Ivrs64 sys ошибка что это

Содержание

• Причина 1: Проблемный драйвер
• Причина 2: Переустановка ПО для веб-камеры
• Причина 3: Конфликт с недавно установленным софтом
• Причина 4: Вирусы
• Причина 5: Нарушение целостности системных файлов
• Вопросы и ответы

Answers

• Th3gre3k

  This verified DMP was Related to
  lvrs64.sys Kernel Audio Improvement Filter Driver from Logitech Inc.  It is still install and still crashing and taking audiodg with it.

  Microsoft (R) Windows Debugger Version 6.3.9600.16384 AMD64
  Copyright (c) Microsoft Corporation. All rights reserved.
  
  
  Loading Dump File [C:UsersKenDesktop120313-37234-01.dmp]
  Mini Kernel Dump File: Only registers and stack trace are available
  
  
  ************* Symbol Path validation summary **************
  Response                         Time (ms)     Location
  Deferred                                       SRV*H:symbols*http://msdl.microsoft.com/download/symbols
  Symbol search path is: SRV*H:symbols*http://msdl.microsoft.com/download/symbols
  Executable search path is: 
  Windows 8 Kernel Version 9600 MP (12 procs) Free x64
  Product: WinNt, suite: TerminalServer SingleUserTS
  Built by: 9600.16422.amd64fre.winblue_gdr.131006-1505
  Machine Name:
  Kernel base = 0xfffff801`c9001000 PsLoadedModuleList = 0xfffff801`c92c5990
  Debug session time: Wed Dec  4 01:44:01.417 2013 (UTC - 5:00)
  System Uptime: 0 days 22:21:55.861
  Loading Kernel Symbols
  ...............................................................
  ................................................................
  ................................
  Loading User Symbols
  Loading unloaded module list
  ...........
  *******************************************************************************
  *                                                                             *
  *                        Bugcheck Analysis                                    *
  *                                                                             *
  *******************************************************************************
  
  Use !analyze -v to get detailed debugging information.
  
  BugCheck 3B, {c0000005, fffff80002affca0, ffffd00022c37850, 0}
  
  *** WARNING: Unable to verify timestamp for lvrs64.sys
  *** ERROR: Module load completed but symbols could not be loaded for lvrs64.sys
  Probably caused by : lvrs64.sys ( lvrs64+37ca0 )
  
  Followup: MachineOwner
  ---------
  
  1: kd> !analyze -v
  *******************************************************************************
  *                                                                             *
  *                        Bugcheck Analysis                                    *
  *                                                                             *
  *******************************************************************************
  
  SYSTEM_SERVICE_EXCEPTION (3b)
  An exception happened while executing a system service routine.
  Arguments:
  Arg1: 00000000c0000005, Exception code that caused the bugcheck
  Arg2: fffff80002affca0, Address of the instruction which caused the bugcheck
  Arg3: ffffd00022c37850, Address of the context record for the exception that caused the bugcheck
  Arg4: 0000000000000000, zero.
  
  Debugging Details:
  ------------------
  
  
  EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
  
  FAULTING_IP: 
  lvrs64+37ca0
  fffff800`02affca0 488911          mov     qword ptr [rcx],rdx
  
  CONTEXT:  ffffd00022c37850 -- (.cxr 0xffffd00022c37850;r)
  rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
  rdx=0000000000000000 rsi=0000000000000052 rdi=0000000080000005
  rip=fffff80002affca0 rsp=ffffd00022c38288 rbp=ffffcf800363eed8
   r8=0000000000000012  r9=0000000000000001 r10=0000000000000000
  r11=ffffd00022c381b0 r12=ffffcf80009fadf0 r13=0000000000000000
  r14=ffffcf8001bb6f80 r15=ffffcf8002876e70
  iopl=0         nv up ei ng nz na pe cy
  cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010283
  lvrs64+0x37ca0:
  fffff800`02affca0 488911          mov     qword ptr [rcx],rdx ds:002b:00000000`00000000=????????????????
  Last set context:
  rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
  rdx=0000000000000000 rsi=0000000000000052 rdi=0000000080000005
  rip=fffff80002affca0 rsp=ffffd00022c38288 rbp=ffffcf800363eed8
   r8=0000000000000012  r9=0000000000000001 r10=0000000000000000
  r11=ffffd00022c381b0 r12=ffffcf80009fadf0 r13=0000000000000000
  r14=ffffcf8001bb6f80 r15=ffffcf8002876e70
  iopl=0         nv up ei ng nz na pe cy
  cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010283
  lvrs64+0x37ca0:
  fffff800`02affca0 488911          mov     qword ptr [rcx],rdx ds:002b:00000000`00000000=????????????????
  Resetting default scope
  
  CUSTOMER_CRASH_COUNT:  1
  
  DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
  
  BUGCHECK_STR:  0x3B
  
  PROCESS_NAME:  audiodg.exe
  
  CURRENT_IRQL:  0
  
  ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
  
  LAST_CONTROL_TRANSFER:  from fffff80002adc382 to fffff80002affca0
  
  STACK_TEXT:  
  ffffd000`22c38288 fffff800`02adc382 : 00000000`80000005 ffffcf80`0363eed8 00000000`00000052 fffff800`02acc6c7 : lvrs64+0x37ca0
  ffffd000`22c38290 00000000`80000005 : ffffcf80`0363eed8 00000000`00000052 fffff800`02acc6c7 00000000`00000000 : lvrs64+0x14382
  ffffd000`22c38298 ffffcf80`0363eed8 : 00000000`00000052 fffff800`02acc6c7 00000000`00000000 00000000`00000000 : 0x80000005
  ffffd000`22c382a0 00000000`00000052 : fffff800`02acc6c7 00000000`00000000 00000000`00000000 00000000`00000000 : 0xffffcf80`0363eed8
  ffffd000`22c382a8 fffff800`02acc6c7 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffd000`22c382f0 : 0x52
  ffffd000`22c382b0 00000000`00000000 : 00000000`00000000 00000000`00000000 ffffd000`22c382f0 ffffd000`22c382e0 : lvrs64+0x46c7
  
  
  FOLLOWUP_IP: 
  lvrs64+37ca0
  fffff800`02affca0 488911          mov     qword ptr [rcx],rdx
  
  SYMBOL_STACK_INDEX:  0
  
  SYMBOL_NAME:  lvrs64+37ca0
  
  FOLLOWUP_NAME:  MachineOwner
  
  MODULE_NAME: lvrs64
  
  IMAGE_NAME:  lvrs64.sys
  
  DEBUG_FLR_IMAGE_TIMESTAMP:  5085fccc
  
  STACK_COMMAND:  .cxr 0xffffd00022c37850 ; kb
  
  FAILURE_BUCKET_ID:  0x3B_VRF_lvrs64+37ca0
  
  BUCKET_ID:  0x3B_VRF_lvrs64+37ca0
  
  ANALYSIS_SOURCE:  KM
  
  FAILURE_ID_HASH_STRING:  km:0x3b_vrf_lvrs64+37ca0
  
  FAILURE_ID_HASH:  {72a53d32-a793-16bf-9b22-f028278db442}
  
  Followup: MachineOwner
  ---------
  
  

  ---

  Wanikiya and Dyami—Team Zigzag

  • Marked as answer by

    Tuesday, May 13, 2014 1:14 AM

Answers

• Th3gre3k

  This verified DMP was Related to
  lvrs64.sys Kernel Audio Improvement Filter Driver from Logitech Inc.  It is still install and still crashing and taking audiodg with it.

  Microsoft (R) Windows Debugger Version 6.3.9600.16384 AMD64
  Copyright (c) Microsoft Corporation. All rights reserved.
  
  
  Loading Dump File [C:UsersKenDesktop120313-37234-01.dmp]
  Mini Kernel Dump File: Only registers and stack trace are available
  
  
  ************* Symbol Path validation summary **************
  Response                         Time (ms)     Location
  Deferred                                       SRV*H:symbols*http://msdl.microsoft.com/download/symbols
  Symbol search path is: SRV*H:symbols*http://msdl.microsoft.com/download/symbols
  Executable search path is: 
  Windows 8 Kernel Version 9600 MP (12 procs) Free x64
  Product: WinNt, suite: TerminalServer SingleUserTS
  Built by: 9600.16422.amd64fre.winblue_gdr.131006-1505
  Machine Name:
  Kernel base = 0xfffff801`c9001000 PsLoadedModuleList = 0xfffff801`c92c5990
  Debug session time: Wed Dec  4 01:44:01.417 2013 (UTC - 5:00)
  System Uptime: 0 days 22:21:55.861
  Loading Kernel Symbols
  ...............................................................
  ................................................................
  ................................
  Loading User Symbols
  Loading unloaded module list
  ...........
  *******************************************************************************
  *                                                                             *
  *                        Bugcheck Analysis                                    *
  *                                                                             *
  *******************************************************************************
  
  Use !analyze -v to get detailed debugging information.
  
  BugCheck 3B, {c0000005, fffff80002affca0, ffffd00022c37850, 0}
  
  *** WARNING: Unable to verify timestamp for lvrs64.sys
  *** ERROR: Module load completed but symbols could not be loaded for lvrs64.sys
  Probably caused by : lvrs64.sys ( lvrs64+37ca0 )
  
  Followup: MachineOwner
  ---------
  
  1: kd> !analyze -v
  *******************************************************************************
  *                                                                             *
  *                        Bugcheck Analysis                                    *
  *                                                                             *
  *******************************************************************************
  
  SYSTEM_SERVICE_EXCEPTION (3b)
  An exception happened while executing a system service routine.
  Arguments:
  Arg1: 00000000c0000005, Exception code that caused the bugcheck
  Arg2: fffff80002affca0, Address of the instruction which caused the bugcheck
  Arg3: ffffd00022c37850, Address of the context record for the exception that caused the bugcheck
  Arg4: 0000000000000000, zero.
  
  Debugging Details:
  ------------------
  
  
  EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
  
  FAULTING_IP: 
  lvrs64+37ca0
  fffff800`02affca0 488911          mov     qword ptr [rcx],rdx
  
  CONTEXT:  ffffd00022c37850 -- (.cxr 0xffffd00022c37850;r)
  rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
  rdx=0000000000000000 rsi=0000000000000052 rdi=0000000080000005
  rip=fffff80002affca0 rsp=ffffd00022c38288 rbp=ffffcf800363eed8
   r8=0000000000000012  r9=0000000000000001 r10=0000000000000000
  r11=ffffd00022c381b0 r12=ffffcf80009fadf0 r13=0000000000000000
  r14=ffffcf8001bb6f80 r15=ffffcf8002876e70
  iopl=0         nv up ei ng nz na pe cy
  cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010283
  lvrs64+0x37ca0:
  fffff800`02affca0 488911          mov     qword ptr [rcx],rdx ds:002b:00000000`00000000=????????????????
  Last set context:
  rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
  rdx=0000000000000000 rsi=0000000000000052 rdi=0000000080000005
  rip=fffff80002affca0 rsp=ffffd00022c38288 rbp=ffffcf800363eed8
   r8=0000000000000012  r9=0000000000000001 r10=0000000000000000
  r11=ffffd00022c381b0 r12=ffffcf80009fadf0 r13=0000000000000000
  r14=ffffcf8001bb6f80 r15=ffffcf8002876e70
  iopl=0         nv up ei ng nz na pe cy
  cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010283
  lvrs64+0x37ca0:
  fffff800`02affca0 488911          mov     qword ptr [rcx],rdx ds:002b:00000000`00000000=????????????????
  Resetting default scope
  
  CUSTOMER_CRASH_COUNT:  1
  
  DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
  
  BUGCHECK_STR:  0x3B
  
  PROCESS_NAME:  audiodg.exe
  
  CURRENT_IRQL:  0
  
  ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
  
  LAST_CONTROL_TRANSFER:  from fffff80002adc382 to fffff80002affca0
  
  STACK_TEXT:  
  ffffd000`22c38288 fffff800`02adc382 : 00000000`80000005 ffffcf80`0363eed8 00000000`00000052 fffff800`02acc6c7 : lvrs64+0x37ca0
  ffffd000`22c38290 00000000`80000005 : ffffcf80`0363eed8 00000000`00000052 fffff800`02acc6c7 00000000`00000000 : lvrs64+0x14382
  ffffd000`22c38298 ffffcf80`0363eed8 : 00000000`00000052 fffff800`02acc6c7 00000000`00000000 00000000`00000000 : 0x80000005
  ffffd000`22c382a0 00000000`00000052 : fffff800`02acc6c7 00000000`00000000 00000000`00000000 00000000`00000000 : 0xffffcf80`0363eed8
  ffffd000`22c382a8 fffff800`02acc6c7 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffd000`22c382f0 : 0x52
  ffffd000`22c382b0 00000000`00000000 : 00000000`00000000 00000000`00000000 ffffd000`22c382f0 ffffd000`22c382e0 : lvrs64+0x46c7
  
  
  FOLLOWUP_IP: 
  lvrs64+37ca0
  fffff800`02affca0 488911          mov     qword ptr [rcx],rdx
  
  SYMBOL_STACK_INDEX:  0
  
  SYMBOL_NAME:  lvrs64+37ca0
  
  FOLLOWUP_NAME:  MachineOwner
  
  MODULE_NAME: lvrs64
  
  IMAGE_NAME:  lvrs64.sys
  
  DEBUG_FLR_IMAGE_TIMESTAMP:  5085fccc
  
  STACK_COMMAND:  .cxr 0xffffd00022c37850 ; kb
  
  FAILURE_BUCKET_ID:  0x3B_VRF_lvrs64+37ca0
  
  BUCKET_ID:  0x3B_VRF_lvrs64+37ca0
  
  ANALYSIS_SOURCE:  KM
  
  FAILURE_ID_HASH_STRING:  km:0x3b_vrf_lvrs64+37ca0
  
  FAILURE_ID_HASH:  {72a53d32-a793-16bf-9b22-f028278db442}
  
  Followup: MachineOwner
  ---------
  
  

  ---

  Wanikiya and Dyami—Team Zigzag

  • Marked as answer by

    Tuesday, May 13, 2014 1:14 AM

Answers

• Th3gre3k

  This verified DMP was Related to
  lvrs64.sys Kernel Audio Improvement Filter Driver from Logitech Inc.  It is still install and still crashing and taking audiodg with it.

  Microsoft (R) Windows Debugger Version 6.3.9600.16384 AMD64
  Copyright (c) Microsoft Corporation. All rights reserved.
  
  
  Loading Dump File [C:UsersKenDesktop120313-37234-01.dmp]
  Mini Kernel Dump File: Only registers and stack trace are available
  
  
  ************* Symbol Path validation summary **************
  Response                         Time (ms)     Location
  Deferred                                       SRV*H:symbols*http://msdl.microsoft.com/download/symbols
  Symbol search path is: SRV*H:symbols*http://msdl.microsoft.com/download/symbols
  Executable search path is: 
  Windows 8 Kernel Version 9600 MP (12 procs) Free x64
  Product: WinNt, suite: TerminalServer SingleUserTS
  Built by: 9600.16422.amd64fre.winblue_gdr.131006-1505
  Machine Name:
  Kernel base = 0xfffff801`c9001000 PsLoadedModuleList = 0xfffff801`c92c5990
  Debug session time: Wed Dec  4 01:44:01.417 2013 (UTC - 5:00)
  System Uptime: 0 days 22:21:55.861
  Loading Kernel Symbols
  ...............................................................
  ................................................................
  ................................
  Loading User Symbols
  Loading unloaded module list
  ...........
  *******************************************************************************
  *                                                                             *
  *                        Bugcheck Analysis                                    *
  *                                                                             *
  *******************************************************************************
  
  Use !analyze -v to get detailed debugging information.
  
  BugCheck 3B, {c0000005, fffff80002affca0, ffffd00022c37850, 0}
  
  *** WARNING: Unable to verify timestamp for lvrs64.sys
  *** ERROR: Module load completed but symbols could not be loaded for lvrs64.sys
  Probably caused by : lvrs64.sys ( lvrs64+37ca0 )
  
  Followup: MachineOwner
  ---------
  
  1: kd> !analyze -v
  *******************************************************************************
  *                                                                             *
  *                        Bugcheck Analysis                                    *
  *                                                                             *
  *******************************************************************************
  
  SYSTEM_SERVICE_EXCEPTION (3b)
  An exception happened while executing a system service routine.
  Arguments:
  Arg1: 00000000c0000005, Exception code that caused the bugcheck
  Arg2: fffff80002affca0, Address of the instruction which caused the bugcheck
  Arg3: ffffd00022c37850, Address of the context record for the exception that caused the bugcheck
  Arg4: 0000000000000000, zero.
  
  Debugging Details:
  ------------------
  
  
  EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
  
  FAULTING_IP: 
  lvrs64+37ca0
  fffff800`02affca0 488911          mov     qword ptr [rcx],rdx
  
  CONTEXT:  ffffd00022c37850 -- (.cxr 0xffffd00022c37850;r)
  rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
  rdx=0000000000000000 rsi=0000000000000052 rdi=0000000080000005
  rip=fffff80002affca0 rsp=ffffd00022c38288 rbp=ffffcf800363eed8
   r8=0000000000000012  r9=0000000000000001 r10=0000000000000000
  r11=ffffd00022c381b0 r12=ffffcf80009fadf0 r13=0000000000000000
  r14=ffffcf8001bb6f80 r15=ffffcf8002876e70
  iopl=0         nv up ei ng nz na pe cy
  cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010283
  lvrs64+0x37ca0:
  fffff800`02affca0 488911          mov     qword ptr [rcx],rdx ds:002b:00000000`00000000=????????????????
  Last set context:
  rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
  rdx=0000000000000000 rsi=0000000000000052 rdi=0000000080000005
  rip=fffff80002affca0 rsp=ffffd00022c38288 rbp=ffffcf800363eed8
   r8=0000000000000012  r9=0000000000000001 r10=0000000000000000
  r11=ffffd00022c381b0 r12=ffffcf80009fadf0 r13=0000000000000000
  r14=ffffcf8001bb6f80 r15=ffffcf8002876e70
  iopl=0         nv up ei ng nz na pe cy
  cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010283
  lvrs64+0x37ca0:
  fffff800`02affca0 488911          mov     qword ptr [rcx],rdx ds:002b:00000000`00000000=????????????????
  Resetting default scope
  
  CUSTOMER_CRASH_COUNT:  1
  
  DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
  
  BUGCHECK_STR:  0x3B
  
  PROCESS_NAME:  audiodg.exe
  
  CURRENT_IRQL:  0
  
  ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
  
  LAST_CONTROL_TRANSFER:  from fffff80002adc382 to fffff80002affca0
  
  STACK_TEXT:  
  ffffd000`22c38288 fffff800`02adc382 : 00000000`80000005 ffffcf80`0363eed8 00000000`00000052 fffff800`02acc6c7 : lvrs64+0x37ca0
  ffffd000`22c38290 00000000`80000005 : ffffcf80`0363eed8 00000000`00000052 fffff800`02acc6c7 00000000`00000000 : lvrs64+0x14382
  ffffd000`22c38298 ffffcf80`0363eed8 : 00000000`00000052 fffff800`02acc6c7 00000000`00000000 00000000`00000000 : 0x80000005
  ffffd000`22c382a0 00000000`00000052 : fffff800`02acc6c7 00000000`00000000 00000000`00000000 00000000`00000000 : 0xffffcf80`0363eed8
  ffffd000`22c382a8 fffff800`02acc6c7 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffd000`22c382f0 : 0x52
  ffffd000`22c382b0 00000000`00000000 : 00000000`00000000 00000000`00000000 ffffd000`22c382f0 ffffd000`22c382e0 : lvrs64+0x46c7
  
  
  FOLLOWUP_IP: 
  lvrs64+37ca0
  fffff800`02affca0 488911          mov     qword ptr [rcx],rdx
  
  SYMBOL_STACK_INDEX:  0
  
  SYMBOL_NAME:  lvrs64+37ca0
  
  FOLLOWUP_NAME:  MachineOwner
  
  MODULE_NAME: lvrs64
  
  IMAGE_NAME:  lvrs64.sys
  
  DEBUG_FLR_IMAGE_TIMESTAMP:  5085fccc
  
  STACK_COMMAND:  .cxr 0xffffd00022c37850 ; kb
  
  FAILURE_BUCKET_ID:  0x3B_VRF_lvrs64+37ca0
  
  BUCKET_ID:  0x3B_VRF_lvrs64+37ca0
  
  ANALYSIS_SOURCE:  KM
  
  FAILURE_ID_HASH_STRING:  km:0x3b_vrf_lvrs64+37ca0
  
  FAILURE_ID_HASH:  {72a53d32-a793-16bf-9b22-f028278db442}
  
  Followup: MachineOwner
  ---------
  
  

  ---

  Wanikiya and Dyami—Team Zigzag

  • Marked as answer by

    Tuesday, May 13, 2014 1:14 AM