I need Help reading the analysis detail. Please !!
Can somebody help me to understand what the debugged said., please help i'm tired of the desktop hitting BSOD .
WRITE_ADDRESS: ffffd00020a34490
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!ExpInterlockedPopEntrySListFault+0
fffff802`407d8929 498b08 mov rcx,qword ptr [r8]
EXCEPTION_PARAMETER1: ffffd00020a34c88
EXCEPTION_PARAMETER2: ffffd00020a34490
BUGCHECK_STR: 0x1E_c0000005
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: uTorrent.exe
CURRENT_IRQL: 2
ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre
EXCEPTION_RECORD: ffffd00020a35078 -- (.exr 0xffffd00020a35078)
ExceptionAddress: 00000000ffffffff
ExceptionCode: 00000007
ExceptionFlags: 00000000
NumberParameters: 1
Parameter[0]: ffffe001b3a5c508
LAST_CONTROL_TRANSFER: from fffff80240862fbb to fffff802407d1ca0
STACK_TEXT:
ffffd000`20a33c68 fffff802`40862fbb : 00000000`0000001e ffffffff`c0000005 fffff802`407d8929 ffffd000`20a34c88 : nt!KeBugCheckEx
ffffd000`20a33c70 fffff802`407e2816 : ffffd000`00000002 fffff800`16bf7500 00000000`00000003 fffff800`ffffffff : nt!KiFatalFilter+0x1f
ffffd000`20a33cb0 fffff802`407c0dd6 : 00000000`00000000 fffff800`16bf76e8 00000000`00000008 00000000`00000001 : nt! ?? ::FNODOBFM::`string'+0x656
ffffd000`20a33cf0 fffff802`407d91ed : 00000000`00000000 ffffd000`20a33e90 ffffd000`20a34c88 ffffd000`20a33e90 : nt!_C_specific_handler+0x86
ffffd000`20a33d60 fffff802`4074a0a5 : 00000000`00000001 fffff802`40681000 ffffd000`20a34c00 ffffd000`00000000 : nt!RtlpExecuteHandlerForException+0xd
ffffd000`20a33d90 fffff802`4074e45e : ffffd000`20a34c88 ffffd000`20a34990 ffffd000`20a34c88 00000000`00000000 : nt!RtlDispatchException+0x1a5
ffffd000`20a34460 fffff802`407dd8c2 : ffffd000`20a35078 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x646
ffffd000`20a34b50 fffff802`407dbdfe : 00000000`00000001 00000000`00000001 00000000`00000002 00000000`000052f1 : nt!KiExceptionDispatch+0xc2
ffffd000`20a34d30 fffff802`407d8929 : ffffe001`b774e480 fffff800`185df4fe ffffe001`b3bf5578 00000000`00000000 : nt!KiGeneralProtectionFault+0xfe
ffffd000`20a34ec0 fffff800`185df4fe : ffffe001`b3bf5578 00000000`00000000 ffffe001`b7315110 ffffe001`b3d84ac0 : nt!ExpInterlockedPopEntrySListFault
ffffd000`20a34ed0 fffff800`185d7d0b : ffffe001`00000000 00000000`00000000 ffffd000`20a35010 ffffd000`20a35060 : Ndu!PplGenericAllocateFunction+0x16
ffffd000`20a34f00 fffff800`185d7fb3 : 00000000`00000000 ffffe001`b7803120 ffffd000`20a35200 ffffd000`20a35008 : Ndu!NduCreateNblContext+0xc7
ffffd000`20a34f60 fffff800`185d857c : ffffe001`b3d84ac0 ffffe001`b7803120 ffffd000`20a352f0 ffffe001`bae74dd0 : Ndu!NduFindOrAssociateNblContext+0x107
ffffd000`20a34fd0 fffff800`14c1d180 : ffffe001`b788fa20 ffffd000`20a35089 ffffd000`20a35000 00000000`00000000 : Ndu!NduOutboundTransportClassify+0xbc
