W2K server blue screen and memory.dmp

archy9 · 24th February 2006

Hello everyone.
I had IBM xSeries 335 server with terminal services in application server mode wit AD on it.There work about 30 people an had 2 MSSQL 1 mysql server
instances as databases.Last week i had more than 5 blue screens.
Before upgraded BIOS to latest one. Any suggestions about solution, i replaced RAM with other new, but blue screens got me again, also made memtest all tests passes.
Thanks.

OS Name Microsoft Windows 2000 Advanced Server
Version 5.0.2195 Service Pack 4 Build 2195
OS Manufacturer Microsoft Corporation
System Name TERM
System Manufacturer IBM
System Model eserver xSeries 335 -[867661X]-
System Type X86-based PC
Processor x86 Family 15 Model 2 Stepping 7 GenuineIntel ~2392 Mhz
Processor x86 Family 15 Model 2 Stepping 7 GenuineIntel ~2392 Mhz
BIOS Version 06/09/05
Windows Directory C:\WINNT
System Directory C:\WINNT\system32
Boot Device \Device\Harddisk0\Partition1
Locale Latvia
User Name DOC\archy
Time Zone FLE Standard Time
Total Physical Memory 2 096 532 KB
Available Physical Memory 1 308 116 KB
Total Virtual Memory 4 810 600 KB
Available Virtual Memory 3 245 180 KB
Page File Space 2 714 068 KB
Page File C:\pagefile.sys
Page File \Device\HarddiskVolume4\pagefile.sys

Dump Info with debugwiz
Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0003.5
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINNT\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

************************************************************
WARNING: Dump file has been truncated. Data may be missing.
************************************************************
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/s...srv*C:\Program Files\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) MP (2 procs) Free x86 compatible
Product: LanManNt, suite: Enterprise TerminalServer
Kernel base = 0x80400000 PsLoadedModuleList = 0x80485b80
Debug session time: Fri Feb 24 09:34:07.527 2006 (GMT+2)
System Uptime: 0 days 13:40:43.911
Loading Kernel Symbols
........................................................................... ...........................
Loading User Symbols
........Unable to read LDR_DATA_TABLE_ENTRY at 0007a348 - Win32 error 38

Loading unloaded module list
...........
WARNING: .reload failed, module list may be incomplete
The call to LoadLibrary(ext) failed, Win32 error 127
"The specified procedure could not be found."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(ext) failed, Win32 error 127
"The specified procedure could not be found."
Please check your debugger configuration and/or network access.
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****
.bugcheck
Bugcheck code 00000050
Arguments a22b3880 00000000 a0039f44 00000001

kb
ChildEBP RetAddr Args to Child
bbac8820 8046b063 00000000 a22b3880 00000000 nt!MmAccessFault+0x7dc
bbac8820 a0039f44 00000000 a22b3880 00000000 nt!KiTrap0E+0xc7
bbac88e8 a003b049 a2000008 a2000114 a2083768 win32k!vStrWrite01+0x55
bbac8b24 a0104d94 a2083768 a21f0468 00000000 win32k!EngStretchBlt+0xba9
bbac8c9c a00de0b2 00000000 000002d2 00000247 win32k!GreStretchDIBitsInternal+0xa5c
bbac8d1c 80468389 16210354 000002d2 00000247 win32k!NtGdiStretchDIBitsInternal+0xf0
bbac8d1c 77f71e93 16210354 000002d2 00000247 nt!KiSystemService+0xc9
0760f1e0 00000000 00000000 00000000 00000000 GDI32!NtGdiStretchDIBitsInternal+0xb

