1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

bugcheck code 0000050 can anybody make sense of this.

Discussion in 'Legacy Windows' started by david451, 2005/01/24.

Thread Status:
Not open for further replies.
  1. 2005/01/24
    david451

    david451 Inactive Thread Starter

    Joined:
    2005/01/24
    Messages:
    8
    Likes Received:
    0
    ****************************************************************
    **
    ** Windows 2000 Crash Dump Analysis
    **
    ****************************************************************
    *
    Filename . . . . . . .mini012305-01.dmp
    Signature. . . . . . .PAGE
    ValidDump. . . . . . .DUMP
    MajorVersion . . . . .free system
    MinorVersion . . . . .2195
    DirectoryTableBase . .0x0ffbe000
    PfnDataBase. . . . . .0x820c3000
    PsLoadedModuleList . .0x804805c0
    PsActiveProcessHead. .0x80481d28
    MachineImageType . . .i386
    NumberProcessors . . .1
    BugCheckCode . . . . .0x00000050
    BugCheckParameter1 . .0xbefd5c08
    BugCheckParameter2 . .0x00000000
    BugCheckParameter3 . .0xbff38750
    BugCheckParameter4 . .0x00000000

    ExceptionCode. . . . .0x80000003
    ExceptionFlags . . . .0x00000001
    ExceptionAddress . . .0x80448b5b


    Module ntoskrnl.exe loaded at 0x80400000
    Module hal.dll loaded at 0x80062000
    Module BOOTVID.dll loaded at 0xf2410000
    Module pci.sys loaded at 0xf2000000
    Module isapnp.sys loaded at 0xf2010000
    Module pciide.sys loaded at 0xf25c8000
    Module PCIIDEX.SYS loaded at 0xf2280000
    Module MountMgr.sys loaded at 0xf2288000
    Module ftdisk.sys loaded at 0xbffe3000
    Module Diskperf.sys loaded at 0xf2500000
    Module WMILIB.SYS loaded at 0xf25c9000
    Module dmload.sys loaded at 0xf2502000
    Module dmio.sys loaded at 0xbffc1000
    Module PartMgr.sys loaded at 0xf2414000
    Module atapi.sys loaded at 0xbffab000
    Module disk.sys loaded at 0xf2290000
    Module CLASSPNP.SYS loaded at 0xf2020000
    Module KSecDD.sys loaded at 0xbff99000
    Module Ntfs.sys loaded at 0xbff1b000
    Module NDIS.sys loaded at 0xbfef1000
    Module Gernuwa.sys loaded at 0xf2418000
    Module viaagp.sys loaded at 0xf2298000
    Module Mup.sys loaded at 0xbfedb000
    Module audstub.sys loaded at 0xf25cd000
    Module rasl2tp.sys loaded at 0xf2050000
    Module ndistapi.sys loaded at 0xf2474000
    Module ndiswan.sys loaded at 0xbfea4000
    Module TDI.SYS loaded at 0xf2484000
    Module raspptp.sys loaded at 0xf2060000
    Module ptilink.sys loaded at 0xf22b8000
    Module raspti.sys loaded at 0xf22c8000
    Module parallel.sys loaded at 0xf2070000
    Module VIDEOPRT.SYS loaded at 0xf2090000
    Module SiSV.sys loaded at 0xf2080000
    Module aw_host5.sys loaded at 0xf22f0000
    Module cdrom.sys loaded at 0xf2308000
    Module KS.SYS loaded at 0xbfe50000
    Module portcls.sys loaded at 0xbfe6c000
    Module viaudio.sys loaded at 0xbfe91000
    Module e100bnt5.sys loaded at 0xbfe2b000
    Module swenum.sys loaded at 0xf25df000
    Module update.sys loaded at 0xbfe00000
    Module i8042prt.sys loaded at 0xf20a0000
    Module kbdclass.sys loaded at 0xf2328000
    Module parport.sys loaded at 0xf2338000
    Module serial.sys loaded at 0xf20b0000
    Module serenum.sys loaded at 0xf249c000
    Module fdc.sys loaded at 0xf2350000
    Module mouclass.sys loaded at 0xf2360000
    Module NDProxy.SYS loaded at 0xf20c0000
    Module EFS.SYS loaded at 0xf2370000
    Module flpydisk.sys loaded at 0xf2380000
    Module Fs_Rec.SYS loaded at 0xf250a000
    Module Null.SYS loaded at 0xf25f2000
    Module Beep.SYS loaded at 0xf25f4000
    Module vga.sys loaded at 0xf24bc000
    Module awlegacy.sys loaded at 0xf24c4000
    Module mnmdd.SYS loaded at 0xf25f8000
    Module Msfs.SYS loaded at 0xf23a0000
    Module Npfs.SYS loaded at 0xf20e0000
    Module rasacd.sys loaded at 0xf2512000
    Module tcpip.sys loaded at 0xbf846000
    Module msgpc.sys loaded at 0xf20f0000
    Module netbt.sys loaded at 0xbf81e000
    Module wanarp.sys loaded at 0xf23c0000
    Module netbios.sys loaded at 0xf2100000
    Module rdbss.sys loaded at 0xbf7f3000
    Module mrxsmb.sys loaded at 0xbf77a000
    Module dump_WMILIB.SYS loaded at 0xf2624000
    Module dump_atapi.sys loaded at 0xbf73c000
    Module win32k.sys loaded at 0xa0000000
    Module AWDDI.DLL loaded at 0xf262c000
    Module SiSV256.DLL loaded at 0xbf70e000
    Module awvid5.dll loaded at 0xbfdfc000
    Module NISDRV.SYS loaded at 0xbf1a0000
    Module DNSFILT.SYS loaded at 0xf2552000
    Module HTTPFILT.SYS loaded at 0xbf18f000
    Module SYMFILT.SYS loaded at 0xf2388000
    Module FWFILT.SYS loaded at 0xf2210000
    Module NDISFILT.SYS loaded at 0xf2398000
    Module afd.sys loaded at 0xbf171000
    Module Gloaddrv.sys loaded at 0xbf20c000
    Module ParVdm.SYS loaded at 0xf2572000
    Module DLGCCORE.SYS loaded at 0xf2260000
    Module DlgcSram.sys loaded at 0xbf12d000
    Module Fips.SYS loaded at 0xf2240000
    Module srv.sys loaded at 0xbeee9000
    Module wdmaud.sys loaded at 0xbeed7000
    Module sysaudio.sys loaded at 0xbf08d000
    Module Cdfs.SYS loaded at 0xbee67000
    Module Fastfat.SYS loaded at 0xbe9e1000
    Module ipsec.sys loaded at 0xbe60d000

    I got this from checkdmp.exe /V xxx.dmp
    Is there better options might use.
    Thanks,
    David
     
  2. 2005/01/24
    BenMcDonald[MS]

    BenMcDonald[MS] Inactive

    Joined:
    2004/12/14
    Messages:
    228
    Likes Received:
    0

  3. to hide this advert.

  4. 2005/01/25
    david451

    david451 Inactive Thread Starter

    Joined:
    2005/01/24
    Messages:
    8
    Likes Received:
    0
    So what do you make of this. It does seem more useful, question:
    Is it important to run these on the meain the problem occured on.
    I am NOT doing that currently. I am taking the minidump file to
    another windows 2000 machine and running debugwiz there.

