFault+483
BUCKET_ID: 0xD0_nt!MiResolveMappedFileFault+483
Followup: MachineOwner
---------
1: kd> lmtsmn
start end module name
8d3d6000 8d3e3080 1394BUS 1394BUS.SYS Sat Jan 19 00:53:27 2008 (47919057)
87a97000 87add000 acpi acpi.sys Sat Apr 11 00:19:03 2009 (49E01A37)
8d59c000 8d5e4000 afd afd.sys Sat Apr 11 00:47:01 2009 (49E020C5)
8dda3000 8ddaa000 Beep Beep.SYS Sat Jan 19 00:49:10 2008 (47918F56)
80691000 80699000 BOOTVID BOOTVID.dll Sat Jan 19 02:27:15 2008 (4791A653)
a968f000 a96a8000 bowser bowser.sys Sat Jan 19 00:28:26 2008 (47918A7A)
96130000 9613e000 cdd cdd.dll unavailable (00000000)
aaf2a000 aaf40000 cdfs cdfs.sys Sat Jan 19 00:28:02 2008 (47918A62)
87de7000 87dff000 cdrom cdrom.sys Sat Apr 11 00:39:17 2009 (49E01EF5)
806da000 807ba000 CI CI.dll Sat Apr 11 02:25:22 2009 (49E037D2)
8839a000 883bb000 CLASSPNP CLASSPNP.SYS Sat Apr 11 00:39:05 2009 (49E01EE9)
80699000 806da000 CLFS CLFS.SYS Sat Apr 11 00:13:51 2009 (49E018FF)
8ded1000 8dede000 crashdmp crashdmp.sys Sat Apr 11 00:39:12 2009 (49E01EF0)
883bb000 883c4000 crcdisk crcdisk.sys Thu Nov 02 04:52:27 2006 (4549B1CB)
8deba000 8ded1000 dfsc dfsc.sys Sat Apr 11 00:14:12 2009 (49E01914)
88389000 8839a000 disk disk.sys Sat Apr 11 00:39:14 2009 (49E01EF2)
8dd4b000 8dd70000 drmk drmk.sys Sat Jan 19 01:53:02 2008 (47919E4E)
8dede000 8dfb8000 dump_iaStor dump_iaStor.sys Thu Dec 04 15:34:07 2008 (49383EBF)
8dfcf000 8dfd9000 Dxapi Dxapi.sys Sat Jan 19 00:36:12 2008 (47918C4C)
8cf02000 8cfa3000 dxgkrnl dxgkrnl.sys Thu Sep 24 21:27:14 2009 (4ABC1C72)
88362000 88389000 ecache ecache.sys Sat Apr 11 00:40:12 2009 (49E01F2C)
87d1a000 87d2a000 fileinfo fileinfo.sys Sat Jan 19 00:34:27 2008 (47918BE3)
87ce8000 87d1a000 fltmgr fltmgr.sys Sat Apr 11 00:13:59 2009 (49E01907)
8dd93000 8dd9c000 Fs_Rec Fs_Rec.SYS Sat Jan 19 00:27:57 2008 (47918A5D)
880f6000 88111000 fwpkclnt fwpkclnt.sys Sat Apr 11 00:45:42 2009 (49E02076)
81e15000 81e48000 hal halmacpi.dll Sat Apr 11 00:13:13 2009 (49E018D9)
87f72000 87fff000 HDAudBus HDAudBus.sys Sat Apr 11 00:42:41 2009 (49E01FC1)
8d304000 8d3b9000 HSX_CNXT HSX_CNXT.sys Thu May 08 16:04:13 2008 (48235CBD)
8d202000 8d304000 HSX_DP HSX_DP.sys Thu May 08 16:03:14 2008 (48235C82)
87b8d000 87bd9000 HSXHWBS2 HSXHWBS2.sys Thu May 08 16:05:16 2008 (48235CFC)
a9605000 a9672000 HTTP HTTP.sys Sat Feb 20 15:53:31 2010 (4B804BCB)
