Dump windows 2003 terminal server stop code 50

jimmyzshack · 14th November 2006

I ran this sites dump code software and got the following results. can someone help me out with what it means?
thanks,

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 MP (4 procs) Free x86 compatible
Product: Server, suite: TerminalServer
Built by: 3790.srv03_gdr.040410-1234
Kernel base = 0x804de000 PsLoadedModuleList = 0x8057b6a8
Debug session time: Mon Nov 13 11:30:24.287 2006 (GMT-6)
System Uptime: 0 days 11:42:13.340
Loading Kernel Symbols
........................................................................... ...................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details
Loading unloaded module list
...
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

Use !analyze -v to get detailed debugging information.

BugCheck 50, {8a800000, 0, f55e58b0, 0}

Probably caused by : mrxsmb.sys ( mrxsmb!TransformMD5+80 )

Followup: MachineOwner
---------

3: kd> !analyze -v;r;kv;lmtn;.logclose;q
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: 8a800000, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: f55e58b0, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------

READ_ADDRESS: 8a800000

FAULTING_IP:
mrxsmb!TransformMD5+80
f55e58b0 8b6910 mov ebp,dword ptr [ecx+10h]

MM_INTERNAL_CODE: 0

IMAGE_NAME: mrxsmb.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 41edb956

MODULE_NAME: mrxsmb

FAULTING_MODULE: f55cd000 mrxsmb

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: C1WIN32.EXE

CURRENT_IRQL: 1

TRAP_FRAME: b7972810 -- (.trap ffffffffb7972810)
.trap ffffffffb7972810
ErrCode = 00000000
eax=52d59390 ebx=07247cc0 ecx=8a7ffff0 edx=dfdfd392 esi=5142a202 edi=239715d3
eip=f55e58b0 esp=b7972884 ebp=00000000 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
mrxsmb!TransformMD5+0x80:
f55e58b0 8b6910 mov ebp,dword ptr [ecx+10h] ds:0023:8a800000=????????
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 8052fa2f to 80543ac9

STACK_TEXT:
b79727a8 8052fa2f 00000050 8a800000 00000000 nt!KeBugCheckEx+0x19
b79727f8 804e2dfc 00000000 8a800000 00000000 nt!MmAccessFault+0x796
b79727f8 f55e58b0 00000000 8a800000 00000000 nt!KiTrap0E+0xc8
b7972890 f55e4f57 b79728dc 8a7ffff0 88bb8b58 mrxsmb!TransformMD5+0x80
b79728b0 f55d776f b79728d4 8936ad40 00000057 mrxsmb!MD5Update+0xf7
b7972940 f55da500 88bb8b58 884b3f88 8805e970 mrxsmb!SmbAddSmbSecuritySignature+0xbd
b7972978 f5606bcb 0105e8e0 00000000 8805ebc4 mrxsmb!SmbCeTranceive+0x1d6
b79729b4 f55fb0fb 00000000 0000002c 00000000 mrxsmb!SmbPseOrdinaryExchange+0x189
b79729e0 f5606598 0005e8e0 88d52c88 f5605a1c mrxsmb!SmbPseExchangeStart_Locks+0x1f7
b79729ec f5605a1c 8805e8e0 b7972a14 88d52d08 mrxsmb!SmbPseExchangeStart_default+0xe
b7972a04 f55fb391 00000000 88d52c88 b7972a34 mrxsmb!SmbCeInitiateExchange+0x244
f55ed6c0 89e91a10 00000000 00000000 00000000 mrxsmb!MRxSmbLocks+0x2f
WARNING: Frame IP not in any known module. Following frames may be wrong.
f55ed6c8 00000000 00000000 8a17b988 00000000 0x89e91a10

STACK_COMMAND: kb

FOLLOWUP_IP:
mrxsmb!TransformMD5+80
f55e58b0 8b6910 mov ebp,dword ptr [ecx+10h]

