WinDbg ile IRQL_NOT_LESS_OR_EQUAL hatası Çözün

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`0361b000 PsLoadedModuleList = 0xfffff800`03860e90
Debug session time: Sat Apr  9 13:15:31.986 2011 (UTC + 3:00)
System Uptime: 0 days 0:00:10.235
Loading Kernel Symbols
...............................................................
...............................................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 000007ff`fffda018).  Type ".hh dbgerr001" for details
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {22, 2, 0, fffff800036e4eb7}

Page 9a351 not present in the dump file. Type ".hh dbgerr004" for details
Probably caused by : ntkrnlmp.exe ( nt!IoBoostThreadIoPriority+1e7 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000022, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
	bit 0 : value 0 = read operation, 1 = write operation
	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800036e4eb7, address which referenced memory

Debugging Details:
------------------

Page 9a351 not present in the dump file. Type ".hh dbgerr004" for details

READ_ADDRESS:  0000000000000022 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!IoBoostThreadIoPriority+1e7
fffff800`036e4eb7 418a442422      mov     al,byte ptr [r12+22h]

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  csrss.exe

TRAP_FRAME:  fffff880051eac60 -- (.trap 0xfffff880051eac60)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff880051eae70 rbx=0000000000000000 rcx=fffff880051eae88
rdx=fffffa8004ab383e rsi=0000000000000000 rdi=0000000000000000
rip=fffff800036e4eb7 rsp=fffff880051eadf0 rbp=0000000000000000
 r8=3333333333333333  r9=0000000000000000 r10=0000000000000000
r11=0f0f0f0f0f0f0f0f r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz ac pe cy
nt!IoBoostThreadIoPriority+0x1e7:
fffff800`036e4eb7 418a442422      mov     al,byte ptr [r12+22h] ds:0001:00000000`00000022=??
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff8000369abe9 to fffff8000369b640

STACK_TEXT:  
fffff880`051eab18 fffff800`0369abe9 : 00000000`0000000a 00000000`00000022 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`051eab20 fffff800`03699860 : 00000000`00000000 00000000`00010000 00000000`00f80000 00000000`00000001 : nt!KiBugCheckDispatch+0x69
fffff880`051eac60 fffff800`036e4eb7 : 00000000`00000008 fffff880`051eae50 00000000`00000001 fffff800`0369df52 : nt!KiPageFault+0x260
fffff880`051eadf0 fffff800`0367c0fd : fffff800`0381bcc0 fffff880`00000002 fffff800`0381c0a8 fffff880`051eae70 : nt!IoBoostThreadIoPriority+0x1e7
fffff880`051eafa0 fffff800`0367c1bd : fffff800`03860ee0 00000000`00000001 00000000`00000000 fffff880`03140180 : nt!ExpCheckForIoPriorityBoost+0x151
fffff880`051eafe0 fffff800`036a15cc : ffffffff`ffb3b4c0 fffffa80`05784090 fffff800`03860ee0 fffff8a0`0000001e : nt!ExpWaitForResource+0x8d
fffff880`051eb050 fffff800`039a4bdc : 00000000`00000000 00000000`00000000 fffff880`051eb530 00000000`00000000 : nt!ExAcquireResourceExclusiveLite+0x14f
fffff880`051eb0c0 fffff800`039a5949 : 00000000`00000000 00000000`00000000 fffff800`03c51000 fffff800`037c3514 : nt!ExpQuerySystemInformation+0xc9a
fffff880`051eb470 fffff800`0369a8d3 : 00000014`00000000 00000000`00000000 00000000`00000000 fffff800`038226c8 : nt!NtQuerySystemInformation+0x4d
fffff880`051eb4b0 fffff800`03696e70 : fffff800`03c51708 00000000`00000000 fffff800`03c52000 00000000`00000100 : nt!KiSystemServiceCopyEnd+0x13
fffff880`051eb648 fffff800`03c51708 : 00000000`00000000 fffff800`03c52000 00000000`00000100 00000000`00000c00 : nt!KiServiceLinkage
fffff880`051eb650 00000000`00000000 : fffff800`03c52000 00000000`00000100 00000000`00000c00 fffffa80`0516b990 : halsli!_NULL_IMPORT_DESCRIPTOR <PERF> (halsli+0x4a708)


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!IoBoostThreadIoPriority+1e7
fffff800`036e4eb7 418a442422      mov     al,byte ptr [r12+22h]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!IoBoostThreadIoPriority+1e7

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7951a

FAILURE_BUCKET_ID:  X64_0xA_nt!IoBoostThreadIoPriority+1e7

BUCKET_ID:  X64_0xA_nt!IoBoostThreadIoPriority+1e7

Followup: MachineOwner
---------