8d3e4000 8d3f7000 i8042prt i8042prt.sys Sat Jan 19 00:49:17 2008 (47918F5D)
87c0e000 87ce8000 iastor iastor.sys Thu Dec 04 15:34:07 2008 (49383EBF)
8c603000 8cf02000 igdkmd32 igdkmd32.sys Thu Feb 26 14:39:45 2009 (49A6F001)
883e5000 883f4000 intelppm intelppm.sys Sat Jan 19 00:27:20 2008 (47918A38)
883f4000 883ff000 kbdclass kbdclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
80609000 80610000 kdcom kdcom.dll Sat Apr 11 02:25:29 2009 (49E037D9)
807ba000 807e4000 ks ks.sys Sat Apr 11 00:38:47 2009 (49E01ED7)
87d2a000 87d9b000 ksecdd ksecdd.sys Mon Jun 15 08:48:53 2009 (4A364335)
8dff0000 8e000000 lltdio lltdio.sys Sat Jan 19 00:55:03 2008 (479190B7)
8d5e4000 8d5ff000 luafv luafv.sys Sat Jan 19 00:30:35 2008 (47918AFB)
80610000 80680000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Apr 11 02:23:19 2009 (49E03757)
a97cd000 a97d0180 mdmxsdk mdmxsdk.sys Mon Jun 19 17:26:59 2006 (449716A3)
8d3b9000 8d3c6000 modem modem.sys Sat Jan 19 00:57:16 2008 (4791913C)
8dfd9000 8dfe8000 monitor monitor.sys Thu Nov 02 04:54:05 2006 (4549B22D)
88000000 8800b000 mouclass mouclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
87b7d000 87b8d000 mountmgr mountmgr.sys Sat Jan 19 00:49:13 2008 (47918F59)
8dd70000 8dd93000 MpFilter MpFilter.sys Sat Mar 20 00:03:26 2010 (4BA4490E)
a97c4000 a97cce00 MpNWMon MpNWMon.sys Sat Mar 20 00:03:24 2010 (4BA4490C)
a96a8000 a96bd000 mpsdrv mpsdrv.sys Sat Jan 19 00:54:45 2008 (479190A5)
a96bd000 a96de000 mrxdav mrxdav.sys Sat Apr 11 00:14:39 2009 (49E0192F)
a96de000 a96fd000 mrxsmb mrxsmb.sys Tue Feb 23 06:10:12 2010 (4B83B794)
a96fd000 a9736000 mrxsmb10 mrxsmb10.sys Tue Feb 23 06:10:17 2010 (4B83B799)
a9736000 a974e000 mrxsmb20 mrxsmb20.sys Tue Feb 23 06:10:12 2010 (4B83B794)
8dde7000 8ddf2000 Msfs Msfs.SYS Sat Jan 19 00:28:08 2008 (47918A68)
87ae6000 87aee000 msisadrv msisadrv.sys Sat Jan 19 00:32:51 2008 (47918B83)
8d40b000 8d43a000 msiscsi msiscsi.sys Sat Apr 11 00:40:07 2009 (49E01F27)
87f0c000 87f37000 msrpc msrpc.sys Sat Apr 11 00:37:32 2009 (49E01E8C)
8d515000 8d51f000 mssmbios mssmbios.sys Sat Jan 19 00:32:55 2008 (47918B87)
88353000 88362000 mup mup.sys Sat Apr 11 00:14:12 2009 (49E01914)
87e01000 87f0c000 ndis ndis.sys Sat Apr 11 00:45:52 2009 (49E02080)
8d49d000 8d4a8000 ndistapi ndistapi.sys Sat Jan 19 00:56:24 2008 (47919108)