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
The call to LoadLibrary(ext) failed, Win32 error 127
"The specified procedure could not be found."
Please check your debugger configuration and/or network access.
No export analyze found
eax=8908e13c ebx=00000050 ecx=bbac8838 edx=80467276 esi=800656b0 edi=c0288acc
eip=8044c796 esp=bbac87dc ebp=bbac8820 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!MmAccessFault+0x7dc:
8044c796 33c0 xor eax,eax
ChildEBP RetAddr Args to Child
bbac8820 8046b063 00000000 a22b3880 00000000 nt!MmAccessFault+0x7dc (FPO: [Non-Fpo])
bbac8820 a0039f44 00000000 a22b3880 00000000 nt!KiTrap0E+0xc7 (FPO: [0,0] TrapFrame @ bbac8838)
bbac88e8 a003b049 a2000008 a2000114 a2083768 win32k!vStrWrite01+0x55 (FPO: [Non-Fpo])
bbac8b24 a0104d94 a2083768 a21f0468 00000000 win32k!EngStretchBlt+0xba9 (FPO: [Non-Fpo])
bbac8c9c a00de0b2 00000000 000002d2 00000247 win32k!GreStretchDIBitsInternal+0xa5c (FPO: [Non-Fpo])
bbac8d1c 80468389 16210354 000002d2 00000247 win32k!NtGdiStretchDIBitsInternal+0xf0 (FPO: [Non-Fpo])
bbac8d1c 77f71e93 16210354 000002d2 00000247 nt!KiSystemService+0xc9 (FPO: [0,0] TrapFrame @ bbac8d64)
0760f1e0 00000000 00000000 00000000 00000000 GDI32!NtGdiStretchDIBitsInternal+0xb (FPO: [Non-Fpo])
start end module name
01000000 0100e000 spoolsv spoolsv.exe Tue Jul 12 07:59:10 2005 (42D34E1E)
77d30000 77da8000 RPCRT4 RPCRT4.dll Fri Apr 08 14:54:28 2005 (425670F4)
77e10000 77e79000 USER32 USER32.dll Thu Apr 21 11:08:41 2005 (42675F89)
77f40000 77f7c000 GDI32 GDI32.dll Thu Dec 29 15:15:55 2005 (43B3E18B)
77f80000 77ffc000 ntdll ntdll.dll Thu Jan 13 12:09:36 2005 (41E648E0)
78000000 78045000 MSVCRT MSVCRT.dll Tue Mar 11 20:55:17 2003 (3E6E3115)
7c2d0000 7c335000 ADVAPI32 ADVAPI32.dll Thu Apr 21 11:08:42 2005 (42675F8A)
7c570000 7c623000 KERNEL32 KERNEL32.dll Thu Jan 06 11:17:41 2005 (41DD0235)
80062000 80076f80 hal halmacpi.dll Fri Dec 03 05:29:15 2004 (41AFDD8B)
80400000 805a29c0 nt ntkrnlmp.exe Thu Oct 06 12:20:25 2005 (4344EC59)
a0000000 a0190000 win32k win32k.sys Thu Oct 06 12:33:42 2005 (4344EF76)
a0190000 a01f5b60 ati2drad ati2drad.dll Fri Jul 06 22:54:05 2001 (3B46175D)
a01f6000 a01fb760 HPW8kmd HPW8kmd.dll Wed Jan 26 14:01:19 2000 (388EE20F)
a07e0000 a07ed000 RDPDD RDPDD.dll unavailable (FFFFFFFE)
bd459000 bd46b000 naveng naveng.sys unavailable (FFFFFFFE)
bd46b000 bd521000 navex15 navex15.sys unavailable (FFFFFFFE)
bd5e9000 bd5ff000 RDPWD RDPWD.SYS unavailable (FFFFFFFE)
bdb4f000 bdb72000 Fastfat Fastfat.SYS unavailable (FFFFFFFE)
bdc3a000 bdc4a000 ipsec ipsec.sys unavailable (FFFFFFFE)
bde52000 bde62000 Cdfs Cdfs.SYS unavailable (FFFFFFFE)
bde92000 bdea0000 EraserUtilDrv10502 EraserUtilDrv10502.sys unavailable (FFFFFFFE)
bdfaa000 bdfb3000 termdd termdd.sys unavailable (FFFFFFFE)
be1e2000 be21d000 srv srv.sys unavailable (FFFFFFFE)
be30d000 be316000 Fips Fips.SYS unavailable (FFFFFFFE)
be4c5000 be4e4140 afd afd.sys Tue Apr 12 00:31:21 2005 (425AECA9)
bee75000 beec8000 eeCtrl eeCtrl.sys Wed Jan 25 02:00:57 2006 (43D6BFB9)
beec8000 bef31a40 mrxsmb mrxsmb.sys Sat Apr 02 04:23:32 2005 (424DF414)
bef44000 bef70ac0 rdbss rdbss.sys Tue Apr 12 00:31:22 2005 (425AECAA)
bf039000 bf08e000 savrt savrt.sys Sat Feb 05 06:03:24 2005 (4204458C)
bf08e000 bf0a2000 Savrtpel Savrtpel.sys Sat Feb 05 06:03:26 2005 (4204458E)
bf142000 bf15ebe0 SYMEVENT SYMEVENT.SYS Fri Apr 29 22:00:28 2005 (4272844C)
bf15f000 bf19ece0 SYMTDI SYMTDI.SYS Fri Apr 22 21:56:40 2005 (426948E8)
bf19f000 bf1c9d00 netbt netbt.sys Sat Apr 02 04:23:24 2005 (424DF40C)
bf1ca000 bf2181a0 tcpip tcpip.sys Thu May 12 13:24:58 2005 (42832EFA)
bf255000 bf2586c0 dump_diskdump dump_diskdump.sys Tue Feb 25 21:18:04 2003 (3E5BC16C)
bfa81000 bfaab3a0 update update.sys Wed Apr 16 07:22:01 2003 (3E9CDA69)
bfaac000 bfac7b40 ks ks.sys Wed Apr 16 07:02:11 2003 (3E9CD5C3)
bfada000 bfafd060 rdpdr rdpdr.sys Fri Mar 21 23:43:14 2003 (3E7B8772)
bfb26000 bfb3cba0 ndiswan ndiswan.sys Wed Apr 30 02:05:01 2003 (3EAF051D)
bfb3d000 bfb6b380 b57w2k b57w2k.sys Sun Jun 20 02:26:38 2004 (40D4CBAE)
bfb6c000 bfc3a4e0 winachcf winachcf.sys Sat Sep 15 02:41:13 2001 (3BA29599)
bfc3b000 bfc83900 ati2mpad ati2mpad.sys Fri Jul 06 22:53:36 2001 (3B461740)
bfc90000 bfc93580 vga vga.sys Sat Sep 25 21:37:40 1999 (37ED1674)
bfca0000 bfca2d80 smbusdh smbusdh.sys Tue Dec 09 21:04:59 2003 (3FD61CDB)
bfccc000 bfce1be0 Mup Mup.sys Fri Dec 03 05:37:23 2004 (41AFDF73)
bfce2000 bfd8b4c0 vmodem vmodem.sys Thu Jan 16 01:15:01 2003 (3E25EB75)
bfd8c000 bfe48340 vpctcom vpctcom.sys Fri Jan 17 04:19:44 2003 (3E276840)
bfe49000 bfe72aa0 NDIS NDIS.sys Wed Apr 30 02:05:01 2003 (3EAF051D)
bfe73000 bfef0480 Ntfs Ntfs.sys Tue May 10 12:20:29 2005 (42807CDD)
bfef1000 bff027c0 KSecDD KSecDD.sys Sun Sep 21 03:32:19 2003 (3F6CF193)
bff03000 bff151c0 Dfs Dfs.sys Wed Feb 12 04:19:06 2003 (3E49AF1A)
bff16000 bff375a0 fltmgr fltmgr.sys Thu Apr 14 09:59:00 2005 (425E14B4)
bff38000 bff49660 AACMgt AACMgt.sys Thu Jun 10 07:32:57 2004 (40C7E479)
bff4a000 bff5c180 SCSIPORT SCSIPORT.SYS Thu Jul 14 15:24:06 2005 (42D65966)
bff5d000 bff72180 Unknown_Module_bff5d000 Unknown_Module_bff5d000 Tue Apr 01 21:08:25 2003 (3E89D599)
bff73000 bff949c0 dmio dmio.sys Wed Jan 15 21:47:04 2003 (3E25BAB8)
bff95000 bffb15a0 ftdisk ftdisk.sys Fri Dec 03 05:29:58 2004 (41AFDDB6)
bffb2000 bffd9c20 ACPI ACPI.sys Wed Jan 15 21:44:22 2003 (3E25BA16)
bffda000 bffffe00 d347bus d347bus.sys Sun Aug 22 16:31:09 2004 (4128A01D)
eb000000 eb00e6a0 pci pci.sys Wed Jan 15 21:44:07 2003 (3E25BA07)
eb010000 eb01b680 isapnp isapnp.sys Wed Jan 15 21:43:47 2003 (3E25B9F3)
eb020000 eb0294a0 symmpi symmpi.sys Fri May 23 20:47:31 2003 (3ECE5EB3)
eb030000 eb038700 CLASSPNP CLASSPNP.SYS Wed Jan 15 21:42:51 2003 (3E25B9BB)
eb040000 eb04f940 vvoice vvoice.sys Thu Jan 16 01:15:24 2003 (3E25EB8C)
eb080000 eb08c4c0 VIDEOPRT VIDEOPRT.SYS Wed Jan 15 21:47:20 2003 (3E25BAC8)
eb090000 eb09b680 i8042prt i8042prt.sys Wed Apr 16 07:00:59 2003 (3E9CD57B)
eb0a0000 eb0aca80 rasl2tp rasl2tp.sys Wed Apr 30 02:05:06 2003 (3EAF0522)
eb0b0000 eb0bbc40 raspptp raspptp.sys Thu May 15 02:47:00 2003 (3EC2D574)
eb0e0000 eb0e9be0 usbhub usbhub.sys Wed Mar 19 01:30:41 2003 (3E77AC21)
eb110000 eb119ce0 NDProxy NDProxy.SYS Fri Oct 01 02:25:35 1999 (37F3F16F)
eb120000 eb128fa0 Npfs Npfs.SYS Sun Oct 10 02:58:07 1999 (37FFD68F)
eb130000 eb138680 msgpc msgpc.sys Wed Jan 15 21:54:25 2003 (3E25BC71)
eb140000 eb1481a0 netbios netbios.sys Tue Oct 12 22:34:19 1999 (38038D3B)
eb1c0000 eb1c94a0 dump_symmpi dump_symmpi.sys Fri May 23 20:47:31 2003 (3ECE5EB3)
eb280000 eb285520 PCIIDEX PCIIDEX.SYS Tue Feb 25 20:31:08 2003 (3E5BB66C)
eb288000 eb28f4c0 MountMgr MountMgr.sys Tue Aug 16 11:40:55 2005 (4301A697)
eb290000 eb297720 disk disk.sys Wed Jan 15 21:43:05 2003 (3E25B9C9)
eb2c8000 eb2cf0e0 Modem Modem.SYS Wed Jan 15 21:43:48 2003 (3E25B9F4)
eb2d8000 eb2ddec0 kbdclass kbdclass.sys Thu Feb 20 18:37:30 2003 (3E55044A)
eb2e8000 eb2ed400 mouclass mouclass.sys Thu Feb 20 18:37:45 2003 (3E550459)
eb2f8000 eb2ff000 fdc fdc.sys unavailable (FFFFFFFE)
eb308000 eb30ec40 cdrom cdrom.sys Wed Jan 15 21:43:04 2003 (3E25B9C8)
eb318000 eb31dfc0 openhci openhci.sys Sat Mar 01 02:28:59 2003 (3E5FFECB)
eb330000 eb334fc0 USBD USBD.SYS Wed Jan 22 19:05:33 2003 (3E2ECF5D)
eb358000 eb35c400 ptilink ptilink.sys Wed Jan 15 21:47:15 2003 (3E25BAC3)
eb368000 eb36c0e0 raspti raspti.sys Fri Oct 08 23:45:10 1999 (37FE57D6)
eb370000 eb377400 smbushc smbushc.sys Thu Apr 29 00:01:03 2004 (40901B8F)
eb388000 eb38ca60 flpydisk flpydisk.sys Wed Jan 15 21:42:52 2003 (3E25B9BC)
eb398000 eb39ea20 EFS EFS.SYS Wed Jan 15 21:46:55 2003 (3E25BAAF)
eb3a8000 eb3ad320 USBSTOR USBSTOR.SYS Wed Jan 15 21:45:52 2003 (3E25BA70)
eb3b8000 eb3bd000 TDTCP TDTCP.SYS unavailable (FFFFFFFE)
eb3c8000 eb3cd240 Msfs Msfs.SYS Wed Oct 27 02:21:32 1999 (3816377C)
eb3e8000 eb3efd00 wanarp wanarp.sys Fri Aug 16 15:25:01 2002 (3D5CEF1D)
eb410000 eb412a20 BOOTVID BOOTVID.dll Thu Nov 04 03:24:33 1999 (3820E051)
eb414000 eb416d00 PartMgr PartMgr.sys Wed Jan 15 21:43:07 2003 (3E25B9CB)
eb418000 eb41a800 smbgen smbgen.sys Tue Dec 09 21:05:04 2003 (3FD61CE0)
eb4b8000 eb4ba2e0 ndistapi ndistapi.sys Wed Jan 15 21:54:15 2003 (3E25BC67)
eb4c8000 eb4cbe60 TDI TDI.SYS Wed Jan 15 21:56:26 2003 (3E25BCEA)
eb4e8000 eb4ebe00 MODEMCSA MODEMCSA.sys Sat Sep 25 21:34:56 1999 (37ED15D0)
eb500000 eb501d20 Diskperf Diskperf.sys Wed Feb 12 23:34:38 2003 (3E4ABDEE)
eb502000 eb503b80 dmload dmload.sys Wed Jan 15 21:47:06 2003 (3E25BABA)
eb504000 eb505480 d347prt d347prt.sys Sun Aug 22 16:31:48 2004 (4128A044)
eb50e000 eb50fca0 Fs_Rec Fs_Rec.SYS Wed Jan 15 21:53:30 2003 (3E25BC3A)
eb516000 eb517e40 rasacd rasacd.sys Sat Sep 25 21:41:23 1999 (37ED1753)
eb5c8000 eb5c8f80 WMILIB WMILIB.SYS Sat Sep 25 21:36:47 1999 (37ED163F)
eb5c9000 eb5c9b00 pciide pciide.sys Wed Jan 15 21:43:03 2003 (3E25B9C7)
eb618000 eb618a40 audstub audstub.sys Sat Sep 25 21:35:33 1999 (37ED15F5)
eb62f000 eb62fd80 swenum swenum.sys Sat Sep 25 21:36:31 1999 (37ED162F)
eb64d000 eb64d9e0 Null Null.SYS Sat Sep 25 21:34:58 1999 (37ED15D2)
eb652000 eb652ee0 Beep Beep.SYS Thu Oct 21 01:18:59 1999 (380E3FD3)
eb656000 eb656f80 mnmdd mnmdd.SYS Sat Sep 25 21:37:40 1999 (37ED1674)