    Thanks,
    David
    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.4.0007.2
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\centurytel\Logs\KOKC\minidmp\Mini012305-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
    Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
    Kernel base = 0x80400000 PsLoadedModuleList = 0x804805c0
    Debug session time: Sun Jan 23 10:56:40.924 2005 (GMT-6)
    System Uptime: not available
    Loading Kernel Symbols
    ...........................................................................................
    Loading unloaded module list
    .........
    Loading User Symbols
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 50, {befd5c08, 0, bff38750, 0}


    Could not read faulting driver name
    Probably caused by : Ntfs.sys ( Ntfs!NtfsCopyReadA+2d2 )

    Followup: MachineOwner
    ---------

    kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    PAGE_FAULT_IN_NONPAGED_AREA (50)
    Invalid system memory was referenced. This cannot be protected by try-except,
    it must be protected by a Probe. Typically the address is just plain bad or it
    is pointing at freed memory.
    Arguments:
    Arg1: befd5c08, memory referenced.
    Arg2: 00000000, value 0 = read operation, 1 = write operation.
    Arg3: bff38750, If non-zero, the instruction address which referenced the bad memory
    address.
    Arg4: 00000000, (reserved)

    Debugging Details:
    ------------------


    Could not read faulting driver name

    READ_ADDRESS: unable to read from 80480618
    unable to read from 8047ffc8
    unable to read from 8047fea0
    unable to read from 80471c18
    unable to read from 8047feb8
    unable to read from 8047ffc4
    unable to read from 80471c1c
    unable to read from 80480084
    unable to read from 804805b8
    befd5c08

    FAULTING_IP:
    Ntfs!NtfsCopyReadA+2d2
    bff38750 807db400 cmp byte ptr [ebp-0x4c],0x0

    MM_INTERNAL_CODE: 0

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0x50

    LAST_CONTROL_TRANSFER: from 00000000 to bff38750

    TRAP_FRAME: bebd5b54 -- (.trap ffffffffbebd5b54)
    .trap ffffffffbebd5b54
    ErrCode = 00000000
    eax=bebd5cdc ebx=81e6e088 ecx=bebd5c44 edx=0000ed18 esi=bebd5cfc edi=e20b50d8
    eip=bff38750 esp=bebd5bc8 ebp=befd5c54 iopl=0 nv up ei pl nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
    Ntfs!NtfsCopyReadA+0x2d2:
    bff38750 807db400 cmp byte ptr [ebp-0x4c],0x0 ss:0010:befd5c08=??
    .trap
    Resetting default scope

    STACK_TEXT:
    befd5c54 00000000 00000000 00000000 00000000 Ntfs!NtfsCopyReadA+0x2d2


    FOLLOWUP_IP:
    Ntfs!NtfsCopyReadA+2d2
    bff38750 807db400 cmp byte ptr [ebp-0x4c],0x0

