Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Microsoft (R) Windows Debugger Version 10.0.14321.1024 X86
- Copyright (c) Microsoft Corporation. All rights reserved.
- ========================================================================
- =================== Dump File: 072217-9359-01.dmp ====================
- ========================================================================
- Mini Kernel Dump File: Only registers and stack trace are available
- Windows 10 Kernel Version 15063 MP (12 procs) Free x64
- Product: WinNt, suite: TerminalServer SingleUserTS
- Kernel base = 0xfffff802`e6e0a000 PsLoadedModuleList = 0xfffff802`e71565e0
- Debug session time: Sat Jul 22 13:24:35.601 2017 (UTC - 4:00)
- System Uptime: 0 days 0:00:05.333
- BugCheck C4, {2000, fffff8001c2f1e73, 0, 426d6342}
- *** WARNING: Unable to verify timestamp for bcbtums.sys
- *** ERROR: Module load completed but symbols could not be loaded for bcbtums.sys
- Probably caused by : bcbtums.sys ( bcbtums+1e73 )
- Followup: MachineOwner
- DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
- A device driver attempting to corrupt the system has been caught. This is
- because the driver was specified in the registry as being suspect (by the
- administrator) and the kernel has enabled substantial checking of this driver.
- If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
- be among the most commonly seen crashes.
- Arguments:
- Arg1: 0000000000002000, Code Integrity Issue: The caller specified an executable pool type. (Expected: NonPagedPoolNx)
- Arg2: fffff8001c2f1e73, The address in the driver's code where the error was detected.
- Arg3: 0000000000000000, Pool Type.
- Arg4: 00000000426d6342, Pool Tag (if provided).
- Debugging Details:
- DUMP_CLASS: 1
- DUMP_QUALIFIER: 400
- BUILD_VERSION_STRING: 10.0.15063.483 (WinBuild.160101.0800)
- DUMP_TYPE: 2
- DUMP_FILE_ATTRIBUTES: 0x8
- Kernel Generated Triage Dump
- BUGCHECK_STR: 0xc4_2000
- CPU_COUNT: c
- CPU_MHZ: ce4
- CPU_VENDOR: GenuineIntel
- CPU_FAMILY: 6
- CPU_MODEL: 3f
- CPU_STEPPING: 2
- CUSTOMER_CRASH_COUNT: 1
- DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
- PROCESS_NAME: System
- CURRENT_IRQL: 0
- LOCK_ADDRESS: fffff802e716ef80 -- (!locks fffff802e716ef80)
- Resource @ nt!PiEngineLock (0xfffff802e716ef80) Available
- WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.
- WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.
- 1 total locks
- PNP_TRIAGE:
- Lock address : 0xfffff802e716ef80
- Thread Count : 0
- Thread address: 0x0000000000000000
- Thread wait : 0x0
- LAST_CONTROL_TRANSFER: from fffff802e757603f to fffff802e6f764c0
- STACK_TEXT:
- ffff9a01`6868d198 fffff802`e757603f : 00000000`000000c4 00000000`00002000 fffff800`1c2f1e73 00000000`00000000 : nt!KeBugCheckEx
- ffff9a01`6868d1a0 fffff802`e7057d9f : ffff9a01`00000000 fffff802`e756d9ca fffff802`e70c11f0 00000000`00000003 : nt!VerifierBugCheckIfAppropriate+0x6b
- ffff9a01`6868d1e0 fffff802`e756d8b0 : 00000000`426d6342 fffff802`e71483ac fffff800`1c2f1e73 fffff802`e7589035 : nt!VfReportIssueWithOptions+0x103
- ffff9a01`6868d230 fffff802`e756b701 : 00000000`426d6342 ffffc083`3a888a00 00000000`00000000 fffff802`e6e6ad4f : nt!VfCheckPoolType+0x90
- ffff9a01`6868d270 fffff800`1c2f1e73 : fffff800`1c315120 ffffc083`3a888a00 ffffc083`00000000 ffff9a01`6868d2d0 : nt!VerifierExAllocatePoolEx+0x21
- ffff9a01`6868d2c0 fffff800`1c315120 : ffffc083`3a888a00 ffffc083`00000000 ffff9a01`6868d2d0 fffff800`1c31cc38 : bcbtums+0x1e73