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: mrxsmb!TransformMD5+80

FOLLOWUP_NAME: MachineOwner

FAILURE_BUCKET_ID: 0x50_mrxsmb!TransformMD5+80

BUCKET_ID: 0x50_mrxsmb!TransformMD5+80

Followup: MachineOwner
---------

eax=f774713c ebx=00000050 ecx=88096cb0 edx=804e5bb0 esi=f7747120 edi=88096cb0
eip=80543ac9 esp=b7972790 ebp=b79727a8 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x19:
80543ac9 5d pop ebp
ChildEBP RetAddr Args to Child
b79727a8 8052fa2f 00000050 8a800000 00000000 nt!KeBugCheckEx+0x19 (FPO: [Non-Fpo])
b79727f8 804e2dfc 00000000 8a800000 00000000 nt!MmAccessFault+0x796 (FPO: [Non-Fpo])
b79727f8 f55e58b0 00000000 8a800000 00000000 nt!KiTrap0E+0xc8 (FPO: [0,0] TrapFrame @ b7972810)
b7972890 f55e4f57 b79728dc 8a7ffff0 88bb8b58 mrxsmb!TransformMD5+0x80 (FPO: [Uses EBP] [2,0,4])
b79728b0 f55d776f b79728d4 8936ad40 00000057 mrxsmb!MD5Update+0xf7 (FPO: [Uses EBP] [3,1,0])
b7972940 f55da500 88bb8b58 884b3f88 8805e970 mrxsmb!SmbAddSmbSecuritySignature+0xbd (FPO: [Non-Fpo])
b7972978 f5606bcb 0105e8e0 00000000 8805ebc4 mrxsmb!SmbCeTranceive+0x1d6 (FPO: [Non-Fpo])
b79729b4 f55fb0fb 00000000 0000002c 00000000 mrxsmb!SmbPseOrdinaryExchange+0x189 (FPO: [Non-Fpo])
b79729e0 f5606598 0005e8e0 88d52c88 f5605a1c mrxsmb!SmbPseExchangeStart_Locks+0x1f7 (FPO: [Non-Fpo])
b79729ec f5605a1c 8805e8e0 b7972a14 88d52d08 mrxsmb!SmbPseExchangeStart_default+0xe (FPO: [1,0,0])
b7972a04 f55fb391 00000000 88d52c88 b7972a34 mrxsmb!SmbCeInitiateExchange+0x244 (FPO: [Uses EBP] [1,0,0])
f55ed6c0 89e91a10 00000000 00000000 00000000 mrxsmb!MRxSmbLocks+0x2f (FPO: [Non-Fpo])
WARNING: Frame IP not in any known module. Following frames may be wrong.
f55ed6c8 00000000 00000000 8a17b988 00000000 0x89e91a10
start end module name
804de000 80745000 nt ntkrnlmp.exe Wed May 26 19:32:57 2004 (40B53739)
80745000 8076d000 hal halmacpi.dll Tue Mar 25 01:07:28 2003 (3E800030)
bf800000 bf9c7000 win32k win32k.sys Tue Dec 28 17:26:09 2004 (41D1EB91)
bf9c7000 bfa1d680 ati2drad ati2drad.dll Tue Mar 25 03:43:37 2003 (3E8024C9)
bfa1e000 bfa59500 vdtw30 vdtw30.dll Tue May 06 18:55:58 2003 (3EB84B8E)
bff60000 bff7b000 RDPDD RDPDD.dll Tue Mar 25 14:12:05 2003 (3E80B815)
bff80000 bff96000 dxg dxg.sys Tue Mar 25 03:46:23 2003 (3E80256F)
bffa0000 bffe8000 ATMFD ATMFD.DLL Tue Mar 25 03:46:23 2003 (3E80256F)
f243f000 f2441000 pdcrypt1 pdcrypt1.SYS Tue May 06 18:58:30 2003 (3EB84C26)
f246a000 f2499000 afd afd.sys Tue Mar 25 01:40:50 2003 (3E800802)
f2623000 f264e000 cdm cdm.sys Tue May 06 18:54:40 2003 (3EB84B40)
f2895000 f28f3000 srv srv.sys Tue May 03 19:49:51 2005 (42781C2F)
f2943000 f299b000 HTTP HTTP.sys Tue Mar 25 02:55:21 2003 (3E801979)
f2ba4000 f2ba6300 uphcleanhlp uphcleanhlp.sys Wed Apr 27 13:58:56 2005 (426FE0F0)
f2bd2000 f2bd3380 ctxsmcdrv ctxsmcdrv.sys Tue May 06 18:59:02 2003 (3EB84C46)
f3353000 f3367440 naiavf5x naiavf5x.sys Mon Aug 04 20:08:00 2003 (3F2F0370)
f3458000 f347a000 RDPWD RDPWD.SYS Tue Jun 14 18:43:00 2005 (42AF6B84)
f347a000 f34a3b80 WDICA WDICA.SYS Tue May 06 18:56:37 2003 (3EB84BB5)
f3594000 f35ac000 ipnat ipnat.sys Tue Mar 25 01:11:05 2003 (3E800109)
f3644000 f364e000 TDTCP TDTCP.SYS Tue Mar 25 01:02:52 2003 (3E7FFF1C)
f3680000 f3683100 IcaReduc IcaReduc.SYS Tue May 06 18:56:16 2003 (3EB84BA0)
f38b0000 f38c8000 Cdfs Cdfs.SYS Tue Mar 25 02:17:19 2003 (3E80108F)
f49b5000 f49be000 ndisuio ndisuio.sys Tue Mar 25 01:09:47 2003 (3E8000BB)
f55ba000 f55cd000 Fips Fips.SYS Tue Mar 25 02:54:59 2003 (3E801963)
f55cd000 f5639000 mrxsmb mrxsmb.sys Tue Jan 18 19:35:18 2005 (41EDB956)
f5675000 f56a0000 rdbss rdbss.sys Mon Oct 11 19:38:09 2004 (416B2771)
f56c8000 f56fd000 netbt netbt.sys Fri Jul 18 12:16:03 2003 (3F182B53)
f56fd000 f575f000 tcpip tcpip.sys Tue Mar 25 02:04:01 2003 (3E800D71)
f575f000 f577b000 ipsec ipsec.sys Tue Mar 25 01:55:45 2003 (3E800B81)
f577b000 f578a000 dump_Sptrak dump_Sptrak.sys Tue May 13 18:11:24 2003 (3EC17B9C)
f57cb000 f57d5000 Dxapi Dxapi.sys Tue Mar 25 01:06:01 2003 (3E7FFFD9)
f5853000 f585a000 dxgthk dxgthk.sys Tue Mar 25 01:05:52 2003 (3E7FFFD0)
f5ed2000 f5edb000 dump_diskdump dump_diskdump.sys Tue Mar 25 01:05:15 2003 (3E7FFFAB)
f5ee2000 f5eef000 netbios netbios.sys Tue Mar 25 01:09:53 2003 (3E8000C1)
f5ef2000 f5eff000 wanarp wanarp.sys Tue Mar 25 01:11:22 2003 (3E80011A)
f5f12000 f5f21000 msgpc msgpc.sys Tue Mar 25 01:10:12 2003 (3E8000D4)
f5f53000 f5f66000 usbhub usbhub.sys Tue Mar 25 01:10:46 2003 (3E8000F6)
f5f66000 f5f99000 update update.sys Tue Mar 25 02:59:59 2003 (3E801A8F)
f5f99000 f5fcd000 rdpdr rdpdr.sys Tue Mar 25 01:09:30 2003 (3E8000AA)
f5fcd000 f5fe2000 raspptp raspptp.sys Tue Mar 25 02:19:09 2003 (3E8010FD)
f5fe2000 f5ffd000 ndiswan ndiswan.sys Tue Mar 25 02:48:19 2003 (3E8017D3)
f5ffd000 f6014000 rasl2tp rasl2tp.sys Tue Mar 25 01:54:46 2003 (3E800B46)
f6014000 f6035e80 USBPORT USBPORT.SYS Tue Mar 25 01:10:43 2003 (3E8000F3)
f6036000 f6060000 ks ks.sys Tue Mar 25 02:47:36 2003 (3E8017A8)
f6060000 f6074000 redbook redbook.sys Tue Mar 25 01:04:38 2003 (3E7FFF86)
f6074000 f6088000 cdrom cdrom.sys Tue Mar 25 01:05:18 2003 (3E7FFFAE)
f6088000 f609f000 parport parport.sys Tue Mar 25 01:03:56 2003 (3E7FFF5C)
f609f000 f60b7000 serial serial.sys Tue Mar 25 01:40:08 2003 (3E8007D8)
f60b7000 f60cd000 i8042prt i8042prt.sys Tue Mar 25 03:01:43 2003 (3E801AF7)
f60cd000 f60e6000 VIDEOPRT VIDEOPRT.SYS Tue Mar 25 01:08:02 2003 (3E800052)
f60e6000 f6139d80 ati2mpad ati2mpad.sys Thu Jul 18 20:13:20 2002 (3D3767B0)
f613a000 f6162200 e1000325 e1000325.sys Thu Apr 27 11:26:28 2006 (4450F0B4)
f622c000 f622d780 PDRFRAME PDRFRAME.SYS Tue May 06 18:58:23 2003 (3EB84C1F)
f63b7000 f63b7d20 ISAIONT ISAIONT.SYS Tue Jun 19 14:05:54 2001 (3B2FA292)
f63b8000 f63b8b80 mbmiodrvr mbmiodrvr.sys Sat Apr 10 09:42:35 2004 (407807DB)
f63ba000 f63ba9e0 MemMapNt MemMapNt.SYS Sat Nov 11 16:14:16 2000 (3A0DC4B8)
f63d3000 f63d3f80 icacdd icacdd.sys Tue May 06 18:56:00 2003 (3EB84B90)
f64a9000 f64b7000 NDProxy NDProxy.SYS Tue Mar 25 01:11:30 2003 (3E800122)
f64b9000 f64c8000 termdd termdd.sys Tue Mar 25 01:02:52 2003 (3E7FFF1C)
f64c9000 f64d2000 raspti raspti.sys Tue Mar 25 01:11:36 2003 (3E800128)
f64d9000 f64e4000 ptilink ptilink.sys Tue Mar 25 01:03:51 2003 (3E7FFF57)
f64e9000 f64f4000 TDI TDI.SYS Tue Mar 25 01:14:28 2003 (3E8001D4)
f67a5000 f67a9200 usbohci usbohci.sys Tue Mar 25 01:10:41 2003 (3E8000F1)
f67ad000 f67b5000 RDPCDD RDPCDD.sys Tue Mar 25 01:03:05 2003 (3E7FFF29)
f67b5000 f67bc000 parvdm parvdm.sys Tue Mar 25 01:03:49 2003 (3E7FFF55)
f67bd000 f67c4000 Beep Beep.SYS Tue Mar 25 01:03:04 2003 (3E7FFF28)
f67cd000 f67d4000 Null Null.SYS Tue Mar 25 01:03:05 2003 (3E7FFF29)
f713b000 f713d700 SMBus SMBus.SYS Wed Apr 20 16:49:01 2005 (4266CE4D)
f7237000 f7259000 Mup Mup.sys Tue Mar 25 02:55:58 2003 (3E80199E)
f7259000 f729a000 NDIS NDIS.sys Tue Mar 25 02:45:35 2003 (3E80172F)
f729a000 f7337000 Ntfs Ntfs.sys Tue Mar 25 01:40:05 2003 (3E8007D5)
f7337000 f7358000 KSecDD KSecDD.sys Tue Mar 25 01:05:39 2003 (3E7FFFC3)
f7358000 f736e000 CLASSPNP CLASSPNP.SYS Tue Mar 25 01:38:14 2003 (3E800766)
f736e000 f7394000 SCSIPORT SCSIPORT.SYS Tue Mar 25 02:01:25 2003 (3E800CD5)
f7394000 f73b0000 atapi atapi.sys Tue Mar 25 01:04:48 2003 (3E7FFF90)
f73b0000 f73d1000 volsnap volsnap.sys Tue Mar 25 01:05:47 2003 (3E7FFFCB)
f73d1000 f73fb000 dmio dmio.sys Tue Mar 25 01:08:14 2003 (3E80005E)
f73fb000 f7420000 ftdisk ftdisk.sys Tue Mar 25 01:05:26 2003 (3E7FFFB6)
f7420000 f7435000 pci pci.sys Tue Mar 25 01:16:40 2003 (3E800258)
f7435000 f7466000 ACPI ACPI.sys Tue Mar 25 01:16:21 2003 (3E800245)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 01:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 01:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Tue Mar 25 01:04:44 2003 (3E7FFF8C)
f74b7000 f74c6000 MountMgr MountMgr.sys Tue Mar 25 01:03:05 2003 (3E7FFF29)
f74c7000 f74d5000 PartMgr PartMgr.sys Tue Mar 25 02:04:02 2003 (3E800D72)
f74d7000 f74e6000 Sptrak Sptrak.sys Tue May 13 18:11:24 2003 (3EC17B9C)
f74e7000 f74f6000 disk disk.sys Tue Mar 25 01:05:20 2003 (3E7FFFB0)
f74f7000 f7503000 Dfs Dfs.sys Tue Mar 25 01:09:52 2003 (3E8000C0)
f7507000 f7510000 crcdisk crcdisk.sys Tue Mar 25 01:07:23 2003 (3E80002B)
f7517000 f7521000 flpydisk flpydisk.sys Tue Mar 25 01:04:32 2003 (3E7FFF80)
f7557000 f7563000 vga vga.sys Tue Mar 25 01:08:03 2003 (3E800053)
f7577000 f7581000 Msfs Msfs.SYS Tue Mar 25 01:08:56 2003 (3E800088)
f7587000 f7593000 Npfs Npfs.SYS Tue Mar 25 01:08:59 2003 (3E80008B)
f7597000 f75a3000 processr processr.sys Tue Mar 25 01:07:36 2003 (3E800038)
f75b7000 f75c0000 watchdog watchdog.sys Tue Mar 25 01:09:01 2003 (3E80008D)
f75c7000 f75d1000 mouclass mouclass.sys Tue Mar 25 01:03:09 2003 (3E7FFF2D)
f75d7000 f75e1000 kbdclass kbdclass.sys Tue Mar 25 01:03:10 2003 (3E7FFF2E)
f75e7000 f75f2000 fdc fdc.sys Tue Mar 25 01:04:31 2003 (3E7FFF7F)
f75f7000 f7601000 serenum serenum.sys Tue Mar 25 01:04:01 2003 (3E7FFF61)
f7607000 f7610000 ndistapi ndistapi.sys Tue Mar 25 01:11:28 2003 (3E800120)
f7627000 f7635000 raspppoe raspppoe.sys Tue Mar 25 01:11:37 2003 (3E800129)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 01:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 01:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 01:04:46 2003 (3E7FFF8E)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 01:08:08 2003 (3E800058)
f7787000 f778f000 Fs_Rec Fs_Rec.SYS Tue Mar 25 01:08:36 2003 (3E800074)
f778f000 f7797000 rasacd rasacd.sys Tue Mar 25 01:11:50 2003 (3E800136)
f7797000 f779f000 mnmdd mnmdd.SYS Tue Mar 25 01:07:53 2003 (3E800049)
f779f000 f77a7000 audstub audstub.sys Tue Mar 25 01:09:12 2003 (3E800098)
f79e1000 f79e2200 swenum swenum.sys Tue Mar 25 01:03:22 2003 (3E7FFF3A)
f79e5000 f79e6580 USBD USBD.SYS Tue Mar 25 01:10:39 2003 (3E8000EF)

Unloaded modules:
f5e92000 f5ea0000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7117000 f711b000 superbmc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7757000 f775f000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

cpc2004 · 15th November 2006

Hi,

One minidump is unable to find out the culpirt. Attach more minidumps here. The prelimary finding is faulty ram. Run memtest to stress test the ram.

jimmyzshack · 15th November 2006

Quote:

Originally Posted by cpc2004

Hi,

One minidump is unable to find out the culpirt. Attach more minidumps here. The prelimary finding is faulty ram. Run memtest to stress test the ram.

This happens at least once a week so i'll post more. thanks,

jimmyzshack · 22nd November 2006

Here is the newest output.

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 MP (4 procs) Free x86 compatible
Product: Server, suite: TerminalServer
Built by: 3790.srv03_gdr.040410-1234
Kernel base = 0x804de000 PsLoadedModuleList = 0x8057b6a8
Debug session time: Wed Nov 22 08:02:54.557 2006 (GMT-6)
System Uptime: 0 days 3:14:54.678
Loading Kernel Symbols
........................................................................... ..................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details
Loading unloaded module list
...
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

Use !analyze -v to get detailed debugging information.

BugCheck 50, {90909090, 0, 90909090, 0}

Page e98bb not present in the dump file. Type ".hh dbgerr004" for details
Page e9a81 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Probably caused by : win32k.sys ( win32k!RawInputThread+4b9 )

Followup: MachineOwner
---------

3: kd> !analyze -v;r;kv;lmtn;.logclose;q
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: 90909090, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 90909090, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------

Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details

READ_ADDRESS: 90909090

FAULTING_IP:
+ffffffff90909090
90909090 ?? ???

MM_INTERNAL_CODE: 0

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: csrss.exe

CURRENT_IRQL: 1

TRAP_FRAME: baeb3a4c -- (.trap ffffffffbaeb3a4c)
.trap ffffffffbaeb3a4c
ErrCode = 00000000
eax=00000000 ebx=bf9ac2d0 ecx=00000000 edx=00000000 esi=00000001 edi=804eadf0
eip=90909090 esp=baeb3ac0 ebp=00000000 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
90909090 ?? ???
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 8052fa2f to 80543ac9

FAILED_INSTRUCTION_ADDRESS:
+ffffffff90909090
90909090 ?? ???

STACK_TEXT:
baeb39e4 8052fa2f 00000050 90909090 00000000 nt!KeBugCheckEx+0x19
baeb3a34 804e2dfc 00000000 90909090 00000000 nt!MmAccessFault+0x796
baeb3a34 90909090 00000000 90909090 00000000 nt!KiTrap0E+0xc8
WARNING: Frame IP not in any known module. Following frames may be wrong.
baeb3abc bf8dd2c5 00000007 890a9548 00000001 0x90909090
baeb3d34 bf8afa9f f6d204c4 00000002 baeb3d64 win32k!RawInputThread+0x4b9
baeb3d44 bf803518 f6d204c4 baeb3d64 0089fff4 win32k!xxxCreateSystemThreads+0x68
baeb3d54 804dfd24 00000000 00000022 00000000 win32k!NtUserCallOneParam+0x20
baeb3d54 7ffe0304 00000000 00000022 00000000 nt!KiSystemService+0xd0
00000000 00000000 00000000 00000000 00000000 SharedUserData!SystemCallStub+0x4

STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!RawInputThread+4b9
bf8dd2c5 392d10c29abf cmp dword ptr [win32k!gdwUpdateKeyboard (bf9ac210)],ebp

SYMBOL_STACK_INDEX: 4

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 41d1eb91

SYMBOL_NAME: win32k!RawInputThread+4b9

FAILURE_BUCKET_ID: 0x50_CODE_AV_BAD_IP_win32k!RawInputThread+4b9

BUCKET_ID: 0x50_CODE_AV_BAD_IP_win32k!RawInputThread+4b9

Followup: MachineOwner
---------

eax=f774713c ebx=00000050 ecx=88f966e8 edx=804e5bb0 esi=f7747120 edi=88f966e8
eip=80543ac9 esp=baeb39cc ebp=baeb39e4 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x19:
80543ac9 5d pop ebp
ChildEBP RetAddr Args to Child
baeb39e4 8052fa2f 00000050 90909090 00000000 nt!KeBugCheckEx+0x19 (FPO: [Non-Fpo])
baeb3a34 804e2dfc 00000000 90909090 00000000 nt!MmAccessFault+0x796 (FPO: [Non-Fpo])
baeb3a34 90909090 00000000 90909090 00000000 nt!KiTrap0E+0xc8 (FPO: [0,0] TrapFrame @ baeb3a4c)
WARNING: Frame IP not in any known module. Following frames may be wrong.
baeb3abc bf8dd2c5 00000007 890a9548 00000001 0x90909090
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
baeb3d34 bf8afa9f f6d204c4 00000002 baeb3d64 win32k!RawInputThread+0x4b9 (FPO: [Uses EBP] [1,145,0])
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
baeb3d44 bf803518 f6d204c4 baeb3d64 0089fff4 win32k!xxxCreateSystemThreads+0x68 (FPO: [Non-Fpo])
baeb3d54 804dfd24 00000000 00000022 00000000 win32k!NtUserCallOneParam+0x20 (FPO: [2,0,0])
baeb3d54 7ffe0304 00000000 00000022 00000000 nt!KiSystemService+0xd0 (FPO: [0,0] TrapFrame @ baeb3d64)
00000000 00000000 00000000 00000000 00000000 SharedUserData!SystemCallStub+0x4 (FPO: [0,0,0])
start end module name
804de000 80745000 nt ntkrnlmp.exe Wed May 26 19:32:57 2004 (40B53739)
80745000 8076d000 hal halmacpi.dll Tue Mar 25 01:07:28 2003 (3E800030)
bf800000 bf9c7000 win32k win32k.sys Tue Dec 28 17:26:09 2004 (41D1EB91)
bf9c7000 bfa1d680 ati2drad ati2drad.dll Tue Mar 25 03:43:37 2003 (3E8024C9)
bfa1e000 bfa59500 vdtw30 vdtw30.dll Tue May 06 18:55:58 2003 (3EB84B8E)
bff60000 bff7b000 RDPDD RDPDD.dll Tue Mar 25 14:12:05 2003 (3E80B815)
bff80000 bff96000 dxg dxg.sys Tue Mar 25 03:46:23 2003 (3E80256F)
f2591000 f25a5440 naiavf5x naiavf5x.sys Mon Aug 04 20:08:00 2003 (3F2F0370)
f25f6000 f2618000 RDPWD RDPWD.SYS Tue Jun 14 18:43:00 2005 (42AF6B84)
f2640000 f2669b80 WDICA WDICA.SYS Tue May 06 18:56:37 2003 (3EB84BB5)
f26e2000 f26e5100 IcaReduc IcaReduc.SYS Tue May 06 18:56:16 2003 (3EB84BA0)
f27aa000 f27c2000 ipnat ipnat.sys Tue Mar 25 01:11:05 2003 (3E800109)
f2b6a000 f2b6c300 uphcleanhlp uphcleanhlp.sys Wed Apr 27 13:58:56 2005 (426FE0F0)
f2dba000 f2dc4000 TDTCP TDTCP.SYS Tue Mar 25 01:02:52 2003 (3E7FFF1C)
f2e02000 f2e60000 srv srv.sys Tue May 03 19:49:51 2005 (42781C2F)
f2eb0000 f2f08000 HTTP HTTP.sys Tue Mar 25 02:55:21 2003 (3E801979)
f2fd0000 f2ffb000 cdm cdm.sys Tue May 06 18:54:40 2003 (3EB84B40)
f313b000 f316a000 afd afd.sys Tue Mar 25 01:40:50 2003 (3E800802)
f31f4000 f31f5780 PDRFRAME PDRFRAME.SYS Tue May 06 18:58:23 2003 (3EB84C1F)
f34ad000 f34af000 pdcrypt1 pdcrypt1.SYS Tue May 06 18:58:30 2003 (3EB84C26)
f393e000 f393f380 ctxsmcdrv ctxsmcdrv.sys Tue May 06 18:59:02 2003 (3EB84C46)
f4803000 f481b000 Cdfs Cdfs.SYS Tue Mar 25 02:17:19 2003 (3E80108F)
f4b9f000 f4bae000 dump_Sptrak dump_Sptrak.sys Tue May 13 18:11:24 2003 (3EC17B9C)
f55bb000 f55ce000 Fips Fips.SYS Tue Mar 25 02:54:59 2003 (3E801963)
f55ce000 f563a000 mrxsmb mrxsmb.sys Tue Jan 18 19:35:18 2005 (41EDB956)
f563a000 f5665000 rdbss rdbss.sys Mon Oct 11 19:38:09 2004 (416B2771)
f5665000 f569a000 netbt netbt.sys Fri Jul 18 12:16:03 2003 (3F182B53)
f569a000 f56fc000 tcpip tcpip.sys Tue Mar 25 02:04:01 2003 (3E800D71)
f56fc000 f5718000 ipsec ipsec.sys Tue Mar 25 01:55:45 2003 (3E800B81)
f5ff6000 f6003000 netbios netbios.sys Tue Mar 25 01:09:53 2003 (3E8000C1)
f6006000 f6013000 wanarp wanarp.sys Tue Mar 25 01:11:22 2003 (3E80011A)
f6016000 f6025000 msgpc msgpc.sys Tue Mar 25 01:10:12 2003 (3E8000D4)
f6057000 f606a000 usbhub usbhub.sys Tue Mar 25 01:10:46 2003 (3E8000F6)
f606a000 f609d000 update update.sys Tue Mar 25 02:59:59 2003 (3E801A8F)
f609d000 f60d1000 rdpdr rdpdr.sys Tue Mar 25 01:09:30 2003 (3E8000AA)
f628c000 f62a1000 raspptp raspptp.sys Tue Mar 25 02:19:09 2003 (3E8010FD)
f62cc000 f62e7000 ndiswan ndiswan.sys Tue Mar 25 02:48:19 2003 (3E8017D3)
f62e7000 f62fe000 rasl2tp rasl2tp.sys Tue Mar 25 01:54:46 2003 (3E800B46)
f62fe000 f631fe80 USBPORT USBPORT.SYS Tue Mar 25 01:10:43 2003 (3E8000F3)
f6320000 f634a000 ks ks.sys Tue Mar 25 02:47:36 2003 (3E8017A8)
f634a000 f635e000 redbook redbook.sys Tue Mar 25 01:04:38 2003 (3E7FFF86)
f635e000 f6372000 cdrom cdrom.sys Tue Mar 25 01:05:18 2003 (3E7FFFAE)
f6372000 f6389000 parport parport.sys Tue Mar 25 01:03:56 2003 (3E7FFF5C)
f6389000 f63a1000 serial serial.sys Tue Mar 25 01:40:08 2003 (3E8007D8)
f63a1000 f63b7000 i8042prt i8042prt.sys Tue Mar 25 03:01:43 2003 (3E801AF7)
f63b7000 f63d0000 VIDEOPRT VIDEOPRT.SYS Tue Mar 25 01:08:02 2003 (3E800052)
f63d0000 f6423d80 ati2mpad ati2mpad.sys Thu Jul 18 20:13:20 2002 (3D3767B0)
f6424000 f644c200 e1000325 e1000325.sys Thu Apr 27 11:26:28 2006 (4450F0B4)
f64ac000 f64b4000 Fs_Rec Fs_Rec.SYS Tue Mar 25 01:08:36 2003 (3E800074)
f64cc000 f64d3000 dxgthk dxgthk.sys Tue Mar 25 01:05:52 2003 (3E7FFFD0)
f6769000 f6773000 Dxapi Dxapi.sys Tue Mar 25 01:06:01 2003 (3E7FFFD9)
f6789000 f6797000 NDProxy NDProxy.SYS Tue Mar 25 01:11:30 2003 (3E800122)
f6799000 f67a8000 termdd termdd.sys Tue Mar 25 01:02:52 2003 (3E7FFF1C)
f67a9000 f67b2000 raspti raspti.sys Tue Mar 25 01:11:36 2003 (3E800128)
f67b9000 f67c4000 ptilink ptilink.sys Tue Mar 25 01:03:51 2003 (3E7FFF57)
f67c9000 f67d4000 TDI TDI.SYS Tue Mar 25 01:14:28 2003 (3E8001D4)
f69f2000 f69fa000 rasacd rasacd.sys Tue Mar 25 01:11:50 2003 (3E800136)
f6a2a000 f6a32000 RDPCDD RDPCDD.sys Tue Mar 25 01:03:05 2003 (3E7FFF29)
f6a32000 f6a3a000 mnmdd mnmdd.SYS Tue Mar 25 01:07:53 2003 (3E800049)
f6a3a000 f6a41000 Beep Beep.SYS Tue Mar 25 01:03:04 2003 (3E7FFF28)
f6da2000 f6da2b80 mbmiodrvr mbmiodrvr.sys Sat Apr 10 09:42:35 2004 (407807DB)
f6da3000 f6da3d20 ISAIONT ISAIONT.SYS Tue Jun 19 14:05:54 2001 (3B2FA292)
f6da4000 f6da49e0 MemMapNt MemMapNt.SYS Sat Nov 11 16:14:16 2000 (3A0DC4B8)
f7187000 f7189700 SMBus SMBus.SYS Wed Apr 20 16:49:01 2005 (4266CE4D)
f7237000 f7259000 Mup Mup.sys Tue Mar 25 02:55:58 2003 (3E80199E)
f7259000 f729a000 NDIS NDIS.sys Tue Mar 25 02:45:35 2003 (3E80172F)
f729a000 f7337000 Ntfs Ntfs.sys Tue Mar 25 01:40:05 2003 (3E8007D5)
f7337000 f7358000 KSecDD KSecDD.sys Tue Mar 25 01:05:39 2003 (3E7FFFC3)
f7358000 f736e000 CLASSPNP CLASSPNP.SYS Tue Mar 25 01:38:14 2003 (3E800766)
f736e000 f7394000 SCSIPORT SCSIPORT.SYS Tue Mar 25 02:01:25 2003 (3E800CD5)
f7394000 f73b0000 atapi atapi.sys Tue Mar 25 01:04:48 2003 (3E7FFF90)
f73b0000 f73d1000 volsnap volsnap.sys Tue Mar 25 01:05:47 2003 (3E7FFFCB)
f73d1000 f73fb000 dmio dmio.sys Tue Mar 25 01:08:14 2003 (3E80005E)
f73fb000 f7420000 ftdisk ftdisk.sys Tue Mar 25 01:05:26 2003 (3E7FFFB6)
f7420000 f7435000 pci pci.sys Tue Mar 25 01:16:40 2003 (3E800258)
f7435000 f7466000 ACPI ACPI.sys Tue Mar 25 01:16:21 2003 (3E800245)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 01:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 01:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Tue Mar 25 01:04:44 2003 (3E7FFF8C)
f74b7000 f74c6000 MountMgr MountMgr.sys Tue Mar 25 01:03:05 2003 (3E7FFF29)
f74c7000 f74d5000 PartMgr PartMgr.sys Tue Mar 25 02:04:02 2003 (3E800D72)
f74d7000 f74e6000 Sptrak Sptrak.sys Tue May 13 18:11:24 2003 (3EC17B9C)
f74e7000 f74f6000 disk disk.sys Tue Mar 25 01:05:20 2003 (3E7FFFB0)
f74f7000 f7503000 Dfs Dfs.sys Tue Mar 25 01:09:52 2003 (3E8000C0)
f7507000 f7510000 crcdisk crcdisk.sys Tue Mar 25 01:07:23 2003 (3E80002B)
f7537000 f7540000 ndisuio ndisuio.sys Tue Mar 25 01:09:47 2003 (3E8000BB)
f75b7000 f75c3000 vga vga.sys Tue Mar 25 01:08:03 2003 (3E800053)
f75c7000 f75d1000 flpydisk flpydisk.sys Tue Mar 25 01:04:32 2003 (3E7FFF80)
f75d7000 f75e1000 Msfs Msfs.SYS Tue Mar 25 01:08:56 2003 (3E800088)
f75e7000 f75f3000 Npfs Npfs.SYS Tue Mar 25 01:08:59 2003 (3E80008B)
f75f7000 f7603000 processr processr.sys Tue Mar 25 01:07:36 2003 (3E800038)
f7607000 f7610000 watchdog watchdog.sys Tue Mar 25 01:09:01 2003 (3E80008D)
f7617000 f7621000 mouclass mouclass.sys Tue Mar 25 01:03:09 2003 (3E7FFF2D)
f7627000 f7631000 kbdclass kbdclass.sys Tue Mar 25 01:03:10 2003 (3E7FFF2E)
f7637000 f7642000 fdc fdc.sys Tue Mar 25 01:04:31 2003 (3E7FFF7F)
f7647000 f7651000 serenum serenum.sys Tue Mar 25 01:04:01 2003 (3E7FFF61)
f7657000 f7660000 ndistapi ndistapi.sys Tue Mar 25 01:11:28 2003 (3E800120)
f7667000 f7670000 dump_diskdump dump_diskdump.sys Tue Mar 25 01:05:15 2003 (3E7FFFAB)
f7687000 f7695000 raspppoe raspppoe.sys Tue Mar 25 01:11:37 2003 (3E800129)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 01:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 01:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 01:04:46 2003 (3E7FFF8E)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 01:08:08 2003 (3E800058)
f7797000 f779e000 Null Null.SYS Tue Mar 25 01:03:05 2003 (3E7FFF29)
f77cf000 f77d3200 usbohci usbohci.sys Tue Mar 25 01:10:41 2003 (3E8000F1)
f77d7000 f77df000 audstub audstub.sys Tue Mar 25 01:09:12 2003 (3E800098)
f7807000 f780e000 parvdm parvdm.sys Tue Mar 25 01:03:49 2003 (3E7FFF55)
f79eb000 f79ec200 swenum swenum.sys Tue Mar 25 01:03:22 2003 (3E7FFF3A)
f79ed000 f79ee580 USBD USBD.SYS Tue Mar 25 01:10:39 2003 (3E8000EF)
f7aaf000 f7aaff80 icacdd icacdd.sys Tue May 06 18:56:00 2003 (3EB84B90)

Unloaded modules:
f5fc6000 f5fd4000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7127000 f712b000 superbmc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f64b4000 f64bc000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

jimmyzshack · 22nd November 2006

this server is on a roll twice in one day.

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 MP (4 procs) Free x86 compatible
Product: Server, suite: TerminalServer
Built by: 3790.srv03_gdr.040410-1234
Kernel base = 0x804de000 PsLoadedModuleList = 0x8057b6a8
Debug session time: Wed Nov 22 13:54:06.624 2006 (GMT-6)
System Uptime: 0 days 5:48:58.319
Loading Kernel Symbols
........................................................................... ...................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details
Loading unloaded module list
.....
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

Use !analyze -v to get detailed debugging information.

BugCheck A, {f7d4babc, 1b, 0, 80749067}

Probably caused by : ntkrnlmp.exe ( nt!KiTrap0E+224 )

Followup: MachineOwner
---------

3: kd> !analyze -v;r;kv;lmtn;.logclose;q
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: f7d4babc, memory referenced
Arg2: 0000001b, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 80749067, address which referenced memory

Debugging Details:
------------------

READ_ADDRESS: f7d4babc Nonpaged pool expansion

CURRENT_IRQL: 1b

FAULTING_IP:
hal!KeAcquireQueuedSpinLockRaiseToSynch+27
80749067 8b4a04 mov ecx,dword ptr [edx+4]

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

PROCESS_NAME: lsass.exe

TRAP_FRAME: f646cc64 -- (.trap fffffffff646cc64)
.trap fffffffff646cc64
ErrCode = 00000000
eax=00000000 ebx=00000000 ecx=000c08b0 edx=f7d4bab8 esi=8a62de00 edi=f7747120
eip=80749067 esp=f646ccd8 ebp=f646cd20 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
hal!KeAcquireQueuedSpinLockRaiseToSynch+0x27:
80749067 8b4a04 mov ecx,dword ptr [edx+4] ds:0023:f7d4babc=????????
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 804e2f58 to 80543ac9

STACK_TEXT:
f646cc48 804e2f58 0000000a f7d4babc 0000001b nt!KeBugCheckEx+0x19
f646cc48 80749067 0000000a f7d4babc 0000001b nt!KiTrap0E+0x224
f646ccd4 804f0bea 8a62de00 00000000 805866c1 hal!KeAcquireQueuedSpinLockRaiseToSynch+0x27
f646cce0 805866c1 89eb81d0 888e93b8 f646cd64 nt!KeInsertQueue+0xa
f646cd20 80586799 89eb81d0 77f5dcba 0168d960 nt!IoSetIoCompletion+0xcc
f646cd48 804dfd24 89eb81d0 77f5dcba 0168d960 nt!NtSetIoCompletion+0x49
f646cd48 7ffe0304 89eb81d0 77f5dcba 0168d960 nt!KiSystemService+0xd0
0070fc38 00000000 00000000 00000000 00000000 SharedUserData!SystemCallStub+0x4

STACK_COMMAND: kb

FOLLOWUP_IP:
nt!KiTrap0E+224
804e2f58 833d40a3578000 cmp dword ptr [nt!KiFreezeFlag (8057a340)],0

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!KiTrap0E+224

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 40b53739

FAILURE_BUCKET_ID: 0xA_nt!KiTrap0E+224

BUCKET_ID: 0xA_nt!KiTrap0E+224

Followup: MachineOwner
---------

eax=f774713c ebx=0000000a ecx=8a44b1d8 edx=40000000 esi=f7747120 edi=f7d4babc
eip=80543ac9 esp=f646cc30 ebp=f646cc48 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x19:
80543ac9 5d pop ebp
ChildEBP RetAddr Args to Child
f646cc48 804e2f58 0000000a f7d4babc 0000001b nt!KeBugCheckEx+0x19 (FPO: [Non-Fpo])
f646cc48 80749067 0000000a f7d4babc 0000001b nt!KiTrap0E+0x224 (FPO: [0,0] TrapFrame @ f646cc64)
f646ccd4 804f0bea 8a62de00 00000000 805866c1 hal!KeAcquireQueuedSpinLockRaiseToSynch+0x27 (FPO: [0,0,0])
f646cce0 805866c1 89eb81d0 888e93b8 f646cd64 nt!KeInsertQueue+0xa (FPO: [2,0,0])
f646cd20 80586799 89eb81d0 77f5dcba 0168d960 nt!IoSetIoCompletion+0xcc (FPO: [Non-Fpo])
f646cd48 804dfd24 89eb81d0 77f5dcba 0168d960 nt!NtSetIoCompletion+0x49 (FPO: [Non-Fpo])
f646cd48 7ffe0304 89eb81d0 77f5dcba 0168d960 nt!KiSystemService+0xd0 (FPO: [0,0] TrapFrame @ f646cd64)
0070fc38 00000000 00000000 00000000 00000000 SharedUserData!SystemCallStub+0x4 (FPO: [0,0,0])
start end module name
804de000 80745000 nt ntkrnlmp.exe Wed May 26 19:32:57 2004 (40B53739)
80745000 8076d000 hal halmacpi.dll Tue Mar 25 01:07:28 2003 (3E800030)
bf800000 bf9c7000 win32k win32k.sys Tue Dec 28 17:26:09 2004 (41D1EB91)
bf9c7000 bfa1d680 ati2drad ati2drad.dll Tue Mar 25 03:43:37 2003 (3E8024C9)
bfa1e000 bfa59500 vdtw30 vdtw30.dll Tue May 06 18:55:58 2003 (3EB84B8E)
bff60000 bff7b000 RDPDD RDPDD.dll Tue Mar 25 14:12:05 2003 (3E80B815)
bff80000 bff96000 dxg dxg.sys Tue Mar 25 03:46:23 2003 (3E80256F)
bffa0000 bffe8000 ATMFD ATMFD.DLL Tue Mar 25 03:46:23 2003 (3E80256F)
f2424000 f242e000 TDTCP TDTCP.SYS Tue Mar 25 01:02:52 2003 (3E7FFF1C)
f2680000 f2682300 uphcleanhlp uphcleanhlp.sys Wed Apr 27 13:58:56 2005 (426FE0F0)
f288c000 f28ea000 srv srv.sys Tue May 03 19:49:51 2005 (42781C2F)
f29b2000 f2a0a000 HTTP HTTP.sys Tue Mar 25 02:55:21 2003 (3E801979)
f2a5a000 f2a85000 cdm cdm.sys Tue May 06 18:54:40 2003 (3EB84B40)
f2c3d000 f2c6c000 afd afd.sys Tue Mar 25 01:40:50 2003 (3E800802)
f2e5e000 f2e87b80 WDICA WDICA.SYS Tue May 06 18:56:37 2003 (3EB84BB5)
f2e88000 f2eaa000 RDPWD RDPWD.SYS Tue Jun 14 18:43:00 2005 (42AF6B84)
f2f72000 f2f8a000 ipnat ipnat.sys Tue Mar 25 01:11:05 2003 (3E800109)
f2fee000 f2ff1100 IcaReduc IcaReduc.SYS Tue May 06 18:56:16 2003 (3EB84BA0)
f3456000 f3457380 ctxsmcdrv ctxsmcdrv.sys Tue May 06 18:59:02 2003 (3EB84C46)
f345e000 f3460000 pdcrypt1 pdcrypt1.SYS Tue May 06 18:58:30 2003 (3EB84C26)
f3519000 f352d440 naiavf5x naiavf5x.sys Mon Aug 04 20:08:00 2003 (3F2F0370)
f4391000 f43a9000 Cdfs Cdfs.SYS Tue Mar 25 02:17:19 2003 (3E80108F)
f5122000 f5129000 dxgthk dxgthk.sys Tue Mar 25 01:05:52 2003 (3E7FFFD0)
f5982000 f598b000 ndisuio ndisuio.sys Tue Mar 25 01:09:47 2003 (3E8000BB)
f5ec4000 f5ed7000 Fips Fips.SYS Tue Mar 25 02:54:59 2003 (3E801963)
f5ed7000 f5f43000 mrxsmb mrxsmb.sys Tue Jan 18 19:35:18 2005 (41EDB956)
f5f43000 f5f6e000 rdbss rdbss.sys Mon Oct 11 19:38:09 2004 (416B2771)
f5f6e000 f5fa3000 netbt netbt.sys Fri Jul 18 12:16:03 2003 (3F182B53)
f5fa3000 f6005000 tcpip tcpip.sys Tue Mar 25 02:04:01 2003 (3E800D71)
f6005000 f6021000 ipsec ipsec.sys Tue Mar 25 01:55:45 2003 (3E800B81)
f6061000 f606a000 dump_diskdump dump_diskdump.sys Tue Mar 25 01:05:15 2003 (3E7FFFAB)
f6071000 f6080000 dump_Sptrak dump_Sptrak.sys Tue May 13 18:11:24 2003 (3EC17B9C)
f6141000 f6154000 usbhub usbhub.sys Tue Mar 25 01:10:46 2003 (3E8000F6)
f6154000 f6187000 update update.sys Tue Mar 25 02:59:59 2003 (3E801A8F)
f6187000 f61bb000 rdpdr rdpdr.sys Tue Mar 25 01:09:30 2003 (3E8000AA)
f61bb000 f61d0000 raspptp raspptp.sys Tue Mar 25 02:19:09 2003 (3E8010FD)
f61d0000 f61eb000 ndiswan ndiswan.sys Tue Mar 25 02:48:19 2003 (3E8017D3)
f61eb000 f6202000 rasl2tp rasl2tp.sys Tue Mar 25 01:54:46 2003 (3E800B46)
f6202000 f6223e80 USBPORT USBPORT.SYS Tue Mar 25 01:10:43 2003 (3E8000F3)
f6224000 f624e000 ks ks.sys Tue Mar 25 02:47:36 2003 (3E8017A8)
f624e000 f6262000 redbook redbook.sys Tue Mar 25 01:04:38 2003 (3E7FFF86)
f6262000 f6276000 cdrom cdrom.sys Tue Mar 25 01:05:18 2003 (3E7FFFAE)
f6276000 f628d000 parport parport.sys Tue Mar 25 01:03:56 2003 (3E7FFF5C)
f628d000 f62a5000 serial serial.sys Tue Mar 25 01:40:08 2003 (3E8007D8)
f62a5000 f62bb000 i8042prt i8042prt.sys Tue Mar 25 03:01:43 2003 (3E801AF7)
f62bb000 f62d4000 VIDEOPRT VIDEOPRT.SYS Tue Mar 25 01:08:02 2003 (3E800052)
f62d4000 f6327d80 ati2mpad ati2mpad.sys Thu Jul 18 20:13:20 2002 (3D3767B0)
f6328000 f6350200 e1000325 e1000325.sys Thu Apr 27 11:26:28 2006 (4450F0B4)
f63a6000 f63ad000 Null Null.SYS Tue Mar 25 01:03:05 2003 (3E7FFF29)
f63ae000 f63b6000 Fs_Rec Fs_Rec.SYS Tue Mar 25 01:08:36 2003 (3E800074)
f63c6000 f63ce000 audstub audstub.sys Tue Mar 25 01:09:12 2003 (3E800098)
f63ce000 f63d2200 usbohci usbohci.sys Tue Mar 25 01:10:41 2003 (3E8000F1)
f640c000 f640d780 PDRFRAME PDRFRAME.SYS Tue May 06 18:58:23 2003 (3EB84C1F)
f6412000 f6413580 USBD USBD.SYS Tue Mar 25 01:10:39 2003 (3E8000EF)
f65f7000 f65f7d20 ISAIONT ISAIONT.SYS Tue Jun 19 14:05:54 2001 (3B2FA292)
f65fe000 f65feb80 mbmiodrvr mbmiodrvr.sys Sat Apr 10 09:42:35 2004 (407807DB)
f6669000 f6670000 Beep Beep.SYS Tue Mar 25 01:03:04 2003 (3E7FFF28)
f6735000 f673f000 Msfs Msfs.SYS Tue Mar 25 01:08:56 2003 (3E800088)
f6745000 f6751000 vga vga.sys Tue Mar 25 01:08:03 2003 (3E800053)
f6755000 f675f000 serenum serenum.sys Tue Mar 25 01:04:01 2003 (3E7FFF61)
f6765000 f6770000 fdc fdc.sys Tue Mar 25 01:04:31 2003 (3E7FFF7F)
f6775000 f677f000 kbdclass kbdclass.sys Tue Mar 25 01:03:10 2003 (3E7FFF2E)
f6785000 f678f000 mouclass mouclass.sys Tue Mar 25 01:03:09 2003 (3E7FFF2D)
f6795000 f679e000 watchdog watchdog.sys Tue Mar 25 01:09:01 2003 (3E80008D)
f67a5000 f67b1000 processr processr.sys Tue Mar 25 01:07:36 2003 (3E800038)
f67b5000 f67bf000 flpydisk flpydisk.sys Tue Mar 25 01:04:32 2003 (3E7FFF80)
f7193000 f7195700 SMBus SMBus.SYS Wed Apr 20 16:49:01 2005 (4266CE4D)
f7237000 f7259000 Mup Mup.sys Tue Mar 25 02:55:58 2003 (3E80199E)
f7259000 f729a000 NDIS NDIS.sys Tue Mar 25 02:45:35 2003 (3E80172F)
f729a000 f7337000 Ntfs Ntfs.sys Tue Mar 25 01:40:05 2003 (3E8007D5)
f7337000 f7358000 KSecDD KSecDD.sys Tue Mar 25 01:05:39 2003 (3E7FFFC3)
f7358000 f736e000 CLASSPNP CLASSPNP.SYS Tue Mar 25 01:38:14 2003 (3E800766)
f736e000 f7394000 SCSIPORT SCSIPORT.SYS Tue Mar 25 02:01:25 2003 (3E800CD5)
f7394000 f73b0000 atapi atapi.sys Tue Mar 25 01:04:48 2003 (3E7FFF90)
f73b0000 f73d1000 volsnap volsnap.sys Tue Mar 25 01:05:47 2003 (3E7FFFCB)
f73d1000 f73fb000 dmio dmio.sys Tue Mar 25 01:08:14 2003 (3E80005E)
f73fb000 f7420000 ftdisk ftdisk.sys Tue Mar 25 01:05:26 2003 (3E7FFFB6)
f7420000 f7435000 pci pci.sys Tue Mar 25 01:16:40 2003 (3E800258)
f7435000 f7466000 ACPI ACPI.sys Tue Mar 25 01:16:21 2003 (3E800245)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 01:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 01:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Tue Mar 25 01:04:44 2003 (3E7FFF8C)
f74b7000 f74c6000 MountMgr MountMgr.sys Tue Mar 25 01:03:05 2003 (3E7FFF29)
f74c7000 f74d5000 PartMgr PartMgr.sys Tue Mar 25 02:04:02 2003 (3E800D72)
f74d7000 f74e6000 Sptrak Sptrak.sys Tue May 13 18:11:24 2003 (3EC17B9C)
f74e7000 f74f6000 disk disk.sys Tue Mar 25 01:05:20 2003 (3E7FFFB0)
f74f7000 f7503000 Dfs Dfs.sys Tue Mar 25 01:09:52 2003 (3E8000C0)
f7507000 f7510000 crcdisk crcdisk.sys Tue Mar 25 01:07:23 2003 (3E80002B)
f7547000 f7550000 ndistapi ndistapi.sys Tue Mar 25 01:11:28 2003 (3E800120)
f7587000 f7595000 raspppoe raspppoe.sys Tue Mar 25 01:11:37 2003 (3E800129)
f7597000 f75a0000 raspti raspti.sys Tue Mar 25 01:11:36 2003 (3E800128)
f75a7000 f75b2000 TDI TDI.SYS Tue Mar 25 01:14:28 2003 (3E8001D4)
f75b7000 f75c6000 termdd termdd.sys Tue Mar 25 01:02:52 2003 (3E7FFF1C)
f75c7000 f75d5000 NDProxy NDProxy.SYS Tue Mar 25 01:11:30 2003 (3E800122)
f75d7000 f75e2000 ptilink ptilink.sys Tue Mar 25 01:03:51 2003 (3E7FFF57)
f7627000 f7633000 Npfs Npfs.SYS Tue Mar 25 01:08:59 2003 (3E80008B)
f7637000 f7644000 wanarp wanarp.sys Tue Mar 25 01:11:22 2003 (3E80011A)
f7647000 f7654000 netbios netbios.sys Tue Mar 25 01:09:53 2003 (3E8000C1)
f7657000 f7666000 msgpc msgpc.sys Tue Mar 25 01:10:12 2003 (3E8000D4)
f76b7000 f76c1000 Dxapi Dxapi.sys Tue Mar 25 01:06:01 2003 (3E7FFFD9)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 01:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 01:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 01:04:46 2003 (3E7FFF8E)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 01:08:08 2003 (3E800058)
f7757000 f775f000 RDPCDD RDPCDD.sys Tue Mar 25 01:03:05 2003 (3E7FFF29)
f775f000 f7767000 mnmdd mnmdd.SYS Tue Mar 25 01:07:53 2003 (3E800049)
f7787000 f778f000 rasacd rasacd.sys Tue Mar 25 01:11:50 2003 (3E800136)
f77ef000 f77f6000 parvdm parvdm.sys Tue Mar 25 01:03:49 2003 (3E7FFF55)
f79af000 f79b0200 swenum swenum.sys Tue Mar 25 01:03:22 2003 (3E7FFF3A)
f7a9c000 f7a9c9e0 MemMapNt MemMapNt.SYS Sat Nov 11 16:14:16 2000 (3A0DC4B8)
f7a9e000 f7a9ef80 icacdd icacdd.sys Tue May 06 18:56:00 2003 (3EB84B90)

Unloaded modules:
f3566000 f3568000 PDRFRAME.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f345c000 f345e000 pdcrypt1.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f6725000 f6733000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7133000 f7137000 superbmc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f63b6000 f63be000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

cpc2004 · 23rd November 2006

Hi,

The stack trace of one minidump has page fault and then windows crashes. The Page table is corrupted and I believe that ram is culprit.

baeb39e4 8052fa2f 00000050 90909090 00000000 nt!KeBugCheckEx+0x19 (FPO: [Non-Fpo])
baeb3a34 804e2dfc 00000000 90909090 00000000 nt!MmAccessFault+0x796 (FPO: [Non-Fpo]) <-- Page Fault
baeb3a34 90909090 00000000 90909090 00000000 nt!KiTrap0E+0xc8 (FPO: [0,0] TrapFrame @ baeb3a4c)
WARNING: Frame IP not in any known module. Following frames may be wrong.
baeb3abc bf8dd2c5 00000007 890a9548 00000001 0x90909090
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details
Page de8b7 not present in the dump file. Type ".hh dbgerr004" for details

The stack trace of last minidump also have page fault. IRQL level 2 routine or above (ie for this case IRQL x'1b') cannot have page fault. The crash is also related to faulty ram.

f646cc48 804e2f58 0000000a f7d4babc 0000001b nt!KeBugCheckEx+0x19
f646cc48 80749067 0000000a f7d4babc 0000001b nt!KiTrap0E+0x224 <-- Page Fault
f646ccd4 804f0bea 8a62de00 00000000 805866c1 hal!KeAcquireQueuedSpinLockRaiseToSynch+0x27