    SYMBOL_STACK_INDEX: 0

    FOLLOWUP_NAME: MachineOwner

    SYMBOL_NAME: Ntfs!NtfsCopyReadA+2d2

    MODULE_NAME: Ntfs

    IMAGE_NAME: Ntfs.sys

    DEBUG_FLR_IMAGE_TIMESTAMP: 3ede6e95

    STACK_COMMAND: .trap ffffffffbebd5b54 ; kb

    FAILURE_BUCKET_ID: 0x50_Ntfs!NtfsCopyReadA+2d2

    BUCKET_ID: 0x50_Ntfs!NtfsCopyReadA+2d2

    Followup: MachineOwner
    ---------

    eax=ffdff13c ebx=00000050 ecx=bebd5b54 edx=80462ee6 esi=80064bac edi=c02fbf54
    eip=80448b5b esp=bebd5afc ebp=bebd5b3c iopl=0 nv up ei ng nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
    nt!MmAccessFault+0x757:
    80448b5b 33c0 xor eax,eax
    ChildEBP RetAddr Args to Child
    bebd5b3c 80466a2f 00000000 befd5c08 00000000 nt!MmAccessFault+0x757 (FPO: [Non-Fpo])
    bebd5b3c bff38750 00000000 befd5c08 00000000 nt!KiTrap0E+0xc3 (FPO: [0,0] TrapFrame @ bebd5b54)
    befd5c54 00000000 00000000 00000000 00000000 Ntfs!NtfsCopyReadA+0x2d2 (FPO: [Non-Fpo])
    start end module name
    80062000 80078840 hal halapic.dll Thu Mar 20 20:04:11 2003 (3E7A731B)
    80400000 8059a640 nt ntoskrnl.exe Thu Jun 17 12:14:43 2004 (40D1D183)
    a0000000 a018e860 win32k win32k.sys Mon Aug 09 22:51:25 2004 (4118463D)
    be60d000 be620ac0 ipsec ipsec.sys Mon Apr 21 13:19:40 2003 (3EA4363C)
    be9e1000 bea033c0 Fastfat Fastfat.SYS Wed Jan 15 13:48:39 2003 (3E25BB17)
    bee67000 bee75fe0 Cdfs Cdfs.SYS Tue Apr 15 22:58:53 2003 (3E9CD4FD)
    beed7000 beee8f80 wdmaud wdmaud.sys Tue Apr 15 23:23:02 2003 (3E9CDAA6)
    beee9000 bef24bc0 srv srv.sys Tue Apr 29 18:05:07 2003 (3EAF0523)
    bf08d000 bf0988c0 sysaudio sysaudio.sys Tue Apr 15 23:21:44 2003 (3E9CDA58)
    bf12d000 bf1485c0 DlgcSram DlgcSram.sys Tue Nov 13 10:12:26 2001 (3BF1466A)
    bf171000 bf18e4a0 afd afd.sys Wed Apr 30 03:45:29 2003 (3EAF8D29)
    bf18f000 bf19f720 HTTPFILT HTTPFILT.SYS Tue Nov 07 13:43:52 2000 (3A085B78)
    bf1a0000 bf1bb1e0 NISDRV NISDRV.SYS Tue Nov 07 13:43:21 2000 (3A085B59)
    bf20c000 bf20f6c0 Gloaddrv Gloaddrv.sys Thu Jun 29 19:38:50 2000 (395BEC1A)
    bf70e000 bf73c000 SiSV256 SiSV256.DLL Tue Nov 30 03:34:20 1999 (38439A1C)
    bf73c000 bf751180 dump_atapi dump_atapi.sys Tue Apr 01 12:08:25 2003 (3E89D599)
    bf77a000 bf7e0240 mrxsmb mrxsmb.sys Thu May 22 17:46:57 2003 (3ECD5361)
    bf7f3000 bf81d9c0 rdbss rdbss.sys Thu May 22 17:47:05 2003 (3ECD5369)
    bf81e000 bf845e00 netbt netbt.sys Wed Jul 16 14:44:26 2003 (3F15AB1A)
    bf846000 bf897060 tcpip tcpip.sys Tue Apr 29 18:05:31 2003 (3EAF053B)
    bfdfc000 bfdfe980 awvid5 awvid5.dll Mon Sep 11 17:18:48 2000 (39BD5A48)
    bfe00000 bfe2a3a0 update update.sys Tue Apr 15 23:22:01 2003 (3E9CDA69)
    bfe2b000 bfe4f400 e100bnt5 e100bnt5.sys Thu Aug 19 15:26:54 2004 (41250D0E)
    bfe50000 bfe6bb40 KS KS.SYS Tue Apr 15 23:02:11 2003 (3E9CD5C3)
    bfe6c000 bfe901e0 portcls portcls.sys Tue Apr 15 23:11:22 2003 (3E9CD7EA)
    bfe91000 bfea3100 viaudio viaudio.sys Tue Aug 19 04:46:13 2003 (3F41F1E5)
    bfea4000 bfebaba0 ndiswan ndiswan.sys Tue Apr 29 18:05:01 2003 (3EAF051D)
    bfedb000 bfef0640 Mup Mup.sys Wed Jan 15 13:54:01 2003 (3E25BC59)
    bfef1000 bff1aaa0 NDIS NDIS.sys Tue Apr 29 18:05:01 2003 (3EAF051D)
    bff1b000 bff98800 Ntfs Ntfs.sys Wed Jun 04 17:11:33 2003 (3EDE6E95)
    bff99000 bffaa7c0 KSecDD KSecDD.sys Sat Sep 20 19:32:19 2003 (3F6CF193)
    bffab000 bffc0180 atapi atapi.sys Tue Apr 01 12:08:25 2003 (3E89D599)
    bffc1000 bffe29c0 dmio dmio.sys Wed Jan 15 13:47:04 2003 (3E25BAB8)
    bffe3000 bffff220 ftdisk ftdisk.sys Mon Mar 31 16:21:58 2003 (3E88BF86)
    f2000000 f200e6a0 pci pci.sys Wed Jan 15 13:44:07 2003 (3E25BA07)
    f2010000 f201b680 isapnp isapnp.sys Wed Jan 15 13:43:47 2003 (3E25B9F3)
    f2020000 f2028700 CLASSPNP CLASSPNP.SYS Wed Jan 15 13:42:51 2003 (3E25B9BB)
    f2050000 f205ca80 rasl2tp rasl2tp.sys Tue Apr 29 18:05:06 2003 (3EAF0522)
    f2060000 f206bc40 raspptp raspptp.sys Wed May 14 18:47:00 2003 (3EC2D574)
    f2070000 f207ea20 parallel parallel.sys Wed Jan 15 13:47:14 2003 (3E25BAC2)
    f2080000 f208c1e0 SiSV SiSV.sys Mon Sep 27 23:02:15 1999 (37F03DC7)
    f2090000 f209c4c0 VIDEOPRT VIDEOPRT.SYS Wed Jan 15 13:47:20 2003 (3E25BAC8)
    f20a0000 f20ab680 i8042prt i8042prt.sys Tue Apr 15 23:00:59 2003 (3E9CD57B)
    f20b0000 f20bf400 serial serial.sys Tue Apr 15 23:19:39 2003 (3E9CD9DB)
    f20c0000 f20c9ce0 NDProxy NDProxy.SYS Thu Sep 30 18:25:35 1999 (37F3F16F)
    f20e0000 f20e8fa0 Npfs Npfs.SYS Sat Oct 09 18:58:07 1999 (37FFD68F)
    f20f0000 f20f8680 msgpc msgpc.sys Wed Jan 15 13:54:25 2003 (3E25BC71)
    f2100000 f21081a0 netbios netbios.sys Tue Oct 12 14:34:19 1999 (38038D3B)
    f2210000 f221b7a0 FWFILT FWFILT.SYS Tue Nov 07 13:43:41 2000 (3A085B6D)
    f2240000 f2248240 Fips Fips.SYS Tue May 09 10:28:29 2000 (39182E9D)
    f2260000 f226dea0 DLGCCORE DLGCCORE.SYS Tue Nov 13 10:10:25 2001 (3BF145F1)
    f2280000 f2285520 PCIIDEX PCIIDEX.SYS Tue Feb 25 12:31:08 2003 (3E5BB66C)
    f2288000 f228f4c0 MountMgr MountMgr.sys Tue Feb 10 13:47:53 2004 (40293569)
    f2290000 f2297720 disk disk.sys Wed Jan 15 13:43:05 2003 (3E25B9C9)
    f2298000 f229d680 viaagp viaagp.sys Wed Jan 15 13:47:10 2003 (3E25BABE)
    f22b8000 f22bc400 ptilink ptilink.sys Wed Jan 15 13:47:15 2003 (3E25BAC3)
    f22c8000 f22cc0e0 raspti raspti.sys Fri Oct 08 15:45:10 1999 (37FE57D6)
    f22f0000 f22f6f60 aw_host5 aw_host5.sys Mon Sep 11 17:19:26 2000 (39BD5A6E)
    f2308000 f230ec40 cdrom cdrom.sys Wed Jan 15 13:43:04 2003 (3E25B9C8)
    f2328000 f232dec0 kbdclass kbdclass.sys Thu Feb 20 10:37:30 2003 (3E55044A)
    f2338000 f233e100 parport parport.sys Wed Jan 15 13:47:13 2003 (3E25BAC1)
    f2350000 f2351000 fdc fdc.sys unavailable (00000000)
    f2360000 f2365400 mouclass mouclass.sys Thu Feb 20 10:37:45 2003 (3E550459)
    f2370000 f2376a20 EFS EFS.SYS Wed Jan 15 13:46:55 2003 (3E25BAAF)
    f2380000 f2384a60 flpydisk flpydisk.sys Wed Jan 15 13:42:52 2003 (3E25B9BC)
    f2388000 f238d180 SYMFILT SYMFILT.SYS Tue Nov 07 13:44:16 2000 (3A085B90)
    f2398000 f239e8e0 NDISFILT NDISFILT.SYS Tue Nov 07 13:44:09 2000 (3A085B89)
    f23a0000 f23a5240 Msfs Msfs.SYS Tue Oct 26 18:21:32 1999 (3816377C)
    f23c0000 f23c7d00 wanarp wanarp.sys Fri Aug 16 07:25:01 2002 (3D5CEF1D)
    f2410000 f2412a20 BOOTVID BOOTVID.dll Wed Nov 03 19:24:33 1999 (3820E051)
    f2414000 f2416d00 PartMgr PartMgr.sys Wed Jan 15 13:43:07 2003 (3E25B9CB)
    f2418000 f241b400 Gernuwa Gernuwa.sys Mon Sep 11 17:18:22 2000 (39BD5A2E)
    f2474000 f24762e0 ndistapi ndistapi.sys Wed Jan 15 13:54:15 2003 (3E25BC67)
    f2484000 f2487e60 TDI TDI.SYS Wed Jan 15 13:56:26 2003 (3E25BCEA)
    f249c000 f249f640 serenum serenum.sys Wed Jan 15 13:47:01 2003 (3E25BAB5)
    f24bc000 f24bf580 vga vga.sys Sat Sep 25 13:37:40 1999 (37ED1674)
    f24c4000 f24c6740 awlegacy awlegacy.sys Mon Sep 11 17:19:37 2000 (39BD5A79)
    f2500000 f2501d20 Diskperf Diskperf.sys Wed Feb 12 15:34:38 2003 (3E4ABDEE)
    f2502000 f2503b80 dmload dmload.sys Wed Jan 15 13:47:06 2003 (3E25BABA)
    f250a000 f250bca0 Fs_Rec Fs_Rec.SYS Wed Jan 15 13:53:30 2003 (3E25BC3A)
    f2512000 f2513e40 rasacd rasacd.sys Sat Sep 25 13:41:23 1999 (37ED1753)
    f2552000 f2553420 DNSFILT DNSFILT.SYS Tue Nov 07 13:43:23 2000 (3A085B5B)
    f2572000 f2573860 ParVdm ParVdm.SYS Mon Sep 27 22:28:16 1999 (37F035D0)
    f25c8000 f25c8b00 pciide pciide.sys Wed Jan 15 13:43:03 2003 (3E25B9C7)
    f25c9000 f25c9f80 WMILIB WMILIB.SYS Sat Sep 25 13:36:47 1999 (37ED163F)
    f25cd000 f25cda40 audstub audstub.sys Sat Sep 25 13:35:33 1999 (37ED15F5)
    f25df000 f25dfd80 swenum swenum.sys Sat Sep 25 13:36:31 1999 (37ED162F)
    f25f2000 f25f29e0 Null Null.SYS Sat Sep 25 13:34:58 1999 (37ED15D2)
    f25f4000 f25f4ee0 Beep Beep.SYS Wed Oct 20 17:18:59 1999 (380E3FD3)
    f25f8000 f25f8f80 mnmdd mnmdd.SYS Sat Sep 25 13:37:40 1999 (37ED1674)
    f2624000 f2624f80 dump_WMILIB dump_WMILIB.SYS Sat Sep 25 13:36:47 1999 (37ED163F)
    f262c000 f262c840 AWDDI AWDDI.DLL Mon Sep 11 17:17:38 2000 (39BD5A02)

    Unloaded modules:
    be4a8000 be4cd000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bedea000 bee0f000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bf2c4000 bf2d1000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2110000 f211e000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bf6f9000 bf70e000 VGA.dll
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2498000 f249b000 awvid5.dll
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2110000 f2119000 redbook.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2390000 f2395000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f24b4000 f24b7000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt
     
  5. 2005/01/25
    JoeHobart

    JoeHobart Inactive Alumni

    Joined:
    2004/05/19
    Messages:
    919
    Likes Received:
    1
    minidumps are not portable, because they don't contain information about the executable to keep them small. If you have an identical machine or access to the files from the machine, there are some enviroment varibables you can use to make it track, otherwise you get an incomplete stack (as we got here).

