Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\MachineDebugging\MEMORY.DMP] Kernel Summary Dump File: Only kernel address space is available Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols Executable search path is: Windows 7 Kernel Version 7601 (Service Pack 1) UP Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7601.17790.amd64fre.win7sp1_gdr.120305-1505 Machine Name: Kernel base = 0xfffff800`0285d000 PsLoadedModuleList = 0xfffff800`02aa1650 Debug session time: Mon Apr 23 20:48:46.800 2012 (GMT-4) System Uptime: 0 days 0:48:38.608 Loading Kernel Symbols ............................................................... ................................................................ .............................. Loading User Symbols PEB is paged out (Peb.Ldr = 000007ff`fffdd018). Type ".hh dbgerr001" for details Loading unloaded module list ..... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 1A, {41287, 0, 0, 0} PEB is paged out (Peb.Ldr = 000007ff`fffdd018). Type ".hh dbgerr001" for details PEB is paged out (Peb.Ldr = 000007ff`fffdd018). Type ".hh dbgerr001" for details Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+45a35 ) Followup: MachineOwner --------- ----- 64 bit Kernel Summary Dump Analysis DUMP_HEADER64: MajorVersion 0000000f MinorVersion 00001db1 KdSecondaryVersion 00000000 DirectoryTableBase 00000000`200ea000 PfnDataBase fffffa80`00000000 PsLoadedModuleList fffff800`02aa1650 PsActiveProcessHead fffff800`02a83350 MachineImageType 00008664 NumberProcessors 00000001 BugCheckCode 0000001a BugCheckParameter1 00000000`00041287 BugCheckParameter2 00000000`00000000 BugCheckParameter3 00000000`00000000 BugCheckParameter4 00000000`00000000 KdDebuggerDataBlock fffff800`02a4d0a0 SecondaryDataState 00000000 ProductType 00000001 SuiteMask 00000110 SUMMARY_DUMP64: DumpOptions 504d4453 HeaderSize 0000f000 BitmapSize 0005fff0 Pages 0001554a Bitmap.SizeOfBitMap 0005fff0 KiProcessorBlock at fffff800`02b0ba40 1 KiProcessorBlock entries: fffff800`02a4ee80 Windows 7 Kernel Version 7601 (Service Pack 1) UP Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7601.17790.amd64fre.win7sp1_gdr.120305-1505 Machine Name: Kernel base = 0xfffff800`0285d000 PsLoadedModuleList = 0xfffff800`02aa1650 Debug session time: Mon Apr 23 20:48:46.800 2012 (GMT-4) System Uptime: 0 days 0:48:38.608 start end module name fffff800`00ba3000 fffff800`00bad000 kdcom Sat Feb 05 11:52:49 2011 (4D4D8061) fffff800`02814000 fffff800`0285d000 hal Sat Nov 20 08:00:25 2010 (4CE7C669) fffff800`0285d000 fffff800`02e45000 nt Mon Mar 05 22:58:13 2012 (4F558B55) fffff880`00c00000 fffff880`00c3c000 vmbus