Unloaded modules:
bd717000 bd729000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bd729000 bd7df000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bd717000 bd729000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bd729000 bd7df000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bef71000 bef83000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bef83000 bf039000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
be56d000 be57d000 Serial.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
eb3e0000 eb3e7000 Parport.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
eb160000 eb169000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb3b8000 eb3bd000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
bfc98000 bfc9b000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

**Arie** · 24th February 2006

Your debugger install is broken, or you don't have Internet access on the machine where you're running the tools. Please install the debugging tools and try again.

archy9 · 24th February 2006

Quote:

Originally Posted by Arie

Your debugger install is broken, or you don't have Internet access on the machine where you're running the tools. Please install the debugging tools and try again.

im reinstalled debog tools and have an internet connection for server
an there is no differences

Debug inf same i think

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0003.5
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINNT\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

************************************************************
WARNING: Dump file has been truncated. Data may be missing.
************************************************************
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/s...srv*C:\Program Files\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) MP (2 procs) Free x86 compatible
Product: LanManNt, suite: Enterprise TerminalServer
Kernel base = 0x80400000 PsLoadedModuleList = 0x80485b80
Debug session time: Fri Feb 24 09:34:07.527 2006 (GMT+2)
System Uptime: 0 days 13:40:43.911
Loading Kernel Symbols
........................................................................... ...........................
Loading User Symbols
........Unable to read LDR_DATA_TABLE_ENTRY at 0007a348 - Win32 error 38

Loading unloaded module list
...........
WARNING: .reload failed, module list may be incomplete
The call to LoadLibrary(ext) failed, Win32 error 127
"The specified procedure could not be found."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(ext) failed, Win32 error 127
"The specified procedure could not be found."
Please check your debugger configuration and/or network access.
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****
.bugcheck
Bugcheck code 00000050
Arguments a22b3880 00000000 a0039f44 00000001

kb
ChildEBP RetAddr Args to Child
bbac8820 8046b063 00000000 a22b3880 00000000 nt!MmAccessFault+0x7dc
bbac8820 a0039f44 00000000 a22b3880 00000000 nt!KiTrap0E+0xc7
bbac88e8 a003b049 a2000008 a2000114 a2083768 win32k!vStrWrite01+0x55
bbac8b24 a0104d94 a2083768 a21f0468 00000000 win32k!EngStretchBlt+0xba9
bbac8c9c a00de0b2 00000000 000002d2 00000247 win32k!GreStretchDIBitsInternal+0xa5c
bbac8d1c 80468389 16210354 000002d2 00000247 win32k!NtGdiStretchDIBitsInternal+0xf0
bbac8d1c 77f71e93 16210354 000002d2 00000247 nt!KiSystemService+0xc9
0760f1e0 00000000 00000000 00000000 00000000 GDI32!NtGdiStretchDIBitsInternal+0xb