    Microsoft cheats their way around this by maintaining a server with a copy of every binary they ever shipped, giving them an easy way to read these minidumps. We have no such benifit. Rerun the tool on the machine that threw the error, or ask for details on how to set the executablepath. You can also copy the c:\websymbols directory to this machine and tweak the command line not to go out to the internet.

    From what i can tell on what you got, Your machine is crashing in NTFS. Not likely, this is probably pool corruption from another driver.

    Couple of things catch my eye. your copy of pc anywhere is 4 years old. Get it updated. Look for updates for these software drivers

    AWDDI.DLL Mon Sep 11 17:17:38 2000
    awlegacy.sys Mon Sep 11 17:19:37 2000
    DNSFILT.SYS Tue Nov 07 13:43:23 2000

    DLGCCORE.SYS Gloaddrv.sys SiSV256.DLL
     
    Last edited: 2005/01/25
  6. 2005/01/25
    david451

    david451 Inactive Thread Starter

    Joined:
    2005/01/24
    Messages:
    8
    Likes Received:
    0
    Ok this is the dump listing from the machine with the issue. What do you
    think now? Yea the pc-anywhere version on the machine is 10.0. I have 11.0 but find that it is much more buggy than even 9.21 which is what I use on my other machines.

    Thanks,
    David


    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.4.0007.2
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINNT\Minidump\Mini012305-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
    Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
    Kernel base = 0x80400000 PsLoadedModuleList = 0x804805c0
    Debug session time: Sun Jan 23 10:56:40.924 2005 (GMT-6)
    System Uptime: not available
    Loading Kernel Symbols
    ...........................................................................................
    Loading unloaded module list
    .........
    Loading User Symbols
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 50, {befd5c08, 0, bff38750, 0}


    Could not read faulting driver name
    Probably caused by : Ntfs.sys ( Ntfs!NtfsCopyReadA+2d2 )

    Followup: MachineOwner
    ---------

    kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    PAGE_FAULT_IN_NONPAGED_AREA (50)
    Invalid system memory was referenced. This cannot be protected by try-except,
    it must be protected by a Probe. Typically the address is just plain bad or it
    is pointing at freed memory.
    Arguments:
    Arg1: befd5c08, memory referenced.
    Arg2: 00000000, value 0 = read operation, 1 = write operation.
    Arg3: bff38750, If non-zero, the instruction address which referenced the bad memory
    address.
    Arg4: 00000000, (reserved)

    Debugging Details:
    ------------------


    Could not read faulting driver name

    READ_ADDRESS: unable to read from 80480618
    unable to read from 8047ffc8
    unable to read from 8047fea0
    unable to read from 80471c18
    unable to read from 8047feb8
    unable to read from 8047ffc4
    unable to read from 80471c1c
    unable to read from 80480084
    unable to read from 804805b8
    befd5c08

    FAULTING_IP:
    Ntfs!NtfsCopyReadA+2d2
    bff38750 807db400 cmp byte ptr [ebp-0x4c],0x0

    MM_INTERNAL_CODE: 0

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0x50

    LAST_CONTROL_TRANSFER: from 00000000 to bff38750

    TRAP_FRAME: bebd5b54 -- (.trap ffffffffbebd5b54)
    .trap ffffffffbebd5b54
    ErrCode = 00000000
    eax=bebd5cdc ebx=81e6e088 ecx=bebd5c44 edx=0000ed18 esi=bebd5cfc edi=e20b50d8
    eip=bff38750 esp=bebd5bc8 ebp=befd5c54 iopl=0 nv up ei pl nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
    Ntfs!NtfsCopyReadA+0x2d2:
    bff38750 807db400 cmp byte ptr [ebp-0x4c],0x0 ss:0010:befd5c08=??
    .trap
    Resetting default scope

    STACK_TEXT:
    befd5c54 00000000 00000000 00000000 00000000 Ntfs!NtfsCopyReadA+0x2d2


    FOLLOWUP_IP:
    Ntfs!NtfsCopyReadA+2d2
    bff38750 807db400 cmp byte ptr [ebp-0x4c],0x0