ffffd000`20a35020 fffff800`1506edcd : ffffd000`20a35240 ffffe001`b3844b40 00000000`00000000 ffffe001`b3844b40 : NETIO!KfdClassify2+0x180
ffffd000`20a350f0 fffff800`15088abd : 00000000`00000000 ffffd000`20a30800 00000000`00000000 00000000`00000000 : tcpip!WfpProcessOutTransportStackIndication+0x78d
ffffd000`20a35420 fffff800`15087878 : ffffd000`20a35738 ffffe001`b3bf5568 00000000`00000002 ffffd000`20a35a40 : tcpip!IppInspectLocalDatagramsOut+0x68d
ffffd000`20a35740 fffff800`1506d512 : 00000000`00000000 00000000`0000f104 fffff800`15204180 ffffe001`b79e6d70 : tcpip!IppSendDatagramsCommon+0x3f8
ffffd000`20a35920 fffff800`1506dcaa : 00000000`00000000 00000000`00000000 ffffe001`bb8cffe4 fffff800`15204180 : tcpip!UdpSendMessagesOnPathCreation+0x482
ffffd000`20a35d70 fffff800`1506e324 : 00000000`00000000 00000000`00000002 00000000`00000000 00000000`00000000 : tcpip!UdpSendMessages+0x24a
ffffd000`20a361b0 fffff802`406f3703 : ffffe001`b78c6080 ffffd000`20a36220 00000000`000419ab ffffd000`20a364a0 : tcpip!UdpTlProviderSendMessagesCalloutRoutine+0x15
ffffd000`20a361e0 fffff800`1506f5ec : fffff800`1506e310 ffffd000`20a36300 00000000`00000000 ffffe001`b77928c0 : nt!KeExpandKernelStackAndCalloutInternal+0xf3
ffffd000`20a362d0 fffff800`15646719 : ffffe001`bb8cf7b0 ffffd000`20a36b80 ffffe001`bb8cf7b0 ffffe001`bb8cf7b0 : tcpip!UdpTlProviderSendMessages+0x6c
ffffd000`20a36350 fffff800`1562e0e5 : 00000000`00000000 ffffe001`b4915240 00000000`00000000 ffffe001`b76b63f0 : afd!AfdFastDatagramSend+0x579
ffffd000`20a36510 fffff802`40aa627c : 00000000`00000000 ffffe001`b7ac26e0 00000000`00000200 00000000`00000000 : afd!AfdFastIoDeviceControl+0x10d6
ffffd000`20a36880 fffff802`40aa5d22 : 00000000`00000000 0000000c`001f0003 00000000`00000001 00000000`00000000 : nt!IopXxxControlFile+0x54c
ffffd000`20a36a20 fffff802`407dd4b3 : 00000000`00000102 ffffd000`20a36ad8 00000000`00000000 00000000`00000001 : nt!NtDeviceIoControlFile+0x56
ffffd000`20a36a90 00000000`77ac2352 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`02cbf128 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77ac2352
STACK_COMMAND: kb
FOLLOWUP_IP:
Ndu!PplGenericAllocateFunction+16
fffff800`185df4fe 4885c0 test rax,rax
SYMBOL_STACK_INDEX: a
SYMBOL_NAME: Ndu!PplGenericAllocateFunction+16
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ndu
IMAGE_NAME: Ndu.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 545054bc
IMAGE_VERSION: 6.3.9600.17415
BUCKET_ID_FUNC_OFFSET: 16
FAILURE_BUCKET_ID: 0x1E_c0000005_Ndu!PplGenericAllocateFunction
BUCKET_ID: 0x1E_c0000005_Ndu!PplGenericAllocateFunction
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x1e_c0000005_ndu!pplgenericallocatefunction
FAILURE_ID_HASH: {162ed2d6-3e28-b03c-c0f3-b58b8c6cfd89}
Followup: MachineOwner
---------
Can somebody help me to understand what the debugged said., please help i'm tired of the desktop hitting BSOD .
