
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17592.amd64fre.win7sp1_gdr.110408-1631
Machine Name:
Kernel base = 0xfffff800`02c53000 PsLoadedModuleList = 0xfffff800`02e98650
Debug session time: Thu Jun 16 20:53:38.455 2011 (UTC + 2:00)
System Uptime: 0 days 4:44:59.235
Loading Kernel Symbols
...............................................................
................................................................
........................................
Loading User Symbols

Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {8886, fffffa80014cd3f0, fffffa80014cd450, 100}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+117c3 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000008886, The subtype of the bugcheck.
Arg2: fffffa80014cd3f0
Arg3: fffffa80014cd450
Arg4: 0000000000000100

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_8886

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff80002c67583 to fffff80002cd2d00

STACK_TEXT:  
fffff880`0339a248 fffff800`02c67583 : 00000000`0000001a 00000000`00008886 fffffa80`014cd3f0 fffffa80`014cd450 : nt!KeBugCheckEx
fffff880`0339a250 fffff800`02ca0bbd : 00000000`0008b984 00000580`00000000 fffffa80`00000001 00000000`0008b984 : nt! ?? ::FNODOBFM::`string'+0x117c3
fffff880`0339a2e0 fffff800`02ca1542 : 00000000`00000000 00000000`00000700 fffffa80`07485058 fffff8a0`0e37a100 : nt!MmPurgeSection+0x4bd
fffff880`0339a3d0 fffff880`014c29ef : fffffa80`03de2468 fffffa80`07485010 00000000`00000000 fffffa80`00000000 : nt!CcPurgeCacheSection+0x172
fffff880`0339a440 fffff880`014f084e : fffffa80`07485010 fffff8a0`0e37a140 00000000`00000000 fffff8a0`0e37a101 : Ntfs!NtfsFlushAndPurgeScb+0x1bd
fffff880`0339a4d0 fffff880`014defe5 : fffffa80`07485010 fffffa80`070c56a8 fffffa80`04e07180 fffff8a0`0e37a3a8 : Ntfs!NtfsOpenAttribute+0x80e
fffff880`0339a5e0 fffff880`014dae3b : fffff880`0a96a4a0 fffffa80`07485010 fffff8a0`0e37a3a8 fffff8a0`0000004a : Ntfs!NtfsOpenExistingAttr+0x145
fffff880`0339a6a0 fffff880`014de09f : fffffa80`07485010 fffffa80`070c52c0 fffff8a0`0e37a3a8 fffff880`0000004a : Ntfs!NtfsOpenAttributeInExistingFile+0x5ab
fffff880`0339a830 fffff880`014ee166 : fffffa80`07485010 fffffa80`070c52c0 fffff8a0`0e37a3a8 00000000`00000001 : Ntfs!NtfsOpenExistingPrefixFcb+0x1ef
fffff880`0339a920 fffff880`014eb911 : fffffa80`07485010 fffffa80`070c52c0 fffff880`0339aaf0 fffff880`0339ab40 : Ntfs!NtfsFindStartingNode+0x5e6
fffff880`0339a9f0 fffff880`01449945 : fffffa80`07485010 fffffa80`070c52c0 fffff880`0a96a4a0 fffff800`02cdaf00 : Ntfs!NtfsCommonCreate+0x3e1
fffff880`0339abd0 fffff800`02cdd021 : fffffa80`039f0d00 fffff800`02fc9000 fffff800`02ed1800 fffffa80`00000000 : Ntfs!NtfsFspDispatch+0x26d
fffff880`0339acb0 fffff800`02f6f32e : b36e8896`cbb000ca fffffa80`03a0f1a0 00000000`00000080 fffffa80`039ea040 : nt!ExpWorkerThread+0x111
fffff880`0339ad40 fffff800`02cc4666 : fffff880`03163180 fffffa80`03a0f1a0 fffff880`0316dfc0 f7e3fd0b`ad8594eb : nt!PspSystemThreadStartup+0x5a
fffff880`0339ad80 00000000`00000000 : fffff880`0339b000 fffff880`03395000 fffff880`03399fa0 00000000`00000000 : nt!KiStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+117c3
fffff800`02c67583 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+117c3

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4d9fdd5b

FAILURE_BUCKET_ID:  X64_0x1a_8886_nt!_??_::FNODOBFM::_string_+117c3

BUCKET_ID:  X64_0x1a_8886_nt!_??_::FNODOBFM::_string_+117c3

Followup: MachineOwner
---------