Sat Nov 20 04:57:29 2010 (4CE79B89) fffff880`00c3c000 fffff880`00c49000 mcupdate_AuthenticAMD Mon Jul 13 21:29:09 2009 (4A5BDF65) fffff880`00c49000 fffff880`00c5d000 PSHED Mon Jul 13 21:32:23 2009 (4A5BE027) fffff880`00c5d000 fffff880`00cbb000 CLFS Mon Jul 13 19:19:57 2009 (4A5BC11D) fffff880`00cbb000 fffff880`00d7b000 CI Sat Nov 20 08:12:36 2010 (4CE7C944) fffff880`00d7b000 fffff880`00dd7000 volmgrx unavailable (FFFFFFFE) fffff880`00e00000 fffff880`00e33000 pci Sat Nov 20 04:19:11 2010 (4CE7928F) fffff880`00e33000 fffff880`00e40000 vdrvroot Mon Jul 13 20:01:31 2009 (4A5BCADB) fffff880`00e40000 fffff880`00e55000 partmgr Sat Nov 20 04:20:00 2010 (4CE792C0) fffff880`00e55000 fffff880`00e5e000 compbatt Mon Jul 13 19:31:02 2009 (4A5BC3B6) fffff880`00e5e000 fffff880`00e6a000 BATTC Mon Jul 13 19:31:01 2009 (4A5BC3B5) fffff880`00e6a000 fffff880`00e7f000 volmgr Sat Nov 20 04:19:28 2010 (4CE792A0) fffff880`00e7f000 fffff880`00e87000 intelide Mon Jul 13 19:19:48 2009 (4A5BC114) fffff880`00e87000 fffff880`00e97000 PCIIDEX Mon Jul 13 19:19:48 2009 (4A5BC114) fffff880`00e97000 fffff880`00eb1000 mountmgr Sat Nov 20 04:19:21 2010 (4CE79299) fffff880`00eb1000 fffff880`00ec5000 winhv Sat Nov 20 04:20:02 2010 (4CE792C2) fffff880`00ec5000 fffff880`00f69000 Wdf01000 Mon Jul 13 19:22:07 2009 (4A5BC19F) fffff880`00f69000 fffff880`00f78000 WDFLDR Mon Jul 13 19:19:54 2009 (4A5BC11A) fffff880`00f78000 fffff880`00fcf000 ACPI Sat Nov 20 04:19:16 2010 (4CE79294) fffff880`00fcf000 fffff880`00fd8000 WMILIB Mon Jul 13 19:19:51 2009 (4A5BC117) fffff880`00fd8000 fffff880`00fe2000 msisadrv Mon Jul 13 19:19:26 2009 (4A5BC0FE) fffff880`00fe2000 fffff880`00feb000 atapi Mon Jul 13 19:19:47 2009 (4A5BC113) fffff880`01000000 fffff880`0102a000 VBoxGuest Tue Apr 03 08:31:52 2012 (4F7AEDB8) fffff880`0102a000 fffff880`0105b000 MpFilter Wed Apr 06 16:07:29 2011 (4D9CC801) fffff880`0105b000 fffff880`0107d000 tdx Sat Nov 20 04:21:54 2010 (4CE79332) fffff880`01081000 fffff880`010ab000 ataport Sat Nov 20 04:19:15 2010 (4CE79293) fffff880`010ab000 fffff880`010b6000 amdxata Fri Mar 19 12:18:18 2010 (4BA3A3CA) fffff880`010b6000 fffff880`01102000 fltmgr Sat Nov 20 04:19:24 2010 (4CE7929C) fffff880`01102000 fffff880`01116000 fileinfo Mon Jul 13 19:34:25 2009 (4A5BC481) fffff880`01116000 fffff880`01174000 msrpc Sat Nov 20 04:21:56 2010 (4CE79334) fffff880`01174000 fffff880`011e6000 cng Wed Nov 16 23:23:17 2011 (4EC48C35) fffff880`01200000 fffff880`0120a000 Fs_Rec Wed Feb 29 22:41:06 2012 (4F4EEFD2) fffff880`01229000 fffff880`013cc000 Ntfs Thu Mar 10 22:39:39 2011 (4D79997B) fffff880`013cc000 fffff880`013e7000 ksecdd Wed Nov 16 22:48:13 2011 (4EC483FD) fffff880`013e7000 fffff880`013f8000 pcw Mon Jul 13 19:19:27 2009 (4A5BC0FF) fffff880`01400000 fffff880`01460000 NETIO Sat Nov 20 04:23:13 2010 (4CE79381) fffff880`01460000 fffff880`0148b000 ksecpkg Wed Nov 16 23:23:44 2011 (4EC48C50) fffff880`0148b000 fffff880`014b5000 cdrom Sat Nov 20 04:19:20 2010 (4CE79298) fffff880`014b5000 fffff880`014da000 VIDEOPRT Mon Jul 13 19:38:51 2009 (4A5BC58B) fffff880`014da000 fffff880`014e3000 rdprefmp Mon Jul 13 20:16:35 2009 (4A5BCE63) fffff880`014e4000 fffff880`015d7000 ndis Sat Nov 20 04:23:30 2010 (4CE79392) fffff880`015d7000 fffff880`015e2000 Msfs Mon Jul 13 19:19:47 2009 (4A5BC113) fffff880`015e2000 fffff880`015f3000 Npfs Mon Jul 13 19:19:48 2009 (4A5BC114) fffff880`015f3000 fffff880`01600000 TDI Sat Nov 20 04:22:06 2010 (4CE7933E) fffff880`01600000 fffff880`01630000 CLASSPNP Sat Nov 20 04:19:23 2010 (4CE7929B) fffff880`01666000 fffff880`0166f000 Null Mon Jul 13 19:19:37 2009 (4A5BC109) fffff880`0166f000 fffff880`01676000 Beep Mon Jul 13 20:00:13 2009 (4A5BCA8D) fffff880`01676000 fffff880`01684000 vga Mon Jul 13 19:38:47 2009 (4A5BC587) fffff880`01684000 fffff880`0168d000 rdpencdd Mon Jul 13 20:16:34 2009 (4A5BCE62) fffff880`0168d000 fffff880`01891000 tcpip Wed Sep 28 23:43:04 2011 (4E83E948) fffff880`01891000 fffff880`018db000 fwpkclnt Sat Nov 20 04:21:37 2010 (4CE79321) fffff880`018db000 fffff880`018eb000 vmstorfl Sat Nov 20 04:57:30 2010 (4CE79B8A) fffff880`018eb000 fffff880`01937000 volsnap Sat Nov 20 04:20:08 2010 (4CE792C8) fffff880`01937000 fffff880`0193f000 spldr Mon May 11 12:56:27 2009 (4A0858BB) fffff880`0193f000 fffff880`01979000 rdyboost Sat Nov 20 04:43:10 2010 (4CE7982E) fffff880`01979000 fffff880`0198b000 mup Mon Jul 13 19:23:45 2009 (4A5BC201) fffff880`0198b000 fffff880`01994000 hwpolicy Sat Nov 20 04:18:54 2010 (4CE7927E) fffff880`01994000 fffff880`019ce000 fvevol Sat Nov 20 04:24:06 2010 (4CE793B6) fffff880`019ce000 fffff880`019e4000 disk Mon Jul 13 19:19:57 2009 (4A5BC11D) fffff880`019e4000 fffff880`019f4000 watchdog Mon Jul 13 19:37:35 2009 (4A5BC53F) fffff880`019f4000 fffff880`019fd000 RDPCDD Mon Jul 13 20:16:34 2009 (4A5BCE62) fffff880`01e00000 fffff880`01e19000 HIDCLASS Sat Nov 20 05:43:49 2010 (4CE7A665) fffff880`01e19000 fffff880`01e21080 HIDPARSE Mon Jul 13 20:06:17 2009 (4A5BCBF9) fffff880`01e22000 fffff880`01e45000 luafv Mon Jul 13 19:26:13 2009 (4A5BC295) fffff880`01e45000 fffff880`01e5a000 lltdio Mon Jul 13 20:08:50 2009 (4A5BCC92) fffff880`01e5a000 fffff880`01e72000 rspndr Mon Jul 13 20:08:50 2009 (4A5BCC92) fffff880`01edf000 fffff880`01f5a000 btwavdt Tue Aug 25 16:35:17 2009 (4A944B05) fffff880`01f5a000 