    SYMBOL_STACK_INDEX: 0

    FOLLOWUP_NAME: MachineOwner

    SYMBOL_NAME: Ntfs!NtfsCopyReadA+2d2

    MODULE_NAME: Ntfs

    IMAGE_NAME: Ntfs.sys

    DEBUG_FLR_IMAGE_TIMESTAMP: 3ede6e95

    STACK_COMMAND: .trap ffffffffbebd5b54 ; kb

    FAILURE_BUCKET_ID: 0x50_Ntfs!NtfsCopyReadA+2d2

    BUCKET_ID: 0x50_Ntfs!NtfsCopyReadA+2d2

    Followup: MachineOwner
    ---------

    eax=ffdff13c ebx=00000050 ecx=bebd5b54 edx=80462ee6 esi=80064bac edi=c02fbf54
    eip=80448b5b esp=bebd5afc ebp=bebd5b3c iopl=0 nv up ei ng nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
    nt!MmAccessFault+0x757:
    80448b5b 33c0 xor eax,eax
    ChildEBP RetAddr Args to Child
    bebd5b3c 80466a2f 00000000 befd5c08 00000000 nt!MmAccessFault+0x757 (FPO: [Non-Fpo])
    bebd5b3c bff38750 00000000 befd5c08 00000000 nt!KiTrap0E+0xc3 (FPO: [0,0] TrapFrame @ bebd5b54)
    befd5c54 00000000 00000000 00000000 00000000 Ntfs!NtfsCopyReadA+0x2d2 (FPO: [Non-Fpo])
    start end module name
    80062000 80078840 hal halapic.dll Thu Mar 20 20:04:11 2003 (3E7A731B)
    80400000 8059a640 nt ntoskrnl.exe Thu Jun 17 12:14:43 2004 (40D1D183)
    a0000000 a018e860 win32k win32k.sys Mon Aug 09 22:51:25 2004 (4118463D)
    be60d000 be620ac0 ipsec ipsec.sys Mon Apr 21 13:19:40 2003 (3EA4363C)
    be9e1000 bea033c0 Fastfat Fastfat.SYS Wed Jan 15 13:48:39 2003 (3E25BB17)
    bee67000 bee75fe0 Cdfs Cdfs.SYS Tue Apr 15 22:58:53 2003 (3E9CD4FD)
    beed7000 beee8f80 wdmaud wdmaud.sys Tue Apr 15 23:23:02 2003 (3E9CDAA6)
    beee9000 bef24bc0 srv srv.sys Tue Apr 29 18:05:07 2003 (3EAF0523)
    bf08d000 bf0988c0 sysaudio sysaudio.sys Tue Apr 15 23:21:44 2003 (3E9CDA58)
    bf12d000 bf1485c0 DlgcSram DlgcSram.sys Tue Nov 13 10:12:26 2001 (3BF1466A)
    bf171000 bf18e4a0 afd afd.sys Wed Apr 30 03:45:29 2003 (3EAF8D29)
    bf18f000 bf19f720 HTTPFILT HTTPFILT.SYS Tue Nov 07 13:43:52 2000 (3A085B78)
    bf1a0000 bf1bb1e0 NISDRV NISDRV.SYS Tue Nov 07 13:43:21 2000 (3A085B59)
    bf20c000 bf20f6c0 Gloaddrv Gloaddrv.sys Thu Jun 29 19:38:50 2000 (395BEC1A)
    bf70e000 bf73c000 SiSV256 SiSV256.DLL Tue Nov 30 03:34:20 1999 (38439A1C)
    bf73c000 bf751180 dump_atapi dump_atapi.sys Tue Apr 01 12:08:25 2003 (3E89D599)
    bf77a000 bf7e0240 mrxsmb mrxsmb.sys Thu May 22 17:46:57 2003 (3ECD5361)
    bf7f3000 bf81d9c0 rdbss rdbss.sys Thu May 22 17:47:05 2003 (3ECD5369)
    bf81e000 bf845e00 netbt netbt.sys Wed Jul 16 14:44:26 2003 (3F15AB1A)
    bf846000 bf897060 tcpip tcpip.sys Tue Apr 29 18:05:31 2003 (3EAF053B)
    bfdfc000 bfdfe980 awvid5 awvid5.dll Mon Sep 11 17:18:48 2000 (39BD5A48)
    bfe00000 bfe2a3a0 update update.sys Tue Apr 15 23:22:01 2003 (3E9CDA69)
    bfe2b000 bfe4f400 e100bnt5 e100bnt5.sys Thu Aug 19 15:26:54 2004 (41250D0E)
    bfe50000 bfe6bb40 KS KS.SYS Tue Apr 15 23:02:11 2003 (3E9CD5C3)
    bfe6c000 bfe901e0 portcls portcls.sys Tue Apr 15 23:11:22 2003 (3E9CD7EA)
    bfe91000 bfea3100 viaudio viaudio.sys Tue Aug 19 04:46:13 2003 (3F41F1E5)
    bfea4000 bfebaba0 ndiswan ndiswan.sys Tue Apr 29 18:05:01 2003 (3EAF051D)
    bfedb000 bfef0640 Mup Mup.sys Wed Jan 15 13:54:01 2003 (3E25BC59)
    bfef1000 bff1aaa0 NDIS NDIS.sys Tue Apr 29 18:05:01 2003 (3EAF051D)
    bff1b000 bff98800 Ntfs Ntfs.sys Wed Jun 04 17:11:33 2003 (3EDE6E95)
    bff99000 bffaa7c0 KSecDD KSecDD.sys Sat Sep 20 19:32:19 2003 (3F6CF193)
    bffab000 bffc0180 atapi atapi.sys Tue Apr 01 12:08:25 2003 (3E89D599)
    bffc1000 bffe29c0 dmio dmio.sys Wed Jan 15 13:47:04 2003 (3E25BAB8)
    bffe3000 bffff220 ftdisk ftdisk.sys Mon Mar 31 16:21:58 2003 (3E88BF86)
    f2000000 f200e6a0 pci pci.sys Wed Jan 15 13:44:07 2003 (3E25BA07)
    f2010000 f201b680 isapnp isapnp.sys Wed Jan 15 13:43:47 2003 (3E25B9F3)
    f2020000 f2028700 CLASSPNP CLASSPNP.SYS Wed Jan 15 13:42:51 2003 (3E25B9BB)
    f2050000 f205ca80 rasl2tp rasl2tp.sys Tue Apr 29 18:05:06 2003 (3EAF0522)
    f2060000 f206bc40 raspptp raspptp.sys Wed May 14 18:47:00 2003 (3EC2D574)
    f2070000 f207ea20 parallel parallel.sys Wed Jan 15 13:47:14 2003 (3E25BAC2)
    f2080000 f208c1e0 SiSV SiSV.sys Mon Sep 27 23:02:15 1999 (37F03DC7)
    f2090000 f209c4c0 VIDEOPRT VIDEOPRT.SYS Wed Jan 15 13:47:20 2003 (3E25BAC8)
    f20a0000 f20ab680 i8042prt i8042prt.sys Tue Apr 15 23:00:59 2003 (3E9CD57B)
    f20b0000 f20bf400 serial serial.sys Tue Apr 15 23:19:39 2003 (3E9CD9DB)
    f20c0000 f20c9ce0 NDProxy NDProxy.SYS Thu Sep 30 18:25:35 1999 (37F3F16F)
    f20e0000 f20e8fa0 Npfs Npfs.SYS Sat Oct 09 18:58:07 1999 (37FFD68F)
    f20f0000 f20f8680 msgpc msgpc.sys Wed Jan 15 13:54:25 2003 (3E25BC71)
    f2100000 f21081a0 netbios netbios.sys Tue Oct 12 14:34:19 1999 (38038D3B)
    f2210000 f221b7a0 FWFILT FWFILT.SYS Tue Nov 07 13:43:41 2000 (3A085B6D)
    f2240000 f2248240 Fips Fips.SYS Tue May 09 10:28:29 2000 (39182E9D)
    f2260000 f226dea0 DLGCCORE DLGCCORE.SYS Tue Nov 13 10:10:25 2001 (3BF145F1)
    f2280000 f2285520 PCIIDEX PCIIDEX.SYS Tue Feb 25 12:31:08 2003 (3E5BB66C)
    f2288000 f228f4c0 MountMgr MountMgr.sys Tue Feb 10 13:47:53 2004 (40293569)
    f2290000 f2297720 disk disk.sys Wed Jan 15 13:43:05 2003 (3E25B9C9)
    f2298000 f229d680 viaagp viaagp.sys Wed Jan 15 13:47:10 2003 (3E25BABE)
    f22b8000 f22bc400 ptilink ptilink.sys Wed Jan 15 13:47:15 2003 (3E25BAC3)
    f22c8000 f22cc0e0 raspti raspti.sys Fri Oct 08 15:45:10 1999 (37FE57D6)
    f22f0000 f22f6f60 aw_host5 aw_host5.sys Mon Sep 11 17:19:26 2000 (39BD5A6E)
    f2308000 f230ec40 cdrom cdrom.sys Wed Jan 15 13:43:04 2003 (3E25B9C8)
    f2328000 f232dec0 kbdclass kbdclass.sys Thu Feb 20 10:37:30 2003 (3E55044A)
    f2338000 f233e100 parport parport.sys Wed Jan 15 13:47:13 2003 (3E25BAC1)
    f2350000 f2351000 fdc fdc.sys unavailable (00000000)
    f2360000 f2365400 mouclass mouclass.sys Thu Feb 20 10:37:45 2003 (3E550459)
    f2370000 f2376a20 EFS EFS.SYS Wed Jan 15 13:46:55 2003 (3E25BAAF)
    f2380000 f2384a60 flpydisk flpydisk.sys Wed Jan 15 13:42:52 2003 (3E25B9BC)
    f2388000 f238d180 SYMFILT SYMFILT.SYS Tue Nov 07 13:44:16 2000 (3A085B90)
    f2398000 f239e8e0 NDISFILT NDISFILT.SYS Tue Nov 07 13:44:09 2000 (3A085B89)
    f23a0000 f23a5240 Msfs Msfs.SYS Tue Oct 26 18:21:32 1999 (3816377C)
    f23c0000 f23c7d00 wanarp wanarp.sys Fri Aug 16 07:25:01 2002 (3D5CEF1D)
    f2410000 f2412a20 BOOTVID BOOTVID.dll Wed Nov 03 19:24:33 1999 (3820E051)
    f2414000 f2416d00 PartMgr PartMgr.sys Wed Jan 15 13:43:07 2003 (3E25B9CB)
    f2418000 f241b400 Gernuwa Gernuwa.sys Mon Sep 11 17:18:22 2000 (39BD5A2E)
    f2474000 f24762e0 ndistapi ndistapi.sys Wed Jan 15 13:54:15 2003 (3E25BC67)
    f2484000 f2487e60 TDI TDI.SYS Wed Jan 15 13:56:26 2003 (3E25BCEA)
    f249c000 f249f640 serenum serenum.sys Wed Jan 15 13:47:01 2003 (3E25BAB5)
    f24bc000 f24bf580 vga vga.sys Sat Sep 25 13:37:40 1999 (37ED1674)
    f24c4000 f24c6740 awlegacy awlegacy.sys Mon Sep 11 17:19:37 2000 (39BD5A79)
    f2500000 f2501d20 Diskperf Diskperf.sys Wed Feb 12 15:34:38 2003 (3E4ABDEE)
    f2502000 f2503b80 dmload dmload.sys Wed Jan 15 13:47:06 2003 (3E25BABA)
    f250a000 f250bca0 Fs_Rec Fs_Rec.SYS Wed Jan 15 13:53:30 2003 (3E25BC3A)
    f2512000 f2513e40 rasacd rasacd.sys Sat Sep 25 13:41:23 1999 (37ED1753)
    f2552000 f2553420 DNSFILT DNSFILT.SYS Tue Nov 07 13:43:23 2000 (3A085B5B)
    f2572000 f2573860 ParVdm ParVdm.SYS Mon Sep 27 22:28:16 1999 (37F035D0)
    f25c8000 f25c8b00 pciide pciide.sys Wed Jan 15 13:43:03 2003 (3E25B9C7)
    f25c9000 f25c9f80 WMILIB WMILIB.SYS Sat Sep 25 13:36:47 1999 (37ED163F)
    f25cd000 f25cda40 audstub audstub.sys Sat Sep 25 13:35:33 1999 (37ED15F5)
    f25df000 f25dfd80 swenum swenum.sys Sat Sep 25 13:36:31 1999 (37ED162F)
    f25f2000 f25f29e0 Null Null.SYS Sat Sep 25 13:34:58 1999 (37ED15D2)
    f25f4000 f25f4ee0 Beep Beep.SYS Wed Oct 20 17:18:59 1999 (380E3FD3)
    f25f8000 f25f8f80 mnmdd mnmdd.SYS Sat Sep 25 13:37:40 1999 (37ED1674)
    f2624000 f2624f80 dump_WMILIB dump_WMILIB.SYS Sat Sep 25 13:36:47 1999 (37ED163F)
    f262c000 f262c840 AWDDI AWDDI.DLL Mon Sep 11 17:17:38 2000 (39BD5A02)