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
The call to LoadLibrary(ext) failed, Win32 error 127
"The specified procedure could not be found."
Please check your debugger configuration and/or network access.
No export analyze found
eax=8908e13c ebx=00000050 ecx=bbac8838 edx=80467276 esi=800656b0 edi=c0288acc
eip=8044c796 esp=bbac87dc ebp=bbac8820 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!MmAccessFault+0x7dc:
8044c796 33c0 xor eax,eax
ChildEBP RetAddr Args to Child
bbac8820 8046b063 00000000 a22b3880 00000000 nt!MmAccessFault+0x7dc (FPO: [Non-Fpo])
bbac8820 a0039f44 00000000 a22b3880 00000000 nt!KiTrap0E+0xc7 (FPO: [0,0] TrapFrame @ bbac8838)
bbac88e8 a003b049 a2000008 a2000114 a2083768 win32k!vStrWrite01+0x55 (FPO: [Non-Fpo])
bbac8b24 a0104d94 a2083768 a21f0468 00000000 win32k!EngStretchBlt+0xba9 (FPO: [Non-Fpo])
bbac8c9c a00de0b2 00000000 000002d2 00000247 win32k!GreStretchDIBitsInternal+0xa5c (FPO: [Non-Fpo])
bbac8d1c 80468389 16210354 000002d2 00000247 win32k!NtGdiStretchDIBitsInternal+0xf0 (FPO: [Non-Fpo])
bbac8d1c 77f71e93 16210354 000002d2 00000247 nt!KiSystemService+0xc9 (FPO: [0,0] TrapFrame @ bbac8d64)
0760f1e0 00000000 00000000 00000000 00000000 GDI32!NtGdiStretchDIBitsInternal+0xb (FPO: [Non-Fpo])
start end module name
01000000 0100e000 spoolsv spoolsv.exe Tue Jul 12 07:59:10 2005 (42D34E1E)
77d30000 77da8000 RPCRT4 RPCRT4.dll Fri Apr 08 14:54:28 2005 (425670F4)
77e10000 77e79000 USER32 USER32.dll Thu Apr 21 11:08:41 2005 (42675F89)
77f40000 77f7c000 GDI32 GDI32.dll Thu Dec 29 15:15:55 2005 (43B3E18B)
77f80000 77ffc000 ntdll ntdll.dll Thu Jan 13 12:09:36 2005 (41E648E0)
78000000 78045000 MSVCRT MSVCRT.dll Tue Mar 11 20:55:17 2003 (3E6E3115)
7c2d0000 7c335000 ADVAPI32 ADVAPI32.dll Thu Apr 21 11:08:42 2005 (42675F8A)
7c570000 7c623000 KERNEL32 KERNEL32.dll Thu Jan 06 11:17:41 2005 (41DD0235)
80062000 80076f80 hal halmacpi.dll Fri Dec 03 05:29:15 2004 (41AFDD8B)
80400000 805a29c0 nt ntkrnlmp.exe Thu Oct 06 12:20:25 2005 (4344EC59)
a0000000 a0190000 win32k win32k.sys Thu Oct 06 12:33:42 2005 (4344EF76)
a0190000 a01f5b60 ati2drad ati2drad.dll Fri Jul 06 22:54:05 2001 (3B46175D)
a01f6000 a01fb760 HPW8kmd HPW8kmd.dll Wed Jan 26 14:01:19 2000 (388EE20F)
a07e0000 a07ed000 RDPDD RDPDD.dll unavailable (FFFFFFFE)
bd459000 bd46b000 naveng naveng.sys unavailable (FFFFFFFE)
bd46b000 bd521000 navex15 navex15.sys unavailable (FFFFFFFE)
bd5e9000 bd5ff000 RDPWD RDPWD.SYS unavailable (FFFFFFFE)
bdb4f000 bdb72000 Fastfat Fastfat.SYS unavailable (FFFFFFFE)
bdc3a000 bdc4a000 ipsec ipsec.sys unavailable (FFFFFFFE)
bde52000 bde62000 Cdfs Cdfs.SYS unavailable (FFFFFFFE)
bde92000 bdea0000 EraserUtilDrv10502 EraserUtilDrv10502.sys unavailable (FFFFFFFE)
bdfaa000 bdfb3000 termdd termdd.sys unavailable (FFFFFFFE)
be1e2000 be21d000 srv srv.sys unavailable (FFFFFFFE)
be30d000 be316000 Fips Fips.SYS unavailable (FFFFFFFE)
be4c5000 be4e4140 afd afd.sys Tue Apr 12 00:31:21 2005 (425AECA9)
bee75000 beec8000 eeCtrl eeCtrl.sys Wed Jan 25 02:00:57 2006 (43D6BFB9)
beec8000 bef31a40 mrxsmb mrxsmb.sys Sat Apr 02 04:23:32 2005 (424DF414)
bef44000 bef70ac0 rdbss rdbss.sys Tue Apr 12 00:31:22 2005 (425AECAA)
bf039000 bf08e000 savrt savrt.sys Sat Feb 05 06:03:24 2005 (4204458C)
bf08e000 bf0a2000 Savrtpel Savrtpel.sys Sat Feb 05 06:03:26 2005 (4204458E)
bf142000 bf15ebe0 SYMEVENT SYMEVENT.SYS Fri Apr 29 22:00:28 2005 (4272844C)
bf15f000 bf19ece0 SYMTDI SYMTDI.SYS Fri Apr 22 21:56:40 2005 (426948E8)
bf19f000 bf1c9d00 netbt netbt.sys Sat Apr 02 04:23:24 2005 (424DF40C)
bf1ca000 bf2181a0 tcpip tcpip.sys Thu May 12 13:24:58 2005 (42832EFA)
bf255000 bf2586c0 dump_diskdump dump_diskdump.sys Tue Feb 25 21:18:04 2003 (3E5BC16C)
bfa81000 bfaab3a0 update update.sys Wed Apr 16 07:22:01 2003 (3E9CDA69)
bfaac000 bfac7b40 ks ks.sys Wed Apr 16 07:02:11 2003 (3E9CD5C3)
bfada000 bfafd060 rdpdr rdpdr.sys Fri Mar 21 23:43:14 2003 (3E7B8772)
bfb26000 bfb3cba0 ndiswan ndiswan.sys Wed Apr 30 02:05:01 2003 (3EAF051D)
bfb3d000 bfb6b380 b57w2k b57w2k.sys Sun Jun 20 02:26:38 2004 (40D4CBAE)
bfb6c000 bfc3a4e0 winachcf winachcf.sys Sat Sep 15 02:41:13 2001 (3BA29599)
bfc3b000 bfc83900 ati2mpad ati2mpad.sys Fri Jul 06 22:53:36 2001 (3B461740)
bfc90000 bfc93580 vga vga.sys Sat Sep 25 21:37:40 1999 (37ED1674)
bfca0000 bfca2d80 smbusdh smbusdh.sys Tue Dec 09 21:04:59 2003 (3FD61CDB)
bfccc000 bfce1be0 Mup Mup.sys Fri Dec 03 05:37:23 2004 (41AFDF73)
bfce2000 bfd8b4c0 vmodem vmodem.sys Thu Jan 16 01:15:01 2003 (3E25EB75)
bfd8c000 bfe48340 vpctcom vpctcom.sys Fri Jan 17 04:19:44 2003 (3E276840)
bfe49000 bfe72aa0 NDIS NDIS.sys Wed Apr 30 02:05:01 2003 (3EAF051D)
