Advertisement
Guest User

Untitled

a guest
Jul 22nd, 2017
67
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.38 KB | None | 0 0
  1. Microsoft (R) Windows Debugger Version 10.0.14321.1024 X86
  2. Copyright (c) Microsoft Corporation. All rights reserved.
  3.  
  4. ========================================================================
  5. =================== Dump File: 072217-9359-01.dmp ====================
  6. ========================================================================
  7. Mini Kernel Dump File: Only registers and stack trace are available
  8. Windows 10 Kernel Version 15063 MP (12 procs) Free x64
  9. Product: WinNt, suite: TerminalServer SingleUserTS
  10. Kernel base = 0xfffff802`e6e0a000 PsLoadedModuleList = 0xfffff802`e71565e0
  11. Debug session time: Sat Jul 22 13:24:35.601 2017 (UTC - 4:00)
  12. System Uptime: 0 days 0:00:05.333
  13.  
  14. BugCheck C4, {2000, fffff8001c2f1e73, 0, 426d6342}
  15. *** WARNING: Unable to verify timestamp for bcbtums.sys
  16. *** ERROR: Module load completed but symbols could not be loaded for bcbtums.sys
  17. Probably caused by : bcbtums.sys ( bcbtums+1e73 )
  18. Followup: MachineOwner
  19.  
  20. DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
  21. A device driver attempting to corrupt the system has been caught. This is
  22. because the driver was specified in the registry as being suspect (by the
  23. administrator) and the kernel has enabled substantial checking of this driver.
  24. If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
  25. be among the most commonly seen crashes.
  26.  
  27. Arguments:
  28. Arg1: 0000000000002000, Code Integrity Issue: The caller specified an executable pool type. (Expected: NonPagedPoolNx)
  29. Arg2: fffff8001c2f1e73, The address in the driver's code where the error was detected.
  30. Arg3: 0000000000000000, Pool Type.
  31. Arg4: 00000000426d6342, Pool Tag (if provided).
  32.  
  33. Debugging Details:
  34. DUMP_CLASS: 1
  35. DUMP_QUALIFIER: 400
  36. BUILD_VERSION_STRING: 10.0.15063.483 (WinBuild.160101.0800)
  37. DUMP_TYPE: 2
  38. DUMP_FILE_ATTRIBUTES: 0x8
  39. Kernel Generated Triage Dump
  40. BUGCHECK_STR: 0xc4_2000
  41. CPU_COUNT: c
  42. CPU_MHZ: ce4
  43. CPU_VENDOR: GenuineIntel
  44. CPU_FAMILY: 6
  45. CPU_MODEL: 3f
  46. CPU_STEPPING: 2
  47. CUSTOMER_CRASH_COUNT: 1
  48. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  49.  
  50. PROCESS_NAME: System
  51.  
  52. CURRENT_IRQL: 0
  53. LOCK_ADDRESS: fffff802e716ef80 -- (!locks fffff802e716ef80)
  54. Resource @ nt!PiEngineLock (0xfffff802e716ef80) Available
  55. WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.
  56. WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.
  57. 1 total locks
  58. PNP_TRIAGE:
  59. Lock address : 0xfffff802e716ef80
  60. Thread Count : 0
  61. Thread address: 0x0000000000000000
  62. Thread wait : 0x0
  63. LAST_CONTROL_TRANSFER: from fffff802e757603f to fffff802e6f764c0
  64. STACK_TEXT:
  65. ffff9a01`6868d198 fffff802`e757603f : 00000000`000000c4 00000000`00002000 fffff800`1c2f1e73 00000000`00000000 : nt!KeBugCheckEx
  66. ffff9a01`6868d1a0 fffff802`e7057d9f : ffff9a01`00000000 fffff802`e756d9ca fffff802`e70c11f0 00000000`00000003 : nt!VerifierBugCheckIfAppropriate+0x6b
  67. ffff9a01`6868d1e0 fffff802`e756d8b0 : 00000000`426d6342 fffff802`e71483ac fffff800`1c2f1e73 fffff802`e7589035 : nt!VfReportIssueWithOptions+0x103
  68. ffff9a01`6868d230 fffff802`e756b701 : 00000000`426d6342 ffffc083`3a888a00 00000000`00000000 fffff802`e6e6ad4f : nt!VfCheckPoolType+0x90
  69. ffff9a01`6868d270 fffff800`1c2f1e73 : fffff800`1c315120 ffffc083`3a888a00 ffffc083`00000000 ffff9a01`6868d2d0 : nt!VerifierExAllocatePoolEx+0x21
  70. ffff9a01`6868d2c0 fffff800`1c315120 : ffffc083`3a888a00 ffffc083`00000000 ffff9a01`6868d2d0 fffff800`1c31cc38 : bcbtums+0x1e73
  71. ffff9a01`6868d2c8 ffffc083`3a888a00 : ffffc083`00000000 ffff9a01`6868d2d0 fffff800`1c31cc38 fffff800`1c31f073 : bcbtums+0x25120
  72. ffff9a01`6868d2d0 ffffc083`00000000 : ffff9a01`6868d2d0 fffff800`1c31cc38 fffff800`1c31f073 00000000`001c001a : 0xffffc083`3a888a00
  73. ffff9a01`6868d2d8 ffff9a01`6868d2d0 : fffff800`1c31cc38 fffff800`1c31f073 00000000`001c001a fffff800`1c31e3e0 : 0xffffc083`00000000
  74. ffff9a01`6868d2e0 fffff800`1c31cc38 : fffff800`1c31f073 00000000`001c001a fffff800`1c31e3e0 ffffc083`3a889000 : 0xffff9a01`6868d2d0
  75. ffff9a01`6868d2e8 fffff800`1c31f073 : 00000000`001c001a fffff800`1c31e3e0 ffffc083`3a889000 ffffffff`8000009c : bcbtums+0x2cc38
  76. ffff9a01`6868d2f0 00000000`001c001a : fffff800`1c31e3e0 ffffc083`3a889000 ffffffff`8000009c 00000000`00000200 : bcbtums+0x2f073
  77. ffff9a01`6868d2f8 fffff800`1c31e3e0 : ffffc083`3a889000 ffffffff`8000009c 00000000`00000200 fffff802`e7277026 : 0x1c001a
  78. ffff9a01`6868d300 ffffc083`3a889000 : ffffffff`8000009c 00000000`00000200 fffff802`e7277026 00000000`00000000 : bcbtums+0x2e3e0
  79. ffff9a01`6868d308 ffffffff`8000009c : 00000000`00000200 fffff802`e7277026 00000000`00000000 ffff9a01`6868d420 : 0xffffc083`3a889000
  80. ffff9a01`6868d310 00000000`00000200 : fffff802`e7277026 00000000`00000000 ffff9a01`6868d420 ffffc083`0000000a : 0xffffffff`8000009c
  81. ffff9a01`6868d318 fffff802`e7277026 : 00000000`00000000 ffff9a01`6868d420 ffffc083`0000000a 00000000`00000010 : 0x200
  82. ffff9a01`6868d320 fffff802`e73ab18e : 00000000`00000000 00000000`00000000 00000000`00000004 ffff8601`00000004 : nt!IopLoadDriver+0x522