- ffff9a01`6868d2c8 ffffc083`3a888a00 : ffffc083`00000000 ffff9a01`6868d2d0 fffff800`1c31cc38 fffff800`1c31f073 : bcbtums+0x25120
- ffff9a01`6868d2d0 ffffc083`00000000 : ffff9a01`6868d2d0 fffff800`1c31cc38 fffff800`1c31f073 00000000`001c001a : 0xffffc083`3a888a00
- ffff9a01`6868d2d8 ffff9a01`6868d2d0 : fffff800`1c31cc38 fffff800`1c31f073 00000000`001c001a fffff800`1c31e3e0 : 0xffffc083`00000000
- ffff9a01`6868d2e0 fffff800`1c31cc38 : fffff800`1c31f073 00000000`001c001a fffff800`1c31e3e0 ffffc083`3a889000 : 0xffff9a01`6868d2d0
- ffff9a01`6868d2e8 fffff800`1c31f073 : 00000000`001c001a fffff800`1c31e3e0 ffffc083`3a889000 ffffffff`8000009c : bcbtums+0x2cc38
- ffff9a01`6868d2f0 00000000`001c001a : fffff800`1c31e3e0 ffffc083`3a889000 ffffffff`8000009c 00000000`00000200 : bcbtums+0x2f073
- ffff9a01`6868d2f8 fffff800`1c31e3e0 : ffffc083`3a889000 ffffffff`8000009c 00000000`00000200 fffff802`e7277026 : 0x1c001a
- ffff9a01`6868d300 ffffc083`3a889000 : ffffffff`8000009c 00000000`00000200 fffff802`e7277026 00000000`00000000 : bcbtums+0x2e3e0
- ffff9a01`6868d308 ffffffff`8000009c : 00000000`00000200 fffff802`e7277026 00000000`00000000 ffff9a01`6868d420 : 0xffffc083`3a889000
- ffff9a01`6868d310 00000000`00000200 : fffff802`e7277026 00000000`00000000 ffff9a01`6868d420 ffffc083`0000000a : 0xffffffff`8000009c
- ffff9a01`6868d318 fffff802`e7277026 : 00000000`00000000 ffff9a01`6868d420 ffffc083`0000000a 00000000`00000010 : 0x200
- ffff9a01`6868d320 fffff802`e73ab18e : 00000000`00000000 00000000`00000000 00000000`00000004 ffff8601`00000004 : nt!IopLoadDriver+0x522
- ffff9a01`6868d500 fffff802`e725e7e0 : ffff9a01`6868da01 00000000`00000008 00000000`00000000 ffffe781`fe89e500 : nt!PipCallDriverAddDeviceQueryRoutine+0x1b6
- ffff9a01`6868d5a0 fffff802`e723f4ea : 00000000`00000000 00000000`00000002 00000000`04000000 ffffc083`3a885210 : nt!PnpCallDriverQueryServiceHelper+0x13c
- ffff9a01`6868d610 fffff802`e724067b : ffffc083`3a885210 ffff9a01`6868d8e0 ffffc083`3a885210 00000000`00000000 : nt!PipCallDriverAddDevice+0x4be
- ffff9a01`6868d7e0 fffff802`e72f142f : ffffc083`3a87de90 fffff802`e6e6d059 00000000`00000000 00000000`00000000 : nt!PipProcessDevNodeTree+0x15f
- ffff9a01`6868da60 fffff802`e6edc8f3 : ffffc001`00000003 00000000`00000000 ffffc083`3a87de90 ffffc083`3a87de90 : nt!PiProcessReenumeration+0xab
- ffff9a01`6868dab0 fffff802`e6e47ca8 : ffffc083`3a3ab7c0 fffff802`e716da20 fffff802`e7202380 ffffc083`39eef828 : nt!PnpDeviceActionWorker+0x1b3
- ffff9a01`6868db80 fffff802`e6ee6ac7 : ffff9a01`66600180 00000000`00000080 ffffc083`36084040 ffffc083`3a3ab7c0 : nt!ExpWorkerThread+0xd8
- ffff9a01`6868dc10 fffff802`e6f7b946 : ffff9a01`66600180 ffffc083`3a3ab7c0 fffff802`e6ee6a80 00000000`00000000 : nt!PspSystemThreadStartup+0x47
- ffff9a01`6868dc60 00000000`00000000 : ffff9a01`6868e000 ffff9a01`68688000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
- STACK_COMMAND: kb
- THREAD_SHA1_HASH_MOD_FUNC: ebe440c4cc2c759bb6d5b20016fd26267350a5a0
- THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 268e1ea25965e22ecccb6ecca75fabbd404541b2
- THREAD_SHA1_HASH_MOD: 2e4bdbbe6e1c48b9a732e7e214b259dc41afd50e
- FOLLOWUP_IP:
- bcbtums+1e73
- fffff800`1c2f1e73 488905aeab0200 mov qword ptr [bcbtums+0x2ca28 (fffff800`1c31ca28)],rax
- FAULT_INSTR_CODE: ae058948
- SYMBOL_STACK_INDEX: 5
- SYMBOL_NAME: bcbtums+1e73
- FOLLOWUP_NAME: MachineOwner
- MODULE_NAME: bcbtums
- IMAGE_NAME: bcbtums.sys
- DEBUG_FLR_IMAGE_TIMESTAMP: 5510862e