fffff880`01fe0000 btwaudio Tue Aug 25 16:36:15 2009 (4A944B3F) fffff880`01fe0000 fffff880`01fec000 btwl2cap Fri Apr 03 20:28:45 2009 (49D6A9BD) fffff880`01fec000 fffff880`01fef880 btwrchid Tue Aug 25 16:36:32 2009 (4A944B50) fffff880`02823000 fffff880`028ec000 HTTP Sat Nov 20 04:24:30 2010 (4CE793CE) fffff880`028ec000 fffff880`0290a000 bowser Tue Feb 22 23:55:04 2011 (4D649328) fffff880`0290a000 fffff880`02922000 mpsdrv Mon Jul 13 20:08:25 2009 (4A5BCC79) fffff880`02922000 fffff880`0294f000 mrxsmb Tue Apr 26 22:40:38 2011 (4DB78226) fffff880`0294f000 fffff880`0299d000 mrxsmb10 Fri Jul 08 22:46:28 2011 (4E17C104) fffff880`0299d000 fffff880`029c1000 mrxsmb20 Tue Apr 26 22:39:37 2011 (4DB781E9) fffff880`029c1000 fffff880`029d1000 MpNWMon Wed Apr 06 16:07:23 2011 (4D9CC7FB) fffff880`02c00000 fffff880`02c4e000 VBoxSF Tue Apr 03 08:31:58 2012 (4F7AEDBE) fffff880`02c4e000 fffff880`02c69000 wanarp Sat Nov 20 05:52:36 2010 (4CE7A874) fffff880`02c69000 fffff880`02c7d000 termdd Sat Nov 20 06:03:40 2010 (4CE7AB0C) fffff880`02c7d000 fffff880`02cac000 VBoxVideo Tue Apr 03 08:31:52 2012 (4F7AEDB8) fffff880`02cc5000 fffff880`02d4e000 afd Tue Dec 27 22:59:20 2011 (4EFA9418) fffff880`02d4e000 fffff880`02d93000 netbt Sat Nov 20 04:23:18 2010 (4CE79386) fffff880`02d93000 fffff880`02d9c000 wfplwf Mon Jul 13 20:09:26 2009 (4A5BCCB6) fffff880`02d9c000 fffff880`02dc2000 pacer Sat Nov 20 05:52:18 2010 (4CE7A862) fffff880`02dc2000 fffff880`02dd1000 netbios Mon Jul 13 20:09:26 2009 (4A5BCCB6) fffff880`02dd1000 fffff880`02df4980 E1G6032E Wed May 28 19:14:51 2008 (483DE76B) fffff880`03800000 fffff880`03869000 srv2 Thu Apr 28 23:05:46 2011 (4DBA2B0A) fffff880`038b2000 fffff880`03958000 peauth Mon Jul 13 21:01:19 2009 (4A5BD8DF) fffff880`03958000 fffff880`03963000 secdrv Wed Sep 13 09:18:38 2006 (4508052E) fffff880`03963000 fffff880`03994000 srvnet Thu Apr 28 23:05:35 2011 (4DBA2AFF) fffff880`03994000 fffff880`039a6000 tcpipreg Sat Nov 20 05:51:48 2010 (4CE7A844) fffff880`03a00000 fffff880`03a1e000 dfsc Sat Nov 20 04:26:31 2010 (4CE79447) fffff880`03a1e000 fffff880`03a2f000 blbdrive Mon Jul 13 19:35:59 2009 (4A5BC4DF) fffff880`03a2f000 fffff880`03a55000 tunnel Sat Nov 20 05:51:50 2010 (4CE7A846) fffff880`03a55000 fffff880`03a73000 i8042prt Mon Jul 13 19:19:57 2009 (4A5BC11D) fffff880`03a73000 fffff880`03a82000 kbdclass Mon Jul 13 19:19:50 2009 (4A5BC116) fffff880`03a82000 fffff880`03a8f000 fdc Mon Jul 13 20:00:54 2009 (4A5BCAB6) fffff880`03a8f000 fffff880`03ab3000 VBoxMouse Tue Apr 03 08:31:57 2012 (4F7AEDBD) fffff880`03ab3000 fffff880`03ac2000 mouclass Mon Jul 13 19:19:50 2009 (4A5BC116) fffff880`03ac2000 fffff880`03adf000 parport Mon Jul 13 20:00:40 2009 (4A5BCAA8) fffff880`03adf000 fffff880`03aec000 GEARAspiWDM Mon May 18 08:17:04 2009 (4A1151C0) fffff880`03aef000 fffff880`03b40000 rdbss Sat Nov 20 04:27:51 2010 (4CE79497) fffff880`03b40000 fffff880`03b4c000 nsiproxy Mon Jul 13 19:21:02 2009 (4A5BC15E) fffff880`03b4c000 fffff880`03b57000 mssmbios Mon Jul 13 19:31:10 2009 (4A5BC3BE) fffff880`03b57000 fffff880`03b66000 discache Mon Jul 13 19:37:18 2009 (4A5BC52E) fffff880`03b66000 fffff880`03be9000 csc Sat Nov 20 04:27:12 2010 (4CE79470) fffff880`03e00000 fffff880`03e2c000 rfcomm Mon Jul 13 20:06:56 2009 (4A5BCC20) fffff880`03e2c000 fffff880`03e3c000 BthEnum Mon Jul 13 20:06:52 2009 (4A5BCC1C) fffff880`03e3c000 fffff880`03e5c000 bthpan Mon Jul 13 20:07:00 2009 (4A5BCC24) fffff880`03e71000 fffff880`03ecb000 usbhub Thu Mar 24 23:29:25 2011 (4D8C0C15) fffff880`03ecb000 fffff880`03ee0000 NDProxy Sat Nov 20 05:52:20 2010 (4CE7A864) fffff880`03ee0000 fffff880`03eee000 crashdmp Mon Jul 13 20:01:01 2009 (4A5BCABD) fffff880`03eee000 fffff880`03efa000 dump_dumpata Mon Jul 13 19:19:47 2009 (4A5BC113) fffff880`03efa000 fffff880`03f03000 dump_atapi Mon Jul 13 19:19:47 2009 (4A5BC113) fffff880`03f03000 fffff880`03f16000 dump_dumpfve Mon Jul 13 19:21:51 2009 (4A5BC18F) fffff880`03f16000 fffff880`03f27000 btusbflt Thu Apr 08 21:11:36 2010 (4BBE7EC8) fffff880`03f27000 fffff880`03f28f00 USBD Thu Mar 24 23:28:59 2011 (4D8C0BFB) fffff880`03f29000 fffff880`03f35000 Dxapi Mon Jul 13 19:38:28 2009 (4A5BC574) fffff880`03f35000 fffff880`03f4d000 BTHUSB Wed Apr 27 23:54:56 2011 (4DB8E510) fffff880`03f4d000 fffff880`03fd9000 bthport Wed Apr 27 23:55:07 2011 (4DB8E51B) fffff880`03fd9000 fffff880`03fe7000 monitor Mon Jul 13 19:38:52 2009 (4A5BC58C) fffff880`04000000 fffff880`04022000 drmk Mon Jul 13 21:01:25 2009 (4A5BD8E5) fffff880`04064000 fffff880`043b6d00 RTKVAC64 Thu Jun 18 15:37:20 2009 (4A3A9770) fffff880`043b7000 fffff880`043f4000 portcls Mon Jul 13 20:06:27 2009 (4A5BCC03) fffff880`04400000 fffff880`0442f000 ndiswan Sat Nov 20 05:52:32 2010 (4CE7A870) fffff880`0442f000 fffff880`0444a000 raspppoe Mon Jul 13 20:10:17 2009 (4A5BCCE9) fffff880`0444a000 fffff880`0446b000 raspptp Sat Nov 20 05:52:31 2010 (4CE7A86F) fffff880`0446b000 fffff880`04485000 rassstp Mon Jul 13 20:10:25 2009 (4A5BCCF1) fffff880`04485000 fffff880`04490000 rdpbus Mon Jul 13 20:17:46 2009 (4A5BCEAA) fffff880`04490000 fffff880`04491480 swenum Mon Jul 13 20:00:18 2009 (4A5BCA92) fffff880`04492000 fffff880`044a4000 umbus Sat Nov 20 05:44:37 2010 (4CE7A695) fffff880`044a4000 fffff880`044af000 flpydisk Mon Jul 13 20:00:54 2009 (4A5BCAB6) fffff880`044c9000 fffff880`0450c000 ks Sat Nov 20 05:33:23 2010 (4CE7A3F3) fffff880`0450c000 fffff880`04511200 ksthunk Mon Jul 13 20:00:19 2009 (4A5BCA93) fffff880`04512000 fffff880`0451d000 usbohci Thu Mar 24 23:29:03 2011 (4D8C0BFF) fffff880`0451d000 fffff880`04573000 USBPORT Thu Mar 24 23:29:12 2011 (4D8C0C08) fffff880`04573000 fffff880`04584000 usbehci Thu Mar 24 23:29:04 2011 (4D8C0C00) fffff880`04584000 fffff880`04588500 CmBatt Mon Jul 13 19:31:03 2009 (4A5BC3B7) fffff880`04589000 fffff880`045a0000 amdk8 Mon Jul 13 19:19:25 2009 (4A5BC0FD) fffff880`045a0000 fffff880`045b0000 CompositeBus Sat Nov 20 05:33:17 2010 (4CE7A3ED) fffff880`045b0000 fffff880`045c6000 AgileVpn Mon Jul 13 20:10:24 2009 (4A5BCCF0) fffff880`045c6000 fffff880`045ea000 rasl2tp Sat Nov 20 05:52:34 2010 (4CE7A872) fffff880`045ea000 fffff880`045f6000 ndistapi Mon Jul 13 20:10:00 2009 (4A5BCCD8) fffff880`04a70000 fffff880`04b08000 srv Thu Apr 28 23:06:06 2011 (4DBA2B1E) fffff880`04b08000 fffff880`04b20000 NisDrvWFP Wed Apr 06 16:08:53 2011 (4D9CC855) fffff880`04b20000 fffff880`04b4e000 rdpdr Sat Nov 20 06:06:41 2010 (4CE7ABC1) fffff880`04b4e000 fffff880`04b59000 tdtcp Thu Feb 16 23:57:32 2012 (4F3DDE3C) fffff880`04b59000 fffff880`04b68000 tssecsrv Sat Nov 20 06:04:09 2010 (4CE7AB29) fffff880`04b68000 fffff880`04ba1000 RDPWD Thu Feb 16 23:58:23 2012 (4F3DDE6F) fffff880`05b27000 fffff880`05b32000 asyncmac Mon Jul 13 20:10:13 2009 (4A5BCCE5) fffff960`00070000 fffff960`00385000 win32k Thu Feb 02 23:34:05 2012 (4F2B63BD) fffff960`00440000 fffff960`0045e000 dxg Mon Jul 13 19:38:28 2009 (4A5BC574) fffff960`007e0000 fffff960`007ea000 TSDDD Mon Jul 13 20:16:34 2009 (4A5BCE62) fffff960`008f0000 fffff960`0090e000 VBoxDisp Tue Apr 03 08:31:57 2012 (4F7AEDBD) Unloaded modules: fffff880`05ab6000 fffff880`05b27000 spsys.sys Timestamp: unavailable (00000000) Checksum: 00000000 fffff880`01630000 fffff880`0163e000 crashdmp.sys Timestamp: unavailable (00000000) Checksum: 00000000 fffff880`0163e000 fffff880`0164a000 dump_ataport.sys Timestamp: unavailable (00000000) Checksum: 00000000 fffff880`0164a000 fffff880`01653000 dump_atapi.sys Timestamp: unavailable (00000000) Checksum: 00000000 fffff880`01653000 fffff880`01666000 dump_dumpfve.sys Timestamp: unavailable (00000000) Checksum: 00000000 ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 1A, {41287, 0, 0, 0} PEB is paged out (Peb.Ldr = 000007ff`fffdd018). Type ".hh dbgerr001" for details PEB is paged out (Peb.Ldr = 000007ff`fffdd018). Type ".hh dbgerr001" for details Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+45a35 ) Followup: MachineOwner --------- Finished dump check