  83. ffff9a01`6868d500 fffff802`e725e7e0 : ffff9a01`6868da01 00000000`00000008 00000000`00000000 ffffe781`fe89e500 : nt!PipCallDriverAddDeviceQueryRoutine+0x1b6
  84. ffff9a01`6868d5a0 fffff802`e723f4ea : 00000000`00000000 00000000`00000002 00000000`04000000 ffffc083`3a885210 : nt!PnpCallDriverQueryServiceHelper+0x13c
  85. ffff9a01`6868d610 fffff802`e724067b : ffffc083`3a885210 ffff9a01`6868d8e0 ffffc083`3a885210 00000000`00000000 : nt!PipCallDriverAddDevice+0x4be
  86. ffff9a01`6868d7e0 fffff802`e72f142f : ffffc083`3a87de90 fffff802`e6e6d059 00000000`00000000 00000000`00000000 : nt!PipProcessDevNodeTree+0x15f
  87. ffff9a01`6868da60 fffff802`e6edc8f3 : ffffc001`00000003 00000000`00000000 ffffc083`3a87de90 ffffc083`3a87de90 : nt!PiProcessReenumeration+0xab
  88. ffff9a01`6868dab0 fffff802`e6e47ca8 : ffffc083`3a3ab7c0 fffff802`e716da20 fffff802`e7202380 ffffc083`39eef828 : nt!PnpDeviceActionWorker+0x1b3
  89. ffff9a01`6868db80 fffff802`e6ee6ac7 : ffff9a01`66600180 00000000`00000080 ffffc083`36084040 ffffc083`3a3ab7c0 : nt!ExpWorkerThread+0xd8
  90. ffff9a01`6868dc10 fffff802`e6f7b946 : ffff9a01`66600180 ffffc083`3a3ab7c0 fffff802`e6ee6a80 00000000`00000000 : nt!PspSystemThreadStartup+0x47
  91. ffff9a01`6868dc60 00000000`00000000 : ffff9a01`6868e000 ffff9a01`68688000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
  92. STACK_COMMAND: kb
  93. THREAD_SHA1_HASH_MOD_FUNC: ebe440c4cc2c759bb6d5b20016fd26267350a5a0
  94. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 268e1ea25965e22ecccb6ecca75fabbd404541b2
  95. THREAD_SHA1_HASH_MOD: 2e4bdbbe6e1c48b9a732e7e214b259dc41afd50e
  96. FOLLOWUP_IP:
  97. bcbtums+1e73
  98. fffff800`1c2f1e73 488905aeab0200 mov qword ptr [bcbtums+0x2ca28 (fffff800`1c31ca28)],rax
  99. FAULT_INSTR_CODE: ae058948
  100. SYMBOL_STACK_INDEX: 5
  101. SYMBOL_NAME: bcbtums+1e73
  102. FOLLOWUP_NAME: MachineOwner
  103. MODULE_NAME: bcbtums
  104.  
  105. IMAGE_NAME: bcbtums.sys
  106.  
  107. DEBUG_FLR_IMAGE_TIMESTAMP: 5510862e
  108. BUCKET_ID_FUNC_OFFSET: 1e73
  109. FAILURE_BUCKET_ID: 0xc4_2000_bcbtums!unknown_function
  110. BUCKET_ID: 0xc4_2000_bcbtums!unknown_function
  111. PRIMARY_PROBLEM_CLASS: 0xc4_2000_bcbtums!unknown_function
  112. TARGET_TIME: 2017-07-22T17:24:35.000Z
  113. OSBUILD: 15063
  114. OSSERVICEPACK: 483
  115. SERVICEPACK_NUMBER: 0
  116. OS_REVISION: 0
  117. SUITE_MASK: 272
  118. PRODUCT_TYPE: 1
  119. OSPLATFORM_TYPE: x64
  120. OSNAME: Windows 10
  121. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
  122. USER_LCID: 0
  123. OSBUILD_TIMESTAMP: 2017-07-07 02:06:35
  124. BUILDDATESTAMP_STR: 160101.0800
  125. BUILDLAB_STR: WinBuild
  126. BUILDOSVER_STR: 10.0.15063.483
  127. ANALYSIS_SESSION_ELAPSED_TIME: 19a9
  128. ANALYSIS_SOURCE: KM
  129. FAILURE_ID_HASH_STRING: km:0xc4_2000_bcbtums!unknown_function
  130. FAILURE_ID_HASH: {bb723382-851d-5645-4e5c-f7286526e4dc}
  131. Followup: MachineOwner
  132.  