WRITE_ADDRESS: ffffd00020a34490
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!ExpInterlockedPopEntrySListFault+0
fffff802`407d8929 498b08 mov rcx,qword ptr [r8]
EXCEPTION_PARAMETER1: ffffd00020a34c88
EXCEPTION_PARAMETER2: ffffd00020a34490
BUGCHECK_STR: 0x1E_c0000005
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: uTorrent.exe
CURRENT_IRQL: 2
ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre
EXCEPTION_RECORD: ffffd00020a35078 -- (.exr 0xffffd00020a35078)
ExceptionAddress: 00000000ffffffff
ExceptionCode: 00000007
ExceptionFlags: 00000000
NumberParameters: 1
Parameter[0]: ffffe001b3a5c508
LAST_CONTROL_TRANSFER: from fffff80240862fbb to fffff802407d1ca0
STACK_TEXT:
ffffd000`20a33c68 fffff802`40862fbb : 00000000`0000001e ffffffff`c0000005 fffff802`407d8929 ffffd000`20a34c88 : nt!KeBugCheckEx
ffffd000`20a33c70 fffff802`407e2816 : ffffd000`00000002 fffff800`16bf7500 00000000`00000003 fffff800`ffffffff : nt!KiFatalFilter+0x1f
ffffd000`20a33cb0 fffff802`407c0dd6 : 00000000`00000000 fffff800`16bf76e8 00000000`00000008 00000000`00000001 : nt! ?? ::FNODOBFM::`string'+0x656
ffffd000`20a33cf0 fffff802`407d91ed : 00000000`00000000 ffffd000`20a33e90 ffffd000`20a34c88 ffffd000`20a33e90 : nt!_C_specific_handler+0x86
ffffd000`20a33d60 fffff802`4074a0a5 : 00000000`00000001 fffff802`40681000 ffffd000`20a34c00 ffffd000`00000000 : nt!RtlpExecuteHandlerForException+0xd
ffffd000`20a33d90 fffff802`4074e45e : ffffd000`20a34c88 ffffd000`20a34990 ffffd000`20a34c88 00000000`00000000 : nt!RtlDispatchException+0x1a5
ffffd000`20a34460 fffff802`407dd8c2 : ffffd000`20a35078 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x646
ffffd000`20a34b50 fffff802`407dbdfe : 00000000`00000001 00000000`00000001 00000000`00000002 00000000`000052f1 : nt!KiExceptionDispatch+0xc2
ffffd000`20a34d30 fffff802`407d8929 : ffffe001`b774e480 fffff800`185df4fe ffffe001`b3bf5578 00000000`00000000 : nt!KiGeneralProtectionFault+0xfe
ffffd000`20a34ec0 fffff800`185df4fe : ffffe001`b3bf5578 00000000`00000000 ffffe001`b7315110 ffffe001`b3d84ac0 : nt!ExpInterlockedPopEntrySListFault
ffffd000`20a34ed0 fffff800`185d7d0b : ffffe001`00000000 00000000`00000000 ffffd000`20a35010 ffffd000`20a35060 : Ndu!PplGenericAllocateFunction+0x16
ffffd000`20a34f00 fffff800`185d7fb3 : 00000000`00000000 ffffe001`b7803120 ffffd000`20a35200 ffffd000`20a35008 : Ndu!NduCreateNblContext+0xc7
ffffd000`20a34f60 fffff800`185d857c : ffffe001`b3d84ac0 ffffe001`b7803120 ffffd000`20a352f0 ffffe001`bae74dd0 : Ndu!NduFindOrAssociateNblContext+0x107
ffffd000`20a34fd0 fffff800`14c1d180 : ffffe001`b788fa20 ffffd000`20a35089 ffffd000`20a35000 00000000`00000000 : Ndu!NduOutboundTransportClassify+0xbc
ffffd000`20a35020 fffff800`1506edcd : ffffd000`20a35240 ffffe001`b3844b40 00000000`00000000 ffffe001`b3844b40 : NETIO!KfdClassify2+0x180
ffffd000`20a350f0 fffff800`15088abd : 00000000`00000000 ffffd000`20a30800 00000000`00000000 00000000`00000000 : tcpip!WfpProcessOutTransportStackIndication+0x78d
ffffd000`20a35420 fffff800`15087878 : ffffd000`20a35738 ffffe001`b3bf5568 00000000`00000002 ffffd000`20a35a40 : tcpip!IppInspectLocalDatagramsOut+0x68d
ffffd000`20a35740 fffff800`1506d512 : 00000000`00000000 00000000`0000f104 fffff800`15204180 ffffe001`b79e6d70 : tcpip!IppSendDatagramsCommon+0x3f8
ffffd000`20a35920 fffff800`1506dcaa : 00000000`00000000 00000000`00000000 ffffe001`bb8cffe4 fffff800`15204180 : tcpip!UdpSendMessagesOnPathCreation+0x482
ffffd000`20a35d70 fffff800`1506e324 : 00000000`00000000 00000000`00000002 00000000`00000000 00000000`00000000 : tcpip!UdpSendMessages+0x24a
ffffd000`20a361b0 fffff802`406f3703 : ffffe001`b78c6080 ffffd000`20a36220 00000000`000419ab ffffd000`20a364a0 : tcpip!UdpTlProviderSendMessagesCalloutRoutine+0x15
ffffd000`20a361e0 fffff800`1506f5ec : fffff800`1506e310 ffffd000`20a36300 00000000`00000000 ffffe001`b77928c0 : nt!KeExpandKernelStackAndCalloutInternal+0xf3
ffffd000`20a362d0 fffff800`15646719 : ffffe001`bb8cf7b0 ffffd000`20a36b80 ffffe001`bb8cf7b0 ffffe001`bb8cf7b0 : tcpip!UdpTlProviderSendMessages+0x6c
ffffd000`20a36350 fffff800`1562e0e5 : 00000000`00000000 ffffe001`b4915240 00000000`00000000 ffffe001`b76b63f0 : afd!AfdFastDatagramSend+0x579
ffffd000`20a36510 fffff802`40aa627c : 00000000`00000000 ffffe001`b7ac26e0 00000000`00000200 00000000`00000000 : afd!AfdFastIoDeviceControl+0x10d6
ffffd000`20a36880 fffff802`40aa5d22 : 00000000`00000000 0000000c`001f0003 00000000`00000001 00000000`00000000 : nt!IopXxxControlFile+0x54c
ffffd000`20a36a20 fffff802`407dd4b3 : 00000000`00000102 ffffd000`20a36ad8 00000000`00000000 00000000`00000001 : nt!NtDeviceIoControlFile+0x56
ffffd000`20a36a90 00000000`77ac2352 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`02cbf128 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77ac2352
STACK_COMMAND: kb
FOLLOWUP_IP:
Ndu!PplGenericAllocateFunction+16
fffff800`185df4fe 4885c0 test rax,rax
SYMBOL_STACK_INDEX: a
SYMBOL_NAME: Ndu!PplGenericAllocateFunction+16
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ndu
IMAGE_NAME: Ndu.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 545054bc
IMAGE_VERSION: 6.3.9600.17415
BUCKET_ID_FUNC_OFFSET: 16
FAILURE_BUCKET_ID: 0x1E_c0000005_Ndu!PplGenericAllocateFunction
BUCKET_ID: 0x1E_c0000005_Ndu!PplGenericAllocateFunction
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x1e_c0000005_ndu!pplgenericallocatefunction
FAILURE_ID_HASH: {162ed2d6-3e28-b03c-c0f3-b58b8c6cfd89}
Followup: MachineOwner
---------
Last edited:
My Computer
System One
-
- OS
- Window 8.1