bfe73000 bfef0480 Ntfs Ntfs.sys Tue May 10 12:20:29 2005 (42807CDD)
bfef1000 bff027c0 KSecDD KSecDD.sys Sun Sep 21 03:32:19 2003 (3F6CF193)
bff03000 bff151c0 Dfs Dfs.sys Wed Feb 12 04:19:06 2003 (3E49AF1A)
bff16000 bff375a0 fltmgr fltmgr.sys Thu Apr 14 09:59:00 2005 (425E14B4)
bff38000 bff49660 AACMgt AACMgt.sys Thu Jun 10 07:32:57 2004 (40C7E479)
bff4a000 bff5c180 SCSIPORT SCSIPORT.SYS Thu Jul 14 15:24:06 2005 (42D65966)
bff5d000 bff72180 Unknown_Module_bff5d000 Unknown_Module_bff5d000 Tue Apr 01 21:08:25 2003 (3E89D599)
bff73000 bff949c0 dmio dmio.sys Wed Jan 15 21:47:04 2003 (3E25BAB8)
bff95000 bffb15a0 ftdisk ftdisk.sys Fri Dec 03 05:29:58 2004 (41AFDDB6)
bffb2000 bffd9c20 ACPI ACPI.sys Wed Jan 15 21:44:22 2003 (3E25BA16)
bffda000 bffffe00 d347bus d347bus.sys Sun Aug 22 16:31:09 2004 (4128A01D)
eb000000 eb00e6a0 pci pci.sys Wed Jan 15 21:44:07 2003 (3E25BA07)
eb010000 eb01b680 isapnp isapnp.sys Wed Jan 15 21:43:47 2003 (3E25B9F3)
eb020000 eb0294a0 symmpi symmpi.sys Fri May 23 20:47:31 2003 (3ECE5EB3)
eb030000 eb038700 CLASSPNP CLASSPNP.SYS Wed Jan 15 21:42:51 2003 (3E25B9BB)
eb040000 eb04f940 vvoice vvoice.sys Thu Jan 16 01:15:24 2003 (3E25EB8C)
eb080000 eb08c4c0 VIDEOPRT VIDEOPRT.SYS Wed Jan 15 21:47:20 2003 (3E25BAC8)
eb090000 eb09b680 i8042prt i8042prt.sys Wed Apr 16 07:00:59 2003 (3E9CD57B)
eb0a0000 eb0aca80 rasl2tp rasl2tp.sys Wed Apr 30 02:05:06 2003 (3EAF0522)
eb0b0000 eb0bbc40 raspptp raspptp.sys Thu May 15 02:47:00 2003 (3EC2D574)
eb0e0000 eb0e9be0 usbhub usbhub.sys Wed Mar 19 01:30:41 2003 (3E77AC21)
eb110000 eb119ce0 NDProxy NDProxy.SYS Fri Oct 01 02:25:35 1999 (37F3F16F)
eb120000 eb128fa0 Npfs Npfs.SYS Sun Oct 10 02:58:07 1999 (37FFD68F)
eb130000 eb138680 msgpc msgpc.sys Wed Jan 15 21:54:25 2003 (3E25BC71)
eb140000 eb1481a0 netbios netbios.sys Tue Oct 12 22:34:19 1999 (38038D3B)
eb1c0000 eb1c94a0 dump_symmpi dump_symmpi.sys Fri May 23 20:47:31 2003 (3ECE5EB3)
eb280000 eb285520 PCIIDEX PCIIDEX.SYS Tue Feb 25 20:31:08 2003 (3E5BB66C)
eb288000 eb28f4c0 MountMgr MountMgr.sys Tue Aug 16 11:40:55 2005 (4301A697)
eb290000 eb297720 disk disk.sys Wed Jan 15 21:43:05 2003 (3E25B9C9)
eb2c8000 eb2cf0e0 Modem Modem.SYS Wed Jan 15 21:43:48 2003 (3E25B9F4)
eb2d8000 eb2ddec0 kbdclass kbdclass.sys Thu Feb 20 18:37:30 2003 (3E55044A)
eb2e8000 eb2ed400 mouclass mouclass.sys Thu Feb 20 18:37:45 2003 (3E550459)
eb2f8000 eb2ff000 fdc fdc.sys unavailable (FFFFFFFE)
eb308000 eb30ec40 cdrom cdrom.sys Wed Jan 15 21:43:04 2003 (3E25B9C8)
eb318000 eb31dfc0 openhci openhci.sys Sat Mar 01 02:28:59 2003 (3E5FFECB)
eb330000 eb334fc0 USBD USBD.SYS Wed Jan 22 19:05:33 2003 (3E2ECF5D)
eb358000 eb35c400 ptilink ptilink.sys Wed Jan 15 21:47:15 2003 (3E25BAC3)
eb368000 eb36c0e0 raspti raspti.sys Fri Oct 08 23:45:10 1999 (37FE57D6)
eb370000 eb377400 smbushc smbushc.sys Thu Apr 29 00:01:03 2004 (40901B8F)
eb388000 eb38ca60 flpydisk flpydisk.sys Wed Jan 15 21:42:52 2003 (3E25B9BC)
eb398000 eb39ea20 EFS EFS.SYS Wed Jan 15 21:46:55 2003 (3E25BAAF)
eb3a8000 eb3ad320 USBSTOR USBSTOR.SYS Wed Jan 15 21:45:52 2003 (3E25BA70)
eb3b8000 eb3bd000 TDTCP TDTCP.SYS unavailable (FFFFFFFE)
eb3c8000 eb3cd240 Msfs Msfs.SYS Wed Oct 27 02:21:32 1999 (3816377C)
eb3e8000 eb3efd00 wanarp wanarp.sys Fri Aug 16 15:25:01 2002 (3D5CEF1D)
eb410000 eb412a20 BOOTVID BOOTVID.dll Thu Nov 04 03:24:33 1999 (3820E051)
eb414000 eb416d00 PartMgr PartMgr.sys Wed Jan 15 21:43:07 2003 (3E25B9CB)
eb418000 eb41a800 smbgen smbgen.sys Tue Dec 09 21:05:04 2003 (3FD61CE0)
eb4b8000 eb4ba2e0 ndistapi ndistapi.sys Wed Jan 15 21:54:15 2003 (3E25BC67)
eb4c8000 eb4cbe60 TDI TDI.SYS Wed Jan 15 21:56:26 2003 (3E25BCEA)
eb4e8000 eb4ebe00 MODEMCSA MODEMCSA.sys Sat Sep 25 21:34:56 1999 (37ED15D0)
eb500000 eb501d20 Diskperf Diskperf.sys Wed Feb 12 23:34:38 2003 (3E4ABDEE)
eb502000 eb503b80 dmload dmload.sys Wed Jan 15 21:47:06 2003 (3E25BABA)
eb504000 eb505480 d347prt d347prt.sys Sun Aug 22 16:31:48 2004 (4128A044)
eb50e000 eb50fca0 Fs_Rec Fs_Rec.SYS Wed Jan 15 21:53:30 2003 (3E25BC3A)
eb516000 eb517e40 rasacd rasacd.sys Sat Sep 25 21:41:23 1999 (37ED1753)
eb5c8000 eb5c8f80 WMILIB WMILIB.SYS Sat Sep 25 21:36:47 1999 (37ED163F)
eb5c9000 eb5c9b00 pciide pciide.sys Wed Jan 15 21:43:03 2003 (3E25B9C7)
eb618000 eb618a40 audstub audstub.sys Sat Sep 25 21:35:33 1999 (37ED15F5)
eb62f000 eb62fd80 swenum swenum.sys Sat Sep 25 21:36:31 1999 (37ED162F)
eb64d000 eb64d9e0 Null Null.SYS Sat Sep 25 21:34:58 1999 (37ED15D2)
eb652000 eb652ee0 Beep Beep.SYS Thu Oct 21 01:18:59 1999 (380E3FD3)
eb656000 eb656f80 mnmdd mnmdd.SYS Sat Sep 25 21:37:40 1999 (37ED1674)