  133. =============================== Drivers ================================
  134. fffff800`1ab20000 fffff800`1abae000 mcupdate (deferred)
  135. Image path: mcupdate.dll
  136. Image name: mcupdate.dll
  137. Timestamp: Tue Jul 17 20:27:54 1979 (11F2820A)
  138. fffff800`1b240000 fffff800`1b24f000 dump_storport (deferred)
  139. Image path: dump_storport.sys
  140. Image name: dump_storport.sys
  141. Timestamp: Wed Aug 28 09:02:36 2013 (521DF4EC)
  142. fffff800`1bfa0000 fffff800`1c026000 e1i63x64 (deferred)
  143. Image path: e1i63x64.sys
  144. Image name: e1i63x64.sys
  145. Timestamp: Fri Mar 4 16:46:29 2016 (56DA0235)
  146. fffff800`1c0b0000 fffff800`1c0be000 nvvad64v (deferred)
  147. Image path: nvvad64v.sys
  148. Image name: nvvad64v.sys
  149. Timestamp: Wed Apr 12 04:06:41 2017 (58EDE011)
  150. fffff800`1c0d0000 fffff800`1c0df000 nvvhci (deferred)
  151. Image path: nvvhci.sys
  152. Image name: nvvhci.sys
  153. Timestamp: Tue Dec 27 20:44:00 2016 (586318E0)
  154. fffff800`1c1b0000 fffff800`1c1e5000 nvhda64v (deferred)
  155. Image path: nvhda64v.sys
  156. Image name: nvhda64v.sys
  157. Timestamp: Tue May 16 09:02:27 2017 (591AF863)
  158. fffff800`1c2f0000 fffff800`1c324000 bcbtums T (no symbols)
  159. Loaded symbol image file: bcbtums.sys
  160. Image path: bcbtums.sys
  161. Image name: bcbtums.sys
  162. Timestamp: Mon Mar 23 17:31:26 2015 (5510862E)
  163. fffff800`1d8f0000 fffff800`1d911000 drmk (deferred)
  164. Image path: drmk.sys
  165. Image name: drmk.sys
  166. Timestamp: ***** Invalid (A01C1986)
  167. fffff800`1da40000 fffff800`1da70000 TeeDriverW8x64 (deferred)
  168. Image path: TeeDriverW8x64.sys
  169. Image name: TeeDriverW8x64.sys
  170. Timestamp: Tue Jul 7 13:43:32 2015 (559C0FC4)
  171. fffff800`1daa0000 fffff800`1dab0000 XtuAcpiDriver (deferred)
  172. Image path: XtuAcpiDriver.sys
  173. Image name: XtuAcpiDriver.sys
  174. Timestamp: Thu Feb 26 07:51:57 2015 (54EF16ED)
  175. fffff800`1dac0000 fffff800`1e9fb000 nvlddmkm (deferred)
  176. Image path: nvlddmkm.sys
  177. Image name: nvlddmkm.sys
  178. Timestamp: Tue Jun 27 16:02:17 2017 (5952B9C9)
  179. fffff802`e7800000 fffff802`e780b000 kdcom (deferred)
  180. Image path: kdcom.dll
  181. Image name: kdcom.dll
  182. Timestamp: ***** Invalid (91688416)
  183. Unloaded modules:
  184. fffff800`1bea0000 fffff800`1bec0000 dam.sys
  185. Timestamp: unavailable (00000000)
  186. Checksum: 00000000
  187. ImageSize: 00020000
  188. fffff800`1a300000 fffff800`1a30f000 WdBoot.sys
  189. Timestamp: unavailable (00000000)
  190. Checksum: 00000000
  191. ImageSize: 0000F000
  192. fffff800`1b150000 fffff800`1b15f000 hwpolicy.sys
  193. Timestamp: unavailable (00000000)
  194. Checksum: 00000000
  195. ImageSize: 0000F000
  196.  
  197. ============================= BIOS INFO ================================
  198. sysinfo: could not find necessary interfaces.
  199. sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement