1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Resolved BOSD caused by "c:\websymbols\ntkrpamp..."?

Discussion in 'Windows 7' started by thinkevd, 2010/07/17.

  1. 2010/07/17
    thinkevd

    thinkevd Inactive Thread Starter

    Joined:
    2010/07/17
    Messages:
    2
    Likes Received:
    0
    I'm using Win7 Ultimate 32bit, and it crashed every 1 or 2 days. When the same computer runs Windows 2008 sp1 x64, it was very stable.
    Here is Windbg result, Thank you for your help!


    Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Users\Gavin\Desktop\071810-18267-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
    Executable search path is:
    Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7600.16539.x86fre.win7_gdr.100226-1909
    Machine Name:
    Kernel base = 0x84248000 PsLoadedModuleList = 0x84390810
    Debug session time: Sun Jul 18 07:50:49.962 2010 (UTC + 8:00)
    System Uptime: 0 days 0:53:16.024
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    .....................
    Loading User Symbols
    Loading unloaded module list
    ......
    0: kd> !analyze -v
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    ATTEMPTED_SWITCH_FROM_DPC (b8)
    A wait operation, attach process, or yield was attempted from a DPC routine.
    This is an illegal operation and the stack track will lead to the offending
    code and original DPC routine.
    Arguments:
    Arg1: 860be5d8, Original thread which is the cause of the failure
    Arg2: 86316030, New thread
    Arg3: b0f2dfd0, Stack address of the original thread
    Arg4: 00000000

    Debugging Details:
    ------------------


    FAULTING_THREAD: 860be5d8

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

    BUGCHECK_STR: 0xB8

    PROCESS_NAME: iexplore.exe

    CURRENT_IRQL: 2

    LAST_CONTROL_TRANSFER: from 842afcfd to 84324d10

    STACK_TEXT:
    99d17cc0 842afcfd 000000b8 860be5d8 86316030 nt!KeBugCheckEx+0x1e
    99d17cec 84216924 99d17d34 86951284 00200006 nt!SwapContext_XRstorEnd+0x105
    99d17d00 84216b29 84371c02 99d17d34 30a972d8 hal!HalpDispatchSoftwareInterrupt+0x5e
    99d17d18 84216cc3 86d55008 99d17d34 842874f3 hal!HalpCheckForSoftwareInterrupt+0x83
    99d17d24 842874f3 00000000 00000092 067cb728 hal!HalEndSystemInterrupt+0x67
    99d17d24 6abea617 00000000 00000092 067cb728 nt!KiChainedDispatch+0x73
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    067cb728 00000000 00000000 00000000 00000000 0x6abea617


    STACK_COMMAND: .thread 0xffffffff860be5d8 ; kb

    FOLLOWUP_IP:
    nt!SwapContext_XRstorEnd+105
    842afcfd c3 ret

    SYMBOL_STACK_INDEX: 1

    SYMBOL_NAME: nt!SwapContext_XRstorEnd+105

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: nt



    IMAGE_NAME: ntkrpamp.exe

    DEBUG_FLR_IMAGE_TIMESTAMP: 4b88cacf

    FAILURE_BUCKET_ID: 0xB8_nt!SwapContext_XRstorEnd+105

    BUCKET_ID: 0xB8_nt!SwapContext_XRstorEnd+105

    Followup: MachineOwner
    ---------

    0: kd> lmvm nt
    start end module name
    84248000 84658000 nt (pdb symbols) c:\websymbols\ntkrpamp.pdb\A0D85B412D774C83B08EF4AE749A8B582\ntkrpamp.pdb
    Loaded symbol image file: ntkrpamp.exe
    Mapped memory image file: c:\websymbols\ntkrnlpa.exe\4B88CACF410000\ntkrnlpa.exe
    Image path: ntkrpamp.exe
    Image name: ntkrpamp.exe
    Timestamp: Sat Feb 27 15:33:35 2010 (4B88CACF)
    CheckSum: 003C7867
    ImageSize: 00410000
    File version: 6.1.7600.16539
    Product version: 6.1.7600.16539
    File flags: 0 (Mask 3F)
    File OS: 40004 NT Win32
    File type: 1.0 App
    File date: 00000000.00000000
    Translations: 0409.04b0
    CompanyName: Microsoft Corporation
    ProductName: Microsoft® Windows® Operating System
    InternalName: ntkrpamp.exe
    OriginalFilename: ntkrpamp.exe
    ProductVersion: 6.1.7600.16539
    FileVersion: 6.1.7600.16539 (win7_gdr.100226-1909)
    FileDescription: NT Kernel & System
    LegalCopyright: © Microsoft Corporation. All rights reserved.
     
  2. 2010/07/19
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Start by updating your drivers & BIOS.
     
    Arie,
    #2

  3. to hide this advert.

  4. 2010/07/27
    thinkevd

    thinkevd Inactive Thread Starter

    Joined:
    2010/07/17
    Messages:
    2
    Likes Received:
    0
    After I remove all Acronis products, BOSD never happened again. Thank you!
     
  5. 2010/07/27
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,680
    Likes Received:
    104
    Thanks for the feedback.
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.