Unloaded modules:
bd717000 bd729000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bd729000 bd7df000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bd717000 bd729000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bd729000 bd7df000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bef71000 bef83000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bef83000 bf039000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
be56d000 be57d000 Serial.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
eb3e0000 eb3e7000 Parport.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
eb160000 eb169000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb3b8000 eb3bd000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
bfc98000 bfc9b000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

archy9 · 24th February 2006

debuglo from same memory.dmp on other machine

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0003.5
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Documents and Settings\archy\Desktop\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

************************************************************
WARNING: Dump file has been truncated. Data may be missing.
************************************************************
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\W2K3;C:\W2K3\system32;C:\W2K3\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) MP (2 procs) Free x86 compatible
Product: LanManNt, suite: Enterprise TerminalServer
Kernel base = 0x80400000 PsLoadedModuleList = 0x80485b80
Debug session time: Fri Feb 24 09:34:07.527 2006 (GMT+2)
System Uptime: 0 days 13:40:43.911
Loading Kernel Symbols
........................................................................... ...........................
Loading User Symbols
........Unable to read LDR_DATA_TABLE_ENTRY at 0007a348 - Win32 error 38

Loading unloaded module list
...........
WARNING: .reload failed, module list may be incomplete
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

Use !analyze -v to get detailed debugging information.

BugCheck 50, {a22b3880, 0, a0039f44, 1}

Probably caused by : win32k.sys ( win32k!vStrWrite01+55 )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: a22b3880, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: a0039f44, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000001, (reserved)

Debugging Details:
------------------

READ_ADDRESS: a22b3880 Nonpaged pool

FAULTING_IP:
win32k!vStrWrite01+55
a0039f44 8b3482 mov esi,[edx+eax*4]

MM_INTERNAL_CODE: 1

DEFAULT_BUCKET_ID: INTEL_CPU_MICROCODE_ZERO

BUGCHECK_STR: 0x50

LAST_CONTROL_TRANSFER: from 8046b063 to 8044c796

STACK_TEXT:
bbac8820 8046b063 00000000 a22b3880 00000000 nt!MmAccessFault+0x7dc
bbac8820 a0039f44 00000000 a22b3880 00000000 nt!KiTrap0E+0xc7
bbac88e8 a003b049 a2000008 a2000114 a2083768 win32k!vStrWrite01+0x55
bbac8b24 a0104d94 a2083768 a21f0468 00000000 win32k!EngStretchBlt+0xba9
bbac8c9c a00de0b2 00000000 000002d2 00000247 win32k!GreStretchDIBitsInternal+0xa5c
bbac8d1c 80468389 16210354 000002d2 00000247 win32k!NtGdiStretchDIBitsInternal+0xf0
bbac8d1c 77f71e93 16210354 000002d2 00000247 nt!KiSystemService+0xc9
0760f1e0 00000000 00000000 00000000 00000000 GDI32!NtGdiStretchDIBitsInternal+0xb

STACK_COMMAND: .bugcheck ; kb

FOLLOWUP_IP:
win32k!vStrWrite01+55
a0039f44 8b3482 mov esi,[edx+eax*4]

