
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\062117-29874-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.23807.amd64fre.win7sp1_ldr.170512-0600
Machine Name:
Kernel base = 0xfffff800`0301f000 PsLoadedModuleList = 0xfffff800`03261750
Debug session time: Wed Jun 21 22:54:23.891 2017 (GMT+2)
System Uptime: 6 days 3:52:51.366
Loading Kernel Symbols
...............................................................
................................................................
..................................
Loading User Symbols
Loading unloaded module list
.......................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, 1a75e0, fffff88002952fc0, 0}

Probably caused by : Ntfs.sys ( Ntfs!NtfsCommonCreate+2173 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: 00000000001a75e0, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88002952fc0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Instrukce na adrese 0x%08lx odkazovala na adresu pam

FAULTING_IP: 
+c3
00000000`001a75e0 ??              ???

CONTEXT:  fffff88002952fc0 -- (.cxr 0xfffff88002952fc0)
rax=0000000000000000 rbx=fffff8000337def9 rcx=0000000000000000
rdx=00000000000007ff rsi=fffff88002953a30 rdi=ffffddfc00000000
rip=00000000001a75e0 rsp=fffff88002953988 rbp=0000000000000000
 r8=fffffa80075670f8  r9=0000000000000000 r10=fffffffffffffffe
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=fffff80003385b16 r15=fffffa8007573c58
iopl=0         nv up ei ng nz na po nc
cs=0000  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
00000000`001a75e0 ??              ???
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to 00000000001a75e0

SYMBOL_ON_RAW_STACK:  1

STACK_ADDR_RAW_STACK_SYMBOL: fffff88002952af0

STACK_COMMAND:  dds 02952AF0-0x20 ; kb

STACK_TEXT:  
00000000`02952ad0  ????????
00000000`02952ad4  ????????
00000000`02952ad8  ????????
00000000`02952adc  ????????
00000000`02952ae0  ????????
00000000`02952ae4  ????????
00000000`02952ae8  ????????
00000000`02952aec  ????????
00000000`02952af0  ????????
00000000`02952af4  ????????
00000000`02952af8  ????????
00000000`02952afc  ????????
00000000`02952b00  ????????
00000000`02952b04  ????????
00000000`02952b08  ????????
00000000`02952b0c  ????????
00000000`02952b10  ????????
00000000`02952b14  ????????
00000000`02952b18  ????????
00000000`02952b1c  ????????
00000000`02952b20  ????????
00000000`02952b24  ????????
00000000`02952b28  ????????
00000000`02952b2c  ????????
00000000`02952b30  ????????
00000000`02952b34  ????????
00000000`02952b38  ????????
00000000`02952b3c  ????????
00000000`02952b40  ????????
00000000`02952b44  ????????
00000000`02952b48  ????????
00000000`02952b4c  ????????


FOLLOWUP_IP: 
Ntfs!NtfsCommonCreate+2173
fffff880`012b199a 8bc7            mov     eax,edi

SYMBOL_NAME:  Ntfs!NtfsCommonCreate+2173

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  5693e8a9

FAILURE_BUCKET_ID:  X64_0x3B_Ntfs!NtfsCommonCreate+2173

BUCKET_ID:  X64_0x3B_Ntfs!NtfsCommonCreate+2173

Followup: MachineOwner
---------