    Unloaded modules:
    be4a8000 be4cd000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bedea000 bee0f000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bf2c4000 bf2d1000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2110000 f211e000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bf6f9000 bf70e000 VGA.dll
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2498000 f249b000 awvid5.dll
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2110000 f2119000 redbook.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2390000 f2395000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f24b4000 f24b7000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt
     
  7. 2005/01/25
    david451

    david451 Inactive Thread Starter

    Joined:
    2005/01/24
    Messages:
    8
    Likes Received:
    0
    basic question about minidmp versus complete dump

    Right now my box is setup for minidump. Would it be more useful to go with complete dump or possibly kernel dump. I am thinking of complete dump.
    I am also thinking of turning off the reset. I am wondering if I might see other affects if I do that after the dump. I am thinking Microsoft wants to do the reset to clean up windows from what it figures is an unstable state. Anybody on here have experience with just doing the minidump without the reset to know if it leaves windows too unstable to be worth it.

    Thanks,
    David Clark
     
  8. 2005/01/25
    JoeHobart

    JoeHobart Inactive Alumni

    Joined:
    2004/05/19
    Messages:
    919
    Likes Received:
    1
    The stack is hosed on this. very odd crash, i dont understand what vector the stack could get bjorked here besides filter drivers.

    This one needs to be debugged by hand from a professional. I recommend you enable pool tags via the instructions i've posted below, Setup for a kernel-only dump, collect on next occurance, and contact microsoft support for furter assistance.

    Regarding mini vs full and auto reboot. Mini is fine for most purposes. A kernel or full dump is preferred for manual debugging. The auto reboot doesnt have any impact except to make your machine sit there bluescreened instead of rebooting itself (and usually recovering).

    Enabling Pool tags
    1. Run Registry Editor.
    2. Locate the following key in the registry:
    HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \ Control \ Session Manager
    3. Write down the value of GlobalFlag, or save the Session Manager key.
    4. Double-click the GlobalFlag value in the right pane.
    5. Change the value to 0x00000400 hexadecimal.

    Note When you add the global flag value 0x00000400, it only shows up as being 0x400 after it is added. It is important to add all of the leading zeros or some of the Poolmon information will not display on the output screen.
    6. Restart the computer.
     
  9. 2005/01/26
    david451

    david451 Inactive Thread Starter

    Joined:
    2005/01/24
    Messages:
    8
    Likes Received:
    0
    Question is the stack also messed up on this earlier dump from the same machine:
    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.4.0007.2
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINNT\Minidump\Mini011805-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
    Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
    Kernel base = 0x80400000 PsLoadedModuleList = 0x804805c0
    Debug session time: Tue Jan 18 16:47:38.317 2005 (GMT-6)
    System Uptime: not available
    Loading Kernel Symbols
    ...........................................................................................
    Loading unloaded module list
    ...........................
    Loading User Symbols
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 50, {c183084f, 0, bff38759, 0}


    Could not read faulting driver name
    Probably caused by : Ntfs.sys ( Ntfs!NtfsCopyReadA+2db )

    Followup: MachineOwner
    ---------

    kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    PAGE_FAULT_IN_NONPAGED_AREA (50)
    Invalid system memory was referenced. This cannot be protected by try-except,
    it must be protected by a Probe. Typically the address is just plain bad or it
    is pointing at freed memory.
    Arguments:
    Arg1: c183084f, memory referenced.
    Arg2: 00000000, value 0 = read operation, 1 = write operation.
    Arg3: bff38759, If non-zero, the instruction address which referenced the bad memory
    address.
    Arg4: 00000000, (reserved)

    Debugging Details:
    ------------------


    Could not read faulting driver name

    READ_ADDRESS: unable to read from 80480618
    unable to read from 8047ffc8
    unable to read from 8047fea0
    unable to read from 80471c18
    unable to read from 8047feb8
    unable to read from 8047ffc4
    unable to read from 80471c1c
    unable to read from 80480084
    unable to read from 804805b8
    c183084f

    FAULTING_IP:
    Ntfs!NtfsCopyReadA+2db
    bff38759 8b4004 mov eax,[eax+0x4]

    MM_INTERNAL_CODE: 0

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0x50

    LAST_CONTROL_TRANSFER: from 8bffffc2 to bff38759

    TRAP_FRAME: beaefb54 -- (.trap ffffffffbeaefb54)
    .trap ffffffffbeaefb54
    ErrCode = 00000000
    eax=c183084b ebx=810f83e8 ecx=beaefc44 edx=0000ff18 esi=beaefcfc edi=e202f0d8
    eip=bff38759 esp=beaefbc8 ebp=beeefc54 iopl=0 nv up ei ng nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
    Ntfs!NtfsCopyReadA+0x2db:
    bff38759 8b4004 mov eax,[eax+0x4] ds:0023:c183084f=????????
    .trap
    Resetting default scope

