Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Windows\MEMORY.DMP] Kernel Summary Dump File: Only kernel address space is available Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols Executable search path is: Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Personal Built by: 7601.17592.amd64fre.win7sp1_gdr.110408-1631 Machine Name: Kernel base = 0xfffff800`02a4c000 PsLoadedModuleList = 0xfffff800`02c91650 Debug session time: Tue May 24 15:32:43.673 2011 (UTC + 2:00) System Uptime: 0 days 0:01:36.516 Loading Kernel Symbols ............................................................... ................................................................ ................... Loading User Symbols PEB is paged out (Peb.Ldr = 000007ff`fffdf018). Type ".hh dbgerr001" for details Loading unloaded module list ..... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 1A, {41790, fffffa80011d8460, ffff, 0} Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+36024 ) Followup: MachineOwner --------- 0: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* MEMORY_MANAGEMENT (1a) # Any other values for parameter 1 must be individually examined. Arguments: Arg1: 0000000000041790, The subtype of the bugcheck. Arg2: fffffa80011d8460 Arg3: 000000000000ffff Arg4: 0000000000000000 Debugging Details: ------------------ BUGCHECK_STR: 0x1a_41790 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT PROCESS_NAME: setup.exe CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from fffff80002b39e40 to fffff80002acbd00 STACK_TEXT: fffff880`07c2e6e8 fffff800`02b39e40 : 00000000`0000001a 00000000`00041790 fffffa80`011d8460 00000000`0000ffff : nt!KeBugCheckEx fffff880`07c2e6f0 fffff800`02aff5d9 : 00000000`00000000 00000001`3f5dcfff fffffa80`00000000 fffff880`00961000 : nt! ?? ::FNODOBFM::`string'+0x36024 fffff880`07c2e8b0 fffff800`02de28b1 : fffffa80`0573fbb0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiRemoveMappedView+0xd9 fffff880`07c2e9d0 fffff800`02de2cb3 : 0000007f`00000000 00000001`3f460000 fffffa80`00000001 fffffa80`04f98a10 : nt!MiUnmapViewOfSection+0x1b1 fffff880`07c2ea90 fffff800`02acaf93 : 00000000`00000000 00000001`3f563c6c fffffa80`057a6b30 00000000`00000000 : nt!NtUnmapViewOfSection+0x5f fffff880`07c2eae0 00000000`775815ba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 00000000`02cdbe48 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x775815ba STACK_COMMAND: kb FOLLOWUP_IP: nt! ?? ::FNODOBFM::`string'+36024 fffff800`02b39e40 cc int 3 SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+36024 FOLLOWUP_NAME: MachineOwner MODULE_NAME: nt IMAGE_NAME: ntkrnlmp.exe DEBUG_FLR_IMAGE_TIMESTAMP: 4d9fdd5b FAILURE_BUCKET_ID: X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+36024 BUCKET_ID: X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+36024 Followup: MachineOwner ---------