I need Help ready the analysis detail. Please !!

flylow

New Member
Messages
1
I need Help reading the analysis detail. Please !!

Can somebody help me to understand what the debugged said., please help i'm tired of the desktop hitting BSOD .

WRITE_ADDRESS: ffffd00020a34490


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.


FAULTING_IP:
nt!ExpInterlockedPopEntrySListFault+0
fffff802`407d8929 498b08 mov rcx,qword ptr [r8]


EXCEPTION_PARAMETER1: ffffd00020a34c88


EXCEPTION_PARAMETER2: ffffd00020a34490


BUGCHECK_STR: 0x1E_c0000005


CUSTOMER_CRASH_COUNT: 1


DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT


PROCESS_NAME: uTorrent.exe


CURRENT_IRQL: 2


ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre


EXCEPTION_RECORD: ffffd00020a35078 -- (.exr 0xffffd00020a35078)
ExceptionAddress: 00000000ffffffff
ExceptionCode: 00000007
ExceptionFlags: 00000000
NumberParameters: 1
Parameter[0]: ffffe001b3a5c508


LAST_CONTROL_TRANSFER: from fffff80240862fbb to fffff802407d1ca0


STACK_TEXT:
ffffd000`20a33c68 fffff802`40862fbb : 00000000`0000001e ffffffff`c0000005 fffff802`407d8929 ffffd000`20a34c88 : nt!KeBugCheckEx
ffffd000`20a33c70 fffff802`407e2816 : ffffd000`00000002 fffff800`16bf7500 00000000`00000003 fffff800`ffffffff : nt!KiFatalFilter+0x1f
ffffd000`20a33cb0 fffff802`407c0dd6 : 00000000`00000000 fffff800`16bf76e8 00000000`00000008 00000000`00000001 : nt! ?? ::FNODOBFM::`string'+0x656
ffffd000`20a33cf0 fffff802`407d91ed : 00000000`00000000 ffffd000`20a33e90 ffffd000`20a34c88 ffffd000`20a33e90 : nt!_C_specific_handler+0x86
ffffd000`20a33d60 fffff802`4074a0a5 : 00000000`00000001 fffff802`40681000 ffffd000`20a34c00 ffffd000`00000000 : nt!RtlpExecuteHandlerForException+0xd
ffffd000`20a33d90 fffff802`4074e45e : ffffd000`20a34c88 ffffd000`20a34990 ffffd000`20a34c88 00000000`00000000 : nt!RtlDispatchException+0x1a5
ffffd000`20a34460 fffff802`407dd8c2 : ffffd000`20a35078 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x646
ffffd000`20a34b50 fffff802`407dbdfe : 00000000`00000001 00000000`00000001 00000000`00000002 00000000`000052f1 : nt!KiExceptionDispatch+0xc2
ffffd000`20a34d30 fffff802`407d8929 : ffffe001`b774e480 fffff800`185df4fe ffffe001`b3bf5578 00000000`00000000 : nt!KiGeneralProtectionFault+0xfe
ffffd000`20a34ec0 fffff800`185df4fe : ffffe001`b3bf5578 00000000`00000000 ffffe001`b7315110 ffffe001`b3d84ac0 : nt!ExpInterlockedPopEntrySListFault
ffffd000`20a34ed0 fffff800`185d7d0b : ffffe001`00000000 00000000`00000000 ffffd000`20a35010 ffffd000`20a35060 : Ndu!PplGenericAllocateFunction+0x16
ffffd000`20a34f00 fffff800`185d7fb3 : 00000000`00000000 ffffe001`b7803120 ffffd000`20a35200 ffffd000`20a35008 : Ndu!NduCreateNblContext+0xc7
ffffd000`20a34f60 fffff800`185d857c : ffffe001`b3d84ac0 ffffe001`b7803120 ffffd000`20a352f0 ffffe001`bae74dd0 : Ndu!NduFindOrAssociateNblContext+0x107
ffffd000`20a34fd0 fffff800`14c1d180 : ffffe001`b788fa20 ffffd000`20a35089 ffffd000`20a35000 00000000`00000000 : Ndu!NduOutboundTransportClassify+0xbc
ffffd000`20a35020 fffff800`1506edcd : ffffd000`20a35240 ffffe001`b3844b40 00000000`00000000 ffffe001`b3844b40 : NETIO!KfdClassify2+0x180
ffffd000`20a350f0 fffff800`15088abd : 00000000`00000000 ffffd000`20a30800 00000000`00000000 00000000`00000000 : tcpip!WfpProcessOutTransportStackIndication+0x78d
ffffd000`20a35420 fffff800`15087878 : ffffd000`20a35738 ffffe001`b3bf5568 00000000`00000002 ffffd000`20a35a40 : tcpip!IppInspectLocalDatagramsOut+0x68d
ffffd000`20a35740 fffff800`1506d512 : 00000000`00000000 00000000`0000f104 fffff800`15204180 ffffe001`b79e6d70 : tcpip!IppSendDatagramsCommon+0x3f8
ffffd000`20a35920 fffff800`1506dcaa : 00000000`00000000 00000000`00000000 ffffe001`bb8cffe4 fffff800`15204180 : tcpip!UdpSendMessagesOnPathCreation+0x482
ffffd000`20a35d70 fffff800`1506e324 : 00000000`00000000 00000000`00000002 00000000`00000000 00000000`00000000 : tcpip!UdpSendMessages+0x24a
ffffd000`20a361b0 fffff802`406f3703 : ffffe001`b78c6080 ffffd000`20a36220 00000000`000419ab ffffd000`20a364a0 : tcpip!UdpTlProviderSendMessagesCalloutRoutine+0x15
ffffd000`20a361e0 fffff800`1506f5ec : fffff800`1506e310 ffffd000`20a36300 00000000`00000000 ffffe001`b77928c0 : nt!KeExpandKernelStackAndCalloutInternal+0xf3
ffffd000`20a362d0 fffff800`15646719 : ffffe001`bb8cf7b0 ffffd000`20a36b80 ffffe001`bb8cf7b0 ffffe001`bb8cf7b0 : tcpip!UdpTlProviderSendMessages+0x6c
ffffd000`20a36350 fffff800`1562e0e5 : 00000000`00000000 ffffe001`b4915240 00000000`00000000 ffffe001`b76b63f0 : afd!AfdFastDatagramSend+0x579
ffffd000`20a36510 fffff802`40aa627c : 00000000`00000000 ffffe001`b7ac26e0 00000000`00000200 00000000`00000000 : afd!AfdFastIoDeviceControl+0x10d6
ffffd000`20a36880 fffff802`40aa5d22 : 00000000`00000000 0000000c`001f0003 00000000`00000001 00000000`00000000 : nt!IopXxxControlFile+0x54c
ffffd000`20a36a20 fffff802`407dd4b3 : 00000000`00000102 ffffd000`20a36ad8 00000000`00000000 00000000`00000001 : nt!NtDeviceIoControlFile+0x56
ffffd000`20a36a90 00000000`77ac2352 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`02cbf128 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77ac2352




STACK_COMMAND: kb


FOLLOWUP_IP:
Ndu!PplGenericAllocateFunction+16
fffff800`185df4fe 4885c0 test rax,rax


SYMBOL_STACK_INDEX: a


SYMBOL_NAME: Ndu!PplGenericAllocateFunction+16


FOLLOWUP_NAME: MachineOwner


MODULE_NAME: Ndu


IMAGE_NAME: Ndu.sys


DEBUG_FLR_IMAGE_TIMESTAMP: 545054bc


IMAGE_VERSION: 6.3.9600.17415


BUCKET_ID_FUNC_OFFSET: 16


FAILURE_BUCKET_ID: 0x1E_c0000005_Ndu!PplGenericAllocateFunction


BUCKET_ID: 0x1E_c0000005_Ndu!PplGenericAllocateFunction


ANALYSIS_SOURCE: KM


FAILURE_ID_HASH_STRING: km:0x1e_c0000005_ndu!pplgenericallocatefunction


FAILURE_ID_HASH: {162ed2d6-3e28-b03c-c0f3-b58b8c6cfd89}


Followup: MachineOwner
---------
 
Last edited:

My Computer

System One

  • OS
    Window 8.1
Hi,


I am extremely sorry that this thread was not attended to. There are not many people in this field.


In case you still require help, kindly respond to this thread and I will be notified via email and you should expect a response from me in 48 hours.


Regards,
Pranav
 

My Computer

System One

  • OS
    Windows 8.1 Industry Pro B-)
    Computer type
    Laptop
    System Manufacturer/Model
    Toshiba
    CPU
    Core I5 2430M @ 2.4GHz
    Memory
    8 GB DDR3 @ 1600MHz Dual Channel ^_^
    Graphics Card(s)
    Intel HD 3000 B-)
    Screen Resolution
    1366x768
    Hard Drives
    Toshiba 500 GB
    Browser
    Google Chrome
    Antivirus
    Windows Defender & Common Sense!
Back
Top