SYMBOL_STACK_INDEX: 2

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: win32k!vStrWrite01+55

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4344ef76

FAILURE_BUCKET_ID: 0x50_win32k!vStrWrite01+55

BUCKET_ID: 0x50_win32k!vStrWrite01+55

Followup: MachineOwner
---------

eax=8908e13c ebx=00000050 ecx=bbac8838 edx=80467276 esi=800656b0 edi=c0288acc
eip=8044c796 esp=bbac87dc ebp=bbac8820 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!MmAccessFault+0x7dc:
8044c796 33c0 xor eax,eax
ChildEBP RetAddr Args to Child
bbac8820 8046b063 00000000 a22b3880 00000000 nt!MmAccessFault+0x7dc (FPO: [Non-Fpo])
bbac8820 a0039f44 00000000 a22b3880 00000000 nt!KiTrap0E+0xc7 (FPO: [0,0] TrapFrame @ bbac8838)
bbac88e8 a003b049 a2000008 a2000114 a2083768 win32k!vStrWrite01+0x55 (FPO: [Non-Fpo])
bbac8b24 a0104d94 a2083768 a21f0468 00000000 win32k!EngStretchBlt+0xba9 (FPO: [Non-Fpo])
bbac8c9c a00de0b2 00000000 000002d2 00000247 win32k!GreStretchDIBitsInternal+0xa5c (FPO: [Non-Fpo])
bbac8d1c 80468389 16210354 000002d2 00000247 win32k!NtGdiStretchDIBitsInternal+0xf0 (FPO: [Non-Fpo])
bbac8d1c 77f71e93 16210354 000002d2 00000247 nt!KiSystemService+0xc9 (FPO: [0,0] TrapFrame @ bbac8d64)
0760f1e0 00000000 00000000 00000000 00000000 GDI32!NtGdiStretchDIBitsInternal+0xb (FPO: [Non-Fpo])
start end module name
01000000 0100e000 spoolsv spoolsv.exe Tue Jul 12 07:59:10 2005 (42D34E1E)
77d30000 77da8000 RPCRT4 RPCRT4.dll Fri Apr 08 14:54:28 2005 (425670F4)
77e10000 77e79000 USER32 USER32.dll Thu Apr 21 11:08:41 2005 (42675F89)
77f40000 77f7c000 GDI32 GDI32.dll Thu Dec 29 15:15:55 2005 (43B3E18B)
77f80000 77ffc000 ntdll ntdll.dll Thu Jan 13 12:09:36 2005 (41E648E0)
78000000 78045000 MSVCRT MSVCRT.dll Tue Mar 11 20:55:17 2003 (3E6E3115)
7c2d0000 7c335000 ADVAPI32 ADVAPI32.dll Thu Apr 21 11:08:42 2005 (42675F8A)
7c570000 7c623000 KERNEL32 KERNEL32.dll Thu Jan 06 11:17:41 2005 (41DD0235)
80062000 80076f80 hal halmacpi.dll Fri Dec 03 05:29:15 2004 (41AFDD8B)
80400000 805a29c0 nt ntkrnlmp.exe Thu Oct 06 12:20:25 2005 (4344EC59)
a0000000 a0190000 win32k win32k.sys Thu Oct 06 12:33:42 2005 (4344EF76)
a0190000 a01f5b60 ati2drad ati2drad.dll Fri Jul 06 22:54:05 2001 (3B46175D)
a01f6000 a01fb760 HPW8kmd HPW8kmd.dll Wed Jan 26 14:01:19 2000 (388EE20F)
a07e0000 a07ed000 RDPDD RDPDD.dll unavailable (FFFFFFFE)
bd459000 bd46b000 naveng naveng.sys unavailable (FFFFFFFE)
bd46b000 bd521000 navex15 navex15.sys unavailable (FFFFFFFE)
bd5e9000 bd5ff000 RDPWD RDPWD.SYS unavailable (FFFFFFFE)
bdb4f000 bdb72000 Fastfat Fastfat.SYS unavailable (FFFFFFFE)
bdc3a000 bdc4a000 ipsec ipsec.sys unavailable (FFFFFFFE)
bde52000 bde62000 Cdfs Cdfs.SYS unavailable (FFFFFFFE)
bde92000 bdea0000 EraserUtilDrv10502 EraserUtilDrv10502.sys unavailable (FFFFFFFE)
bdfaa000 bdfb3000 termdd termdd.sys unavailable (FFFFFFFE)
be1e2000 be21d000 srv srv.sys unavailable (FFFFFFFE)
be30d000 be316000 Fips Fips.SYS unavailable (FFFFFFFE)
be4c5000 be4e4140 afd afd.sys Tue Apr 12 00:31:21 2005 (425AECA9)
bee75000 beec8000 eeCtrl eeCtrl.sys Wed Jan 25 02:00:57 2006 (43D6BFB9)
beec8000 bef31a40 mrxsmb mrxsmb.sys Sat Apr 02 04:23:32 2005 (424DF414)
bef44000 bef70ac0 rdbss rdbss.sys Tue Apr 12 00:31:22 2005 (425AECAA)
bf039000 bf08e000 savrt savrt.sys Sat Feb 05 06:03:24 2005 (4204458C)
bf08e000 bf0a2000 Savrtpel Savrtpel.sys Sat Feb 05 06:03:26 2005 (4204458E)
bf142000 bf15ebe0 SYMEVENT SYMEVENT.SYS Fri Apr 29 22:00:28 2005 (4272844C)
bf15f000 bf19ece0 SYMTDI SYMTDI.SYS Fri Apr 22 21:56:40 2005 (426948E8)
bf19f000 bf1c9d00 netbt netbt.sys Sat Apr 02 04:23:24 2005 (424DF40C)
bf1ca000 bf2181a0 tcpip tcpip.sys Thu May 12 13:24:58 2005 (42832EFA)
bf255000 bf2586c0 dump_diskdump dump_diskdump.sys Tue Feb 25 21:18:04 2003 (3E5BC16C)
bfa81000 bfaab3a0 update update.sys Wed Apr 16 07:22:01 2003 (3E9CDA69)
bfaac000 bfac7b40 ks ks.sys Wed Apr 16 07:02:11 2003 (3E9CD5C3)
bfada000 bfafd060 rdpdr rdpdr.sys Fri Mar 21 23:43:14 2003 (3E7B8772)
bfb26000 bfb3cba0 ndiswan ndiswan.sys Wed Apr 30 02:05:01 2003 (3EAF051D)
bfb3d000 bfb6b380 b57w2k b57w2k.sys Sun Jun 20 02:26:38 2004 (40D4CBAE)
bfb6c000 bfc3a4e0 winachcf winachcf.sys Sat Sep 15 02:41:13 2001 (3BA29599)
bfc3b000 bfc83900 ati2mpad ati2mpad.sys Fri Jul 06 22:53:36 2001 (3B461740)
bfc90000 bfc93580 vga vga.sys Sat Sep 25 21:37:40 1999 (37ED1674)
bfca0000 bfca2d80 smbusdh smbusdh.sys Tue Dec 09 21:04:59 2003 (3FD61CDB)
bfccc000 bfce1be0 Mup Mup.sys Fri Dec 03 05:37:23 2004 (41AFDF73)
bfce2000 bfd8b4c0 vmodem vmodem.sys Thu Jan 16 01:15:01 2003 (3E25EB75)
bfd8c000 bfe48340 vpctcom vpctcom.sys Fri Jan 17 04:19:44 2003 (3E276840)
bfe49000 bfe72aa0 NDIS NDIS.sys Wed Apr 30 02:05:01 2003 (3EAF051D)
bfe73000 bfef0480 Ntfs Ntfs.sys Tue May 10 12:20:29 2005 (42807CDD)
bfef1000 bff027c0 KSecDD KSecDD.sys Sun Sep 21 03:32:19 2003 (3F6CF193)
bff03000 bff151c0 Dfs Dfs.sys Wed Feb 12 04:19:06 2003 (3E49AF1A)
bff16000 bff375a0 fltmgr fltmgr.sys Thu Apr 14 09:59:00 2005 (425E14B4)
bff38000 bff49660 AACMgt AACMgt.sys Thu Jun 10 07:32:57 2004 (40C7E479)
bff4a000 bff5c180 SCSIPORT SCSIPORT.SYS Thu Jul 14 15:24:06 2005 (42D65966)
bff5d000 bff72180 Unknown_Module_bff5d000 Unknown_Module_bff5d000 Tue Apr 01 21:08:25 2003 (3E89D599)
bff73000 bff949c0 dmio dmio.sys Wed Jan 15 21:47:04 2003 (3E25BAB8)
bff95000 bffb15a0 ftdisk ftdisk.sys Fri Dec 03 05:29:58 2004 (41AFDDB6)
bffb2000 bffd9c20 ACPI ACPI.sys Wed Jan 15 21:44:22 2003 (3E25BA16)
bffda000 bffffe00 d347bus d347bus.sys Sun Aug 22 16:31:09 2004 (4128A01D)
eb000000 eb00e6a0 pci pci.sys Wed Jan 15 21:44:07 2003 (3E25BA07)
eb010000 eb01b680 isapnp isapnp.sys Wed Jan 15 21:43:47 2003 (3E25B9F3)
eb020000 eb0294a0 symmpi symmpi.sys Fri May 23 20:47:31 2003 (3ECE5EB3)
eb030000 eb038700 CLASSPNP CLASSPNP.SYS Wed Jan 15 21:42:51 2003 (3E25B9BB)
eb040000 eb04f940 vvoice vvoice.sys Thu Jan 16 01:15:24 2003 (3E25EB8C)
eb080000 eb08c4c0 VIDEOPRT VIDEOPRT.SYS Wed Jan 15 21:47:20 2003 (3E25BAC8)
eb090000 eb09b680 i8042prt i8042prt.sys Wed Apr 16 07:00:59 2003 (3E9CD57B)
eb0a0000 eb0aca80 rasl2tp rasl2tp.sys Wed Apr 30 02:05:06 2003 (3EAF0522)
eb0b0000 eb0bbc40 raspptp raspptp.sys Thu May 15 02:47:00 2003 (3EC2D574)
eb0e0000 eb0e9be0 usbhub usbhub.sys Wed Mar 19 01:30:41 2003 (3E77AC21)
eb110000 eb119ce0 NDProxy NDProxy.SYS Fri Oct 01 02:25:35 1999 (37F3F16F)
eb120000 eb128fa0 Npfs Npfs.SYS Sun Oct 10 02:58:07 1999 (37FFD68F)
eb130000 eb138680 msgpc msgpc.sys Wed Jan 15 21:54:25 2003 (3E25BC71)
eb140000 eb1481a0 netbios netbios.sys Tue Oct 12 22:34:19 1999 (38038D3B)
eb1c0000 eb1c94a0 dump_symmpi dump_symmpi.sys Fri May 23 20:47:31 2003 (3ECE5EB3)
eb280000 eb285520 PCIIDEX PCIIDEX.SYS Tue Feb 25 20:31:08 2003 (3E5BB66C)
eb288000 eb28f4c0 MountMgr MountMgr.sys Tue Aug 16 11:40:55 2005 (4301A697)
eb290000 eb297720 disk disk.sys Wed Jan 15 21:43:05 2003 (3E25B9C9)
eb2c8000 eb2cf0e0 Modem Modem.SYS Wed Jan 15 21:43:48 2003 (3E25B9F4)
eb2d8000 eb2ddec0 kbdclass kbdclass.sys Thu Feb 20 18:37:30 2003 (3E55044A)
eb2e8000 eb2ed400 mouclass mouclass.sys Thu Feb 20 18:37:45 2003 (3E550459)
eb2f8000 eb2ff000 fdc fdc.sys unavailable (FFFFFFFE)
eb308000 eb30ec40 cdrom cdrom.sys Wed Jan 15 21:43:04 2003 (3E25B9C8)
eb318000 eb31dfc0 openhci openhci.sys Sat Mar 01 02:28:59 2003 (3E5FFECB)
eb330000 eb334fc0 USBD USBD.SYS Wed Jan 22 19:05:33 2003 (3E2ECF5D)
eb358000 eb35c400 ptilink ptilink.sys Wed Jan 15 21:47:15 2003 (3E25BAC3)
eb368000 eb36c0e0 raspti raspti.sys Fri Oct 08 23:45:10 1999 (37FE57D6)
eb370000 eb377400 smbushc smbushc.sys Thu Apr 29 00:01:03 2004 (40901B8F)
eb388000 eb38ca60 flpydisk flpydisk.sys Wed Jan 15 21:42:52 2003 (3E25B9BC)
eb398000 eb39ea20 EFS EFS.SYS Wed Jan 15 21:46:55 2003 (3E25BAAF)
eb3a8000 eb3ad320 USBSTOR USBSTOR.SYS Wed Jan 15 21:45:52 2003 (3E25BA70)
eb3b8000 eb3bd000 TDTCP TDTCP.SYS unavailable (FFFFFFFE)
eb3c8000 eb3cd240 Msfs Msfs.SYS Wed Oct 27 02:21:32 1999 (3816377C)
eb3e8000 eb3efd00 wanarp wanarp.sys Fri Aug 16 15:25:01 2002 (3D5CEF1D)
eb410000 eb412a20 BOOTVID BOOTVID.dll Thu Nov 04 03:24:33 1999 (3820E051)
eb414000 eb416d00 PartMgr PartMgr.sys Wed Jan 15 21:43:07 2003 (3E25B9CB)
eb418000 eb41a800 smbgen smbgen.sys Tue Dec 09 21:05:04 2003 (3FD61CE0)
eb4b8000 eb4ba2e0 ndistapi ndistapi.sys Wed Jan 15 21:54:15 2003 (3E25BC67)
eb4c8000 eb4cbe60 TDI TDI.SYS Wed Jan 15 21:56:26 2003 (3E25BCEA)
eb4e8000 eb4ebe00 MODEMCSA MODEMCSA.sys Sat Sep 25 21:34:56 1999 (37ED15D0)
eb500000 eb501d20 Diskperf Diskperf.sys Wed Feb 12 23:34:38 2003 (3E4ABDEE)
eb502000 eb503b80 dmload dmload.sys Wed Jan 15 21:47:06 2003 (3E25BABA)
eb504000 eb505480 d347prt d347prt.sys Sun Aug 22 16:31:48 2004 (4128A044)
eb50e000 eb50fca0 Fs_Rec Fs_Rec.SYS Wed Jan 15 21:53:30 2003 (3E25BC3A)
eb516000 eb517e40 rasacd rasacd.sys Sat Sep 25 21:41:23 1999 (37ED1753)
eb5c8000 eb5c8f80 WMILIB WMILIB.SYS Sat Sep 25 21:36:47 1999 (37ED163F)
eb5c9000 eb5c9b00 pciide pciide.sys Wed Jan 15 21:43:03 2003 (3E25B9C7)
eb618000 eb618a40 audstub audstub.sys Sat Sep 25 21:35:33 1999 (37ED15F5)
eb62f000 eb62fd80 swenum swenum.sys Sat Sep 25 21:36:31 1999 (37ED162F)
eb64d000 eb64d9e0 Null Null.SYS Sat Sep 25 21:34:58 1999 (37ED15D2)
eb652000 eb652ee0 Beep Beep.SYS Thu Oct 21 01:18:59 1999 (380E3FD3)
eb656000 eb656f80 mnmdd mnmdd.SYS Sat Sep 25 21:37:40 1999 (37ED1674)

Unloaded modules:
bd717000 bd729000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bd729000 bd7df000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bd717000 bd729000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bd729000 bd7df000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bef71000 bef83000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bef83000 bf039000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
be56d000 be57d000 Serial.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
eb3e0000 eb3e7000 Parport.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
eb160000 eb169000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb3b8000 eb3bd000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
bfc98000 bfc9b000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

cpc2004 · 25th February 2006

Hi,

You version of Norton AV is an unstable version and you had better upgrade Norton AV to latest version. I find the footprint of MmAccessFault at the stack trace and it is the sign of fault ram. Run memtest to stress test the ram.

bbac8820 8046b063 00000000 a22b3880 00000000 nt!MmAccessFault+0x7dc <-- faulty ram
bbac8820 a0039f44 00000000 a22b3880 00000000 nt!KiTrap0E+0xc7

**Arie** · 9th March 2006

archy9 any feedback?