bsod#4

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D5, {fffff9800d8fad60, 0, fffff88005f7312e, 0}

Unable to load image \SystemRoot\system32\drivers\RTKVHD64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for RTKVHD64.sys
*** ERROR: Module load completed but symbols could not be loaded for RTKVHD64.sys

Could not read faulting driver name
Probably caused by : RTKVHD64.sys ( RTKVHD64+ea12e )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_PAGE_FAULT_IN_FREED_SPECIAL_POOL (d5)
Memory was referenced after it was freed.
This cannot be protected by try-except.
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff9800d8fad60, memory referenced
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation
Arg3: fffff88005f7312e, if non-zero, the address which referenced memory.
Arg4: 0000000000000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003d02100
 fffff9800d8fad60

FAULTING_IP:
RTKVHD64+ea12e
fffff880`05f7312e 8b4630          mov     eax,dword ptr [rsi+30h]

MM_INTERNAL_CODE:  0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

BUGCHECK_STR:  0xD5

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff880027a72a0 -- (.trap 0xfffff880027a72a0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff880027a74c8
rdx=fffff880027a7430 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88005f7312e rsp=fffff880027a7430 rbp=0000000000000002
 r8=0000000000000000  r9=fffff88005f7312e r10=0000000000000100
r11=fffff88003164180 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
RTKVHD64+0xea12e:
fffff880`05f7312e 8b4630          mov     eax,dword ptr [rsi+30h] ds:4180:00000000`00000030=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80003a7ea0c to fffff80003ad2d00

STACK_TEXT:
fffff880`027a7138 fffff800`03a7ea0c : 00000000`00000050 fffff980`0d8fad60 00000000`00000000 fffff880`027a72a0 : nt!KeBugCheckEx
fffff880`027a7140 fffff800`03ad0e2e : 00000000`00000000 fffff980`0d8fad60 fffffa80`0718d500 fffff8a0`015ef10e : nt! ?? ::FNODOBFM::`string'+0x4621f
fffff880`027a72a0 fffff880`05f7312e : fffff880`027a74c8 00000000`00000000 fffff8a0`015ef10e fffffa80`06a695d0 : nt!KiPageFault+0x16e
fffff880`027a7430 fffff880`027a74c8 : 00000000`00000000 fffff8a0`015ef10e fffffa80`06a695d0 00000000`00000000 : RTKVHD64+0xea12e
fffff880`027a7438 00000000`00000000 : fffff8a0`015ef10e fffffa80`06a695d0 00000000`00000000 fffff800`00000000 : 0xfffff880`027a74c8


STACK_COMMAND:  kb

FOLLOWUP_IP:
RTKVHD64+ea12e
fffff880`05f7312e 8b4630          mov     eax,dword ptr [rsi+30h]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  RTKVHD64+ea12e

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: RTKVHD64

IMAGE_NAME:  RTKVHD64.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4df745eb

FAILURE_BUCKET_ID:  X64_0xD5_VRF_RTKVHD64+ea12e

BUCKET_ID:  X64_0xD5_VRF_RTKVHD64+ea12e

Followup: MachineOwner
---------