8d4a8000 8d4cb000 ndiswan ndiswan.sys Sat Apr 11 00:46:31 2009 (49E020A7)
8d561000 8d572000 NDProxy NDProxy.SYS Sat Jan 19 00:56:28 2008 (4791910C)
8de53000 8de61000 netbios netbios.sys Sat Jan 19 00:55:45 2008 (479190E1)
8de0b000 8de3d000 netbt netbt.sys Sat Apr 11 00:45:35 2009 (49E0206F)
87f37000 87f72000 NETIO NETIO.SYS Sat Apr 11 00:46:21 2009 (49E0209D)
8ddf2000 8de00000 Npfs Npfs.SYS Sat Apr 11 00:14:01 2009 (49E01909)
8deb0000 8deba000 nsiproxy nsiproxy.sys Sat Jan 19 00:55:50 2008 (479190E6)
81e48000 82201000 nt ntkrpamp.exe Tue Jun 08 10:36:44 2010 (4C0E557C)
88202000 88312000 Ntfs Ntfs.sys Sat Apr 11 00:14:34 2009 (49E0192A)
8dd9c000 8dda3000 Null Null.SYS Sat Jan 19 00:49:12 2008 (47918F58)
8d3c6000 8d3d5300 ohci1394 ohci1394.sys Sat Apr 11 00:43:04 2009 (49E01FD8)
8de3d000 8de53000 pacer pacer.sys Sat Apr 11 00:45:51 2009 (49E0207F)
87b15000 87b24000 partmgr partmgr.sys Sat Apr 11 00:39:19 2009 (49E01EF7)
87aee000 87b15000 pci pci.sys Sat Apr 11 00:19:16 2009 (49E01A44)
aae07000 aaee5000 peauth peauth.sys Mon Oct 23 04:55:32 2006 (453C8384)
8dd1e000 8dd4b000 portcls portcls.sys Sat Apr 11 00:42:48 2009 (49E01FC8)
8d3f7000 8d3fba80 PS2 PS2.sys Mon Dec 12 20:26:59 2005 (439E2363)
80680000 80691000 PSHED PSHED.dll Sat Apr 11 02:25:32 2009 (49E037DC)
8da00000 8da09000 rasacd rasacd.sys Sat Jan 19 00:56:31 2008 (4791910F)
8d486000 8d49d000 rasl2tp rasl2tp.sys Sat Jan 19 00:56:33 2008 (47919111)
8d4cb000 8d4da000 raspppoe raspppoe.sys Sat Apr 11 00:46:30 2009 (49E020A6)
8d4da000 8d4ee000 raspptp raspptp.sys Sat Jan 19 00:56:34 2008 (47919112)
8d4ee000 8d503000 rassstp rassstp.sys Sat Apr 11 00:46:40 2009 (49E020B0)
8de74000 8deb0000 rdbss rdbss.sys Sat Apr 11 00:14:26 2009 (49E01922)
8ddd7000 8dddf000 RDPCDD RDPCDD.sys Sat Jan 19 01:01:08 2008 (47919224)
8dddf000 8dde7000 rdpencdd rdpencdd.sys Sat Jan 19 01:01:09 2008 (47919225)
881c1000 881d4000 rspndr rspndr.sys Sat Jan 19 00:55:03 2008 (479190B7)
8da0b000 8dd1d9c0 RTKVHDA RTKVHDA.sys Tue Nov 02 07:18:52 2010 (4CCFF39C)
87d9b000 87de7000 Rtlh86 Rtlh86.sys Mon Oct 25 06:03:27 2010 (4CC555EF)
aaee5000 aaeef000 secdrv secdrv.SYS Wed Sep 13 09:18:32 2006 (45080528)
8d588000 8d59c000 smb smb.sys Sat Apr 11 00:45:22 2009 (49E02062)
8834b000 88353000 spldr spldr.sys Thu Jun 21 20:29:17 2007 (467B17DD)
88111000 881c1000 spsys spsys.sys Tue Mar 10 13:10:28 2009 (49B69F04)