- BUCKET_ID_FUNC_OFFSET: 1e73
- FAILURE_BUCKET_ID: 0xc4_2000_bcbtums!unknown_function
- BUCKET_ID: 0xc4_2000_bcbtums!unknown_function
- PRIMARY_PROBLEM_CLASS: 0xc4_2000_bcbtums!unknown_function
- TARGET_TIME: 2017-07-22T17:24:35.000Z
- OSBUILD: 15063
- OSSERVICEPACK: 483
- SERVICEPACK_NUMBER: 0
- OS_REVISION: 0
- SUITE_MASK: 272
- PRODUCT_TYPE: 1
- OSPLATFORM_TYPE: x64
- OSNAME: Windows 10
- OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
- USER_LCID: 0
- OSBUILD_TIMESTAMP: 2017-07-07 02:06:35
- BUILDDATESTAMP_STR: 160101.0800
- BUILDLAB_STR: WinBuild
- BUILDOSVER_STR: 10.0.15063.483
- ANALYSIS_SESSION_ELAPSED_TIME: 19a9
- ANALYSIS_SOURCE: KM
- FAILURE_ID_HASH_STRING: km:0xc4_2000_bcbtums!unknown_function
- FAILURE_ID_HASH: {bb723382-851d-5645-4e5c-f7286526e4dc}
- Followup: MachineOwner
- =============================== Drivers ================================
- fffff800`1ab20000 fffff800`1abae000 mcupdate (deferred)
- Image path: mcupdate.dll
- Image name: mcupdate.dll
- Timestamp: Tue Jul 17 20:27:54 1979 (11F2820A)
- fffff800`1b240000 fffff800`1b24f000 dump_storport (deferred)
- Image path: dump_storport.sys
- Image name: dump_storport.sys
- Timestamp: Wed Aug 28 09:02:36 2013 (521DF4EC)
- fffff800`1bfa0000 fffff800`1c026000 e1i63x64 (deferred)
- Image path: e1i63x64.sys
- Image name: e1i63x64.sys
- Timestamp: Fri Mar 4 16:46:29 2016 (56DA0235)
- fffff800`1c0b0000 fffff800`1c0be000 nvvad64v (deferred)
- Image path: nvvad64v.sys
- Image name: nvvad64v.sys
- Timestamp: Wed Apr 12 04:06:41 2017 (58EDE011)
- fffff800`1c0d0000 fffff800`1c0df000 nvvhci (deferred)
- Image path: nvvhci.sys
- Image name: nvvhci.sys
- Timestamp: Tue Dec 27 20:44:00 2016 (586318E0)
- fffff800`1c1b0000 fffff800`1c1e5000 nvhda64v (deferred)
- Image path: nvhda64v.sys
- Image name: nvhda64v.sys
- Timestamp: Tue May 16 09:02:27 2017 (591AF863)
- fffff800`1c2f0000 fffff800`1c324000 bcbtums T (no symbols)
- Loaded symbol image file: bcbtums.sys
- Image path: bcbtums.sys
- Image name: bcbtums.sys
- Timestamp: Mon Mar 23 17:31:26 2015 (5510862E)
- fffff800`1d8f0000 fffff800`1d911000 drmk (deferred)
- Image path: drmk.sys
- Image name: drmk.sys
- Timestamp: ***** Invalid (A01C1986)
- fffff800`1da40000 fffff800`1da70000 TeeDriverW8x64 (deferred)
- Image path: TeeDriverW8x64.sys
- Image name: TeeDriverW8x64.sys
- Timestamp: Tue Jul 7 13:43:32 2015 (559C0FC4)
- fffff800`1daa0000 fffff800`1dab0000 XtuAcpiDriver (deferred)
- Image path: XtuAcpiDriver.sys
- Image name: XtuAcpiDriver.sys
- Timestamp: Thu Feb 26 07:51:57 2015 (54EF16ED)
- fffff800`1dac0000 fffff800`1e9fb000 nvlddmkm (deferred)
- Image path: nvlddmkm.sys
- Image name: nvlddmkm.sys
- Timestamp: Tue Jun 27 16:02:17 2017 (5952B9C9)
- fffff802`e7800000 fffff802`e780b000 kdcom (deferred)
- Image path: kdcom.dll
- Image name: kdcom.dll
- Timestamp: ***** Invalid (91688416)
- Unloaded modules:
- fffff800`1bea0000 fffff800`1bec0000 dam.sys
- Timestamp: unavailable (00000000)
- Checksum: 00000000
- ImageSize: 00020000
- fffff800`1a300000 fffff800`1a30f000 WdBoot.sys
- Timestamp: unavailable (00000000)
- Checksum: 00000000
- ImageSize: 0000F000
- fffff800`1b150000 fffff800`1b15f000 hwpolicy.sys
- Timestamp: unavailable (00000000)
- Checksum: 00000000
- ImageSize: 0000F000
- ============================= BIOS INFO ================================
- sysinfo: could not find necessary interfaces.
- sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement