Microsoft ® Windows Debugger Version 6.12.0002.633 AMD64
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\120410-25053-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`0325f000 PsLoadedModuleList = 0xfffff800`0349ce50
Debug session time: Sat Dec 4 00:08:16.767 2010 (UTC + 8:00)
System Uptime: 0 days 1:06:15.922
Loading Kernel Symbols
...............................................................
................................................................
...........................................................
Loading User Symbols
Loading unloaded module list
..............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {41287, 30, 0, 0}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+42ba5 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041287, The subtype of the bugcheck.
Arg2: 0000000000000030
Arg3: 0000000000000000
Arg4: 0000000000000000

Debugging Details:
------------------


BUGCHECK_STR: 0x1a_41287

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

PROCESS_NAME: upnp.exe

CURRENT_IRQL: 0

TRAP_FRAME: fffff88009bdb650 -- (.trap 0xfffff88009bdb650)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=00000000ffffffff
rdx=000000000000000c rsi=0000000000000000 rdi=0000000000000000
rip=fffff800033b3db1 rsp=fffff88009bdb7e0 rbp=fffff88009bdb840
r8=fffff8000325f000 r9=0000000000000001 r10=0000000fffffffff
r11=0000000000000001 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nt!MiResolvePageFileFault+0x10c1:
fffff800`033b3db1 8b4830 mov ecx,dword ptr [rax+30h] ds:00000000`00000030=????????
Resetting default scope

LAST_CONTROL_TRANSFER: from fffff8000327bb7a to fffff800032cf740

STACK_TEXT:
fffff880`09bdb4e8 fffff800`0327bb7a : 00000000`0000001a 00000000`00041287 00000000`00000030 00000000`00000000 : nt!KeBugCheckEx
fffff880`09bdb4f0 fffff800`032cd82e : 00000000`00000000 00000000`fffff8a0 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x42ba5
fffff880`09bdb650 fffff800`033b3db1 : fffff8a0`00000078 00000000`ffffffff 00000202`00000023 fffffa80`0d0f98d0 : nt!KiPageFault+0x16e
fffff880`09bdb7e0 fffff800`033456e1 : 00000000`6d84f419 fffff8a0`00000078 fffffa80`0d6043f8 00000000`00000000 : nt!MiResolvePageFileFault+0x10c1
fffff880`09bdb910 fffff800`032eb5be : 00000000`00000000 00000000`6d84f419 fffff680`0036c278 fffffa80`0d6043f8 : nt! ?? ::FNODOBFM::`string'+0x363f4
fffff880`09bdb9b0 fffff800`032e9743 : 00000000`00000000 00000000`6d84f419 fffff880`09bdbc20 fffff680`00000000 : nt!MiDispatchFault+0x1de
fffff880`09bdbac0 fffff800`032cd82e : 00000000`00000008 00000000`00000001 ffffffff`fa0a1f01 00000000`7efd8000 : nt!MmAccessFault+0x343
fffff880`09bdbc20 00000000`6d84f419 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
00000000`021cfd90 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x6d84f419


STACK_COMMAND: kb

FOLLOWUP_IP:
nt! ?? ::FNODOBFM::`string'+42ba5
fffff800`0327bb7a cc int 3

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+42ba5

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9

FAILURE_BUCKET_ID: X64_0x1a_41287_nt!_??_::FNODOBFM::_string_+42ba5

BUCKET_ID: X64_0x1a_41287_nt!_??_::FNODOBFM::_string_+42ba5

Followup: MachineOwner
---------


Okay, here's my thinggy.
1st i dunnoe which is the problem, upnp.exe? is it plug and play thinggy ??
or it's ntkrnlmp.exe?
and what should i do ?
hope to hear from some pros around. i trying to read from the 1st post , and search for post related to ntkrnlmp.exe it's like alot of them with different problems and solution. so i have to ask - -
hope someone can help.

PS i dunnoe y i unable to upload the minidump file. it said Upload failed. You are not permitted to upload a file with that file extension.

This post has been edited by ahloong888: Dec 4 2010, 10:57 AM