    STACK_TEXT:
    beeefc54 8bffffc2 40f63c46 850f0164 ffffc27e Ntfs!NtfsCopyReadA+0x2db
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    81e9010c 00000000 00000000 00000000 00000000 0x8bffffc2


    FOLLOWUP_IP:
    Ntfs!NtfsCopyReadA+2db
    bff38759 8b4004 mov eax,[eax+0x4]

    SYMBOL_STACK_INDEX: 0

    FOLLOWUP_NAME: MachineOwner

    SYMBOL_NAME: Ntfs!NtfsCopyReadA+2db

    MODULE_NAME: Ntfs

    IMAGE_NAME: Ntfs.sys

    DEBUG_FLR_IMAGE_TIMESTAMP: 3ede6e95

    STACK_COMMAND: .trap ffffffffbeaefb54 ; kb

    FAILURE_BUCKET_ID: 0x50_Ntfs!NtfsCopyReadA+2db

    BUCKET_ID: 0x50_Ntfs!NtfsCopyReadA+2db

    Followup: MachineOwner
    ---------

    eax=ffdff13c ebx=00000050 ecx=beaefb54 edx=80462ee6 esi=80064bac edi=c03060c0
    eip=80448b5b esp=beaefafc ebp=beaefb3c iopl=0 nv up ei ng nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
    nt!MmAccessFault+0x757:
    80448b5b 33c0 xor eax,eax
    ChildEBP RetAddr Args to Child
    beaefb3c 80466a2f 00000000 c183084f 00000000 nt!MmAccessFault+0x757 (FPO: [Non-Fpo])
    beaefb3c bff38759 00000000 c183084f 00000000 nt!KiTrap0E+0xc3 (FPO: [0,0] TrapFrame @ beaefb54)
    beeefc54 8bffffc2 40f63c46 850f0164 ffffc27e Ntfs!NtfsCopyReadA+0x2db (FPO: [Non-Fpo])
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    81e9010c 00000000 00000000 00000000 00000000 0x8bffffc2
    start end module name
    80062000 80078840 hal halapic.dll Thu Mar 20 20:04:11 2003 (3E7A731B)
    80400000 8059a640 nt ntoskrnl.exe Thu Jun 17 12:14:43 2004 (40D1D183)
    a0000000 a018e860 win32k win32k.sys Mon Aug 09 22:51:25 2004 (4118463D)
    be56d000 be580ac0 ipsec ipsec.sys Mon Apr 21 13:19:40 2003 (3EA4363C)
    be9e1000 bea033c0 Fastfat Fastfat.SYS Wed Jan 15 13:48:39 2003 (3E25BB17)
    beed7000 beee8f80 wdmaud wdmaud.sys Tue Apr 15 23:23:02 2003 (3E9CDAA6)
    beee9000 bef24bc0 srv srv.sys Tue Apr 29 18:05:07 2003 (3EAF0523)
    bf08d000 bf0988c0 sysaudio sysaudio.sys Tue Apr 15 23:21:44 2003 (3E9CDA58)
    bf0ad000 bf0bbfe0 Cdfs Cdfs.SYS Tue Apr 15 22:58:53 2003 (3E9CD4FD)
    bf12d000 bf1485c0 DlgcSram DlgcSram.sys Tue Nov 13 10:12:26 2001 (3BF1466A)
    bf171000 bf18e4a0 afd afd.sys Wed Apr 30 03:45:29 2003 (3EAF8D29)
    bf18f000 bf19f720 HTTPFILT HTTPFILT.SYS Tue Nov 07 13:43:52 2000 (3A085B78)
    bf1a0000 bf1bb1e0 NISDRV NISDRV.SYS Tue Nov 07 13:43:21 2000 (3A085B59)
    bf208000 bf20b6c0 Gloaddrv Gloaddrv.sys Thu Jun 29 19:38:50 2000 (395BEC1A)
    bf70e000 bf73c000 SiSV256 SiSV256.DLL Tue Nov 30 03:34:20 1999 (38439A1C)
    bf73c000 bf751180 dump_atapi dump_atapi.sys Tue Apr 01 12:08:25 2003 (3E89D599)
    bf77a000 bf7e0240 mrxsmb mrxsmb.sys Thu May 22 17:46:57 2003 (3ECD5361)
    bf7f3000 bf81d9c0 rdbss rdbss.sys Thu May 22 17:47:05 2003 (3ECD5369)
    bf81e000 bf845e00 netbt netbt.sys Wed Jul 16 14:44:26 2003 (3F15AB1A)
    bf846000 bf897060 tcpip tcpip.sys Tue Apr 29 18:05:31 2003 (3EAF053B)
    bfdfc000 bfdfe980 awvid5 awvid5.dll Mon Sep 11 17:18:48 2000 (39BD5A48)
    bfe00000 bfe2a3a0 update update.sys Tue Apr 15 23:22:01 2003 (3E9CDA69)
    bfe2b000 bfe4f400 e100bnt5 e100bnt5.sys Thu Aug 19 15:26:54 2004 (41250D0E)
    bfe50000 bfe6bb40 KS KS.SYS Tue Apr 15 23:02:11 2003 (3E9CD5C3)
    bfe6c000 bfe901e0 portcls portcls.sys Tue Apr 15 23:11:22 2003 (3E9CD7EA)
    bfe91000 bfea3100 viaudio viaudio.sys Tue Aug 19 04:46:13 2003 (3F41F1E5)
    bfea4000 bfebaba0 ndiswan ndiswan.sys Tue Apr 29 18:05:01 2003 (3EAF051D)
    bfedb000 bfef0640 Mup Mup.sys Wed Jan 15 13:54:01 2003 (3E25BC59)
    bfef1000 bff1aaa0 NDIS NDIS.sys Tue Apr 29 18:05:01 2003 (3EAF051D)
    bff1b000 bff98800 Ntfs Ntfs.sys Wed Jun 04 17:11:33 2003 (3EDE6E95)
    bff99000 bffaa7c0 KSecDD KSecDD.sys Sat Sep 20 19:32:19 2003 (3F6CF193)
    bffab000 bffc0180 atapi atapi.sys Tue Apr 01 12:08:25 2003 (3E89D599)
    bffc1000 bffe29c0 dmio dmio.sys Wed Jan 15 13:47:04 2003 (3E25BAB8)
    bffe3000 bffff220 ftdisk ftdisk.sys Mon Mar 31 16:21:58 2003 (3E88BF86)
    f2000000 f200e6a0 pci pci.sys Wed Jan 15 13:44:07 2003 (3E25BA07)
    f2010000 f201b680 isapnp isapnp.sys Wed Jan 15 13:43:47 2003 (3E25B9F3)
    f2020000 f2028700 CLASSPNP CLASSPNP.SYS Wed Jan 15 13:42:51 2003 (3E25B9BB)
    f2050000 f205ca80 rasl2tp rasl2tp.sys Tue Apr 29 18:05:06 2003 (3EAF0522)
    f2060000 f206bc40 raspptp raspptp.sys Wed May 14 18:47:00 2003 (3EC2D574)
    f2070000 f207ea20 parallel parallel.sys Wed Jan 15 13:47:14 2003 (3E25BAC2)
    f2080000 f208c1e0 SiSV SiSV.sys Mon Sep 27 23:02:15 1999 (37F03DC7)
    f2090000 f209c4c0 VIDEOPRT VIDEOPRT.SYS Wed Jan 15 13:47:20 2003 (3E25BAC8)
    f20a0000 f20ab680 i8042prt i8042prt.sys Tue Apr 15 23:00:59 2003 (3E9CD57B)
    f20b0000 f20bf400 serial serial.sys Tue Apr 15 23:19:39 2003 (3E9CD9DB)
    f20c0000 f20c9ce0 NDProxy NDProxy.SYS Thu Sep 30 18:25:35 1999 (37F3F16F)
    f20e0000 f20e8fa0 Npfs Npfs.SYS Sat Oct 09 18:58:07 1999 (37FFD68F)
    f20f0000 f20f8680 msgpc msgpc.sys Wed Jan 15 13:54:25 2003 (3E25BC71)
    f2100000 f21081a0 netbios netbios.sys Tue Oct 12 14:34:19 1999 (38038D3B)
    f2210000 f221b7a0 FWFILT FWFILT.SYS Tue Nov 07 13:43:41 2000 (3A085B6D)
    f2240000 f2248240 Fips Fips.SYS Tue May 09 10:28:29 2000 (39182E9D)
    f2260000 f226dea0 DLGCCORE DLGCCORE.SYS Tue Nov 13 10:10:25 2001 (3BF145F1)
    f2280000 f2285520 PCIIDEX PCIIDEX.SYS Tue Feb 25 12:31:08 2003 (3E5BB66C)
    f2288000 f228f4c0 MountMgr MountMgr.sys Tue Feb 10 13:47:53 2004 (40293569)
    f2290000 f2297720 disk disk.sys Wed Jan 15 13:43:05 2003 (3E25B9C9)
    f2298000 f229d680 viaagp viaagp.sys Wed Jan 15 13:47:10 2003 (3E25BABE)
    f22b8000 f22bc400 ptilink ptilink.sys Wed Jan 15 13:47:15 2003 (3E25BAC3)
    f22c8000 f22cc0e0 raspti raspti.sys Fri Oct 08 15:45:10 1999 (37FE57D6)
    f22f0000 f22f6f60 aw_host5 aw_host5.sys Mon Sep 11 17:19:26 2000 (39BD5A6E)
    f2308000 f230ec40 cdrom cdrom.sys Wed Jan 15 13:43:04 2003 (3E25B9C8)
    f2328000 f232dec0 kbdclass kbdclass.sys Thu Feb 20 10:37:30 2003 (3E55044A)
    f2338000 f233e100 parport parport.sys Wed Jan 15 13:47:13 2003 (3E25BAC1)
    f2350000 f2351000 fdc fdc.sys unavailable (00000000)
    f2360000 f2365400 mouclass mouclass.sys Thu Feb 20 10:37:45 2003 (3E550459)
    f2370000 f2376a20 EFS EFS.SYS Wed Jan 15 13:46:55 2003 (3E25BAAF)
    f2380000 f2384a60 flpydisk flpydisk.sys Wed Jan 15 13:42:52 2003 (3E25B9BC)
    f2388000 f238d180 SYMFILT SYMFILT.SYS Tue Nov 07 13:44:16 2000 (3A085B90)
    f2398000 f239e8e0 NDISFILT NDISFILT.SYS Tue Nov 07 13:44:09 2000 (3A085B89)
    f23a0000 f23a5240 Msfs Msfs.SYS Tue Oct 26 18:21:32 1999 (3816377C)
    f23b8000 f23bfd00 wanarp wanarp.sys Fri Aug 16 07:25:01 2002 (3D5CEF1D)
    f2410000 f2412a20 BOOTVID BOOTVID.dll Wed Nov 03 19:24:33 1999 (3820E051)
    f2414000 f2416d00 PartMgr PartMgr.sys Wed Jan 15 13:43:07 2003 (3E25B9CB)
    f2418000 f241b400 Gernuwa Gernuwa.sys Mon Sep 11 17:18:22 2000 (39BD5A2E)
    f2474000 f24762e0 ndistapi ndistapi.sys Wed Jan 15 13:54:15 2003 (3E25BC67)
    f2484000 f2487e60 TDI TDI.SYS Wed Jan 15 13:56:26 2003 (3E25BCEA)
    f249c000 f249f640 serenum serenum.sys Wed Jan 15 13:47:01 2003 (3E25BAB5)
    f24bc000 f24bf580 vga vga.sys Sat Sep 25 13:37:40 1999 (37ED1674)
    f24c4000 f24c6740 awlegacy awlegacy.sys Mon Sep 11 17:19:37 2000 (39BD5A79)
    f2500000 f2501d20 Diskperf Diskperf.sys Wed Feb 12 15:34:38 2003 (3E4ABDEE)
    f2502000 f2503b80 dmload dmload.sys Wed Jan 15 13:47:06 2003 (3E25BABA)
    f250a000 f250bca0 Fs_Rec Fs_Rec.SYS Wed Jan 15 13:53:30 2003 (3E25BC3A)
    f2512000 f2513e40 rasacd rasacd.sys Sat Sep 25 13:41:23 1999 (37ED1753)
    f2552000 f2553420 DNSFILT DNSFILT.SYS Tue Nov 07 13:43:23 2000 (3A085B5B)
    f2570000 f2571860 ParVdm ParVdm.SYS Mon Sep 27 22:28:16 1999 (37F035D0)
    f25c8000 f25c8b00 pciide pciide.sys Wed Jan 15 13:43:03 2003 (3E25B9C7)
    f25c9000 f25c9f80 WMILIB WMILIB.SYS Sat Sep 25 13:36:47 1999 (37ED163F)
    f25cd000 f25cda40 audstub audstub.sys Sat Sep 25 13:35:33 1999 (37ED15F5)
    f25df000 f25dfd80 swenum swenum.sys Sat Sep 25 13:36:31 1999 (37ED162F)
    f25f2000 f25f29e0 Null Null.SYS Sat Sep 25 13:34:58 1999 (37ED15D2)
    f25f4000 f25f4ee0 Beep Beep.SYS Wed Oct 20 17:18:59 1999 (380E3FD3)
    f25f8000 f25f8f80 mnmdd mnmdd.SYS Sat Sep 25 13:37:40 1999 (37ED1674)
    f2624000 f2624f80 dump_WMILIB dump_WMILIB.SYS Sat Sep 25 13:36:47 1999 (37ED163F)
    f262c000 f262c840 AWDDI AWDDI.DLL Mon Sep 11 17:17:38 2000 (39BD5A02)