a9776000 a97c4000 srv srv.sys Mon Sep 06 09:45:36 2010 (4C84F080)
a974e000 a9776000 srv2 srv2.sys Mon Sep 06 09:45:21 2010 (4C84F071)
a9672000 a968f000 srvnet srvnet.sys Mon Sep 06 09:45:18 2010 (4C84F06E)
8d43a000 8d47b000 storport storport.sys Sat Apr 11 00:39:19 2009 (49E01EF7)
8d513000 8d514380 swenum swenum.sys Sat Jan 19 00:49:20 2008 (47918F60)
8800c000 880f6000 tcpip tcpip.sys Wed Jun 16 09:45:41 2010 (4C18D585)
aaeef000 aaefb000 tcpipreg tcpipreg.sys Tue Dec 08 12:26:18 2009 (4B1E8C3A)
8d47b000 8d486000 TDI TDI.SYS Sat Jan 19 00:57:10 2008 (47919136)
8d572000 8d588000 tdx tdx.sys Sat Apr 11 00:45:56 2009 (49E02084)
8d503000 8d513000 termdd termdd.sys Sat Apr 11 00:51:14 2009 (49E021C2)
96110000 96119000 TSDDD TSDDD.dll Sat Jan 19 01:01:09 2008 (47919225)
883dc000 883e5000 tunmp tunmp.sys Sat Jan 19 00:55:40 2008 (479190DC)
883d1000 883dc000 tunnel tunnel.sys Thu Feb 18 06:28:13 2010 (4B7D244D)
8d51f000 8d52c000 umbus umbus.sys Sat Jan 19 00:53:40 2008 (47919064)
8dfcd000 8dfce700 USBD USBD.SYS Sat Jan 19 00:53:17 2008 (4791904D)
881eb000 881fa000 usbehci usbehci.sys Sat Apr 11 00:42:52 2009 (49E01FCC)
8d52c000 8d561000 usbhub usbhub.sys Sat Apr 11 00:43:14 2009 (49E01FE2)
8cfba000 8cff8000 USBPORT USBPORT.SYS Sat Apr 11 00:42:55 2009 (49E01FCF)
8dfb8000 8dfcd000 USBSTOR USBSTOR.SYS Sat Apr 11 00:42:55 2009 (49E01FCF)
8cfaf000 8cfba000 usbuhci usbuhci.sys Sat Jan 19 00:53:20 2008 (47919050)
8ddaa000 8ddb6000 vga vga.sys Sat Jan 19 00:52:06 2008 (47919006)
8ddb6000 8ddd7000 VIDEOPRT VIDEOPRT.SYS Sat Jan 19 00:52:10 2008 (4791900A)
87b24000 87b33000 volmgr volmgr.sys Sat Jan 19 00:49:51 2008 (47918F7F)
87b33000 87b7d000 volmgrx volmgrx.sys Sat Apr 11 00:39:25 2009 (49E01EFD)
88312000 8834b000 volsnap volsnap.sys Sat Apr 11 00:39:37 2009 (49E01F09)
8de61000 8de74000 wanarp wanarp.sys Sat Jan 19 00:56:31 2008 (4791910F)
8cfa3000 8cfaf000 watchdog watchdog.sys Sat Apr 11 00:22:43 2009 (49E01B13)
87a0e000 87a8a000 Wdf01000 Wdf01000.sys Sat Jan 19 00:52:21 2008 (47919015)
87a8a000 87a97000 WDFLDR WDFLDR.SYS Sat Jan 19 00:52:19 2008 (47919013)
95ef0000 960f3000 win32k win32k.sys Mon Oct 18 09:31:09 2010 (4CBC4C1D)
87add000 87ae6000 WMILIB WMILIB.SYS Sat Jan 19 00:53:08 2008 (47919044)
aaefb000 aaf03000 xaudio xaudio.sys Thu Oct 18 18:36:53 2007 (4717E005)