    Unloaded modules:
    be45b000 be480000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be45b000 be480000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be45b000 be480000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be45b000 be480000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be45b000 be480000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be45b000 be480000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be45b000 be480000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be45b000 be480000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be45b000 be480000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be45b000 be480000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be45b000 be480000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be483000 be4a8000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be483000 be4a8000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be483000 be4a8000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be483000 be4a8000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be483000 be4a8000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be483000 be4a8000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be483000 be4a8000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    be520000 be545000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bedea000 bee0f000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bf2c4000 bf2d1000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2120000 f212e000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bf6f9000 bf70e000 VGA.dll
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2498000 f249b000 awvid5.dll
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2110000 f2119000 redbook.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2390000 f2395000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f24b4000 f24b7000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt
     
  10. 2005/01/26
    BenMcDonald[MS]

    BenMcDonald[MS] Inactive

    Joined:
    2004/12/14
    Messages:
    228
    Likes Received:
    0
    yes, even more so than the other dump. This is clear stack corruption . I realize this just looks like a bunch of numbers, but that bogus return address is no good.


    ChildEBP RetAddr Args to Child
    beeefc54 8bffffc2 40f63c46 850f0164 ffffc27e Ntfs!NtfsCopyReadA+0x2db
    81e9010c 00000000 00000000 00000000 00000000 0x8bffffc2
     
  11. 2005/01/31
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    Yo - david451 - you still out there somewhere?
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.