Error code 1000008e, parameter1 c0000005 ... etc

Hi all!
My english is pretty lousy, so please forgive me.
Congrats for your forum, it's very useful.


Well, i have those blue screens since last week and i'm frustrated.
The strange thing is that i didn't install any app or made any hardware changes before those screens appear.
I've tried to change RAM's position, i've tried "windows recovery ", i even used another pc keeping my hd: Those crushes still occur.

I've read those threads:

http://www.windowsbbs.com/showthread.php?t=49962&highlight=Error+code+1000008e

http://www.windowsbbs.com/showthread.php?t=48716&highlight=Error+code+1000008e


but they weren't quite helpful.


Any ideas at all??? Help me plz!



debuglog.txt's info follows (taken from dumb file) - see below.




Thanx!

 

debuglog.txt 1/2

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0003.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\...\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
Debug session time: Fri Feb 17 00:47:58.718 2006 (GMT+2)
System Uptime: 0 days 6:23:47.281
Loading Kernel Symbols
.................................................................................................................................
Loading User Symbols
..................................................................................................................................................
Loading unloaded module list
..................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 8E, {c0000005, 820b95d0, ef802cb0, 0}

Probably caused by : ntkrnlmp.exe ( nt!KiDispatchException+3b1 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED (8e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 820b95d0, The address that the exception occurred at
Arg3: ef802cb0, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
+ffffffff820b95d0
820b95d0 033e add edi,[esi]

TRAP_FRAME: ef802cb0 -- (.trap ffffffffef802cb0)
.trap ffffffffef802cb0
ErrCode = 00000000
eax=017fd070 ebx=00000000 ecx=81dc94b8 edx=9dc00003 esi=01e8f556 edi=006924e6
eip=820b95d0 esp=ef802d24 ebp=ef802d30 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
820b95d0 033e add edi,[esi] ds:0023:01e8f556=????????
.trap
Resetting default scope

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

LAST_CONTROL_TRANSFER: from 8052202d to 805371aa

DEVICE_OBJECT: 000005a8

STACK_TEXT:
ef802878 8052202d 0000008e c0000005 820b95d0 nt!KeBugCheckEx+0x1b
ef802c40 804de403 ef802c5c 00000000 ef802cb0 nt!KiDispatchException+0x3b1
ef802ca8 804de3b4 ef802d30 820b95d0 badb0d00 nt!CommonDispatchException+0x4d
ef802cbc 8056f572 ef802d64 027efb00 820b9532 nt!Kei386EoiHelper+0x18a
ef802d30 804dd99f 000005a8 00000000 00000000 nt!IopSynchronousServiceTail+0x10f
ef802d30 7c90eb94 000005a8 00000000 00000000 nt!KiFastCallEntry+0xfc
027efac8 7c90df6a 75083240 000005a8 00000000 ntdll!KiFastSystemCallRet
027efacc 75083240 000005a8 00000000 00000000 ntdll!ZwQueryDirectoryFile+0xc
027efb14 7507be92 0180d388 0180dc00 00000000 trkwks!CObjIdEnumerator::Find+0xae
027efb30 7507fddd 0180d388 0180dc00 00000007 trkwks!CObjIdEnumerator::FindNext+0x50
027efb48 75080e17 0180d388 0180dc00 017d03a8 trkwks!CAllVolumesObjIdEnumerator::FindNext+0x19
027efdb8 750775ab 08a1e7f0 01c6334b 00278d00 trkwks!CTrkWksSvc::OnRefreshTimeout+0x1d6
027efe08 75073a8d 00000006 017d03a8 750714d4 trkwks!CVolumeManager::Timer+0xe4
027efe54 75071512 017d03a8 750714d4 00000000 trkwks!CNewTimer:oWork+0x62
027efe8c 7c927911 017d03a8 000f7400 000f74a0 trkwks!ThreadPoolCallbackFunction+0x52
027efed8 7c938785 750714d4 017d03a8 000f7400 ntdll!RtlpWaitOrTimerCallout+0x73
027efef8 7c927545 000f74a0 7c97c3a0 02d7b4e0 ntdll!RtlpAsyncWaitCallbackCompletion+0x25
027eff40 7c927583 7c938760 000f74a0 00000000 ntdll!RtlpWorkerCallout+0x70
027eff60 7c927645 00000000 000f74a0 02d7b4e0 ntdll!RtlpExecuteWorkerRequest+0x1a
027eff74 7c92761c 7c927569 00000000 000f74a0 ntdll!RtlpApcCallout+0x11
027effb4 7c80b50b 00000000 00000000 00000000 ntdll!RtlpWorkerThread+0x87
027effec 00000000 7c910760 00000000 00000000 kernel32!BaseThreadStart+0x37


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!KiDispatchException+3b1
8052202d cc int 3

SYMBOL_STACK_INDEX: 1

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!KiDispatchException+3b1

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 42250f77

FAILURE_BUCKET_ID: 0x8E_nt!KiDispatchException+3b1

BUCKET_ID: 0x8E_nt!KiDispatchException+3b1

 

debuglog.txt 2/3

Followup: MachineOwner
---------

eax=ffdff13c ebx=820b95d0 ecx=00000000 edx=804dc0f4 esi=ef802c5c edi=00000000
eip=805371aa esp=ef802860 ebp=ef802878 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
805371aa 5d pop ebp
ChildEBP RetAddr Args to Child
ef802878 8052202d 0000008e c0000005 820b95d0 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
ef802c40 804de403 ef802c5c 00000000 ef802cb0 nt!KiDispatchException+0x3b1 (FPO: [Non-Fpo])
ef802ca8 804de3b4 ef802d30 820b95d0 badb0d00 nt!CommonDispatchException+0x4d (FPO: [0,20,0])
ef802cbc 8056f572 ef802d64 027efb00 820b9532 nt!Kei386EoiHelper+0x18a
ef802d30 804dd99f 000005a8 00000000 00000000 nt!IopSynchronousServiceTail+0x10f (FPO: [Non-Fpo])
ef802d30 7c90eb94 000005a8 00000000 00000000 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ ef802d64)
027efac8 7c90df6a 75083240 000005a8 00000000 ntdll!KiFastSystemCallRet (FPO: [0,0,0])
027efacc 75083240 000005a8 00000000 00000000 ntdll!ZwQueryDirectoryFile+0xc (FPO: [11,0,0])
027efb14 7507be92 0180d388 0180dc00 00000000 trkwks!CObjIdEnumerator::Find+0xae (FPO: [Non-Fpo])
027efb30 7507fddd 0180d388 0180dc00 00000007 trkwks!CObjIdEnumerator::FindNext+0x50 (FPO: [Non-Fpo])
027efb48 75080e17 0180d388 0180dc00 017d03a8 trkwks!CAllVolumesObjIdEnumerator::FindNext+0x19 (FPO: [Non-Fpo])
027efdb8 750775ab 08a1e7f0 01c6334b 00278d00 trkwks!CTrkWksSvc::OnRefreshTimeout+0x1d6 (FPO: [Non-Fpo])
027efe08 75073a8d 00000006 017d03a8 750714d4 trkwks!CVolumeManager::Timer+0xe4 (FPO: [Non-Fpo])
027efe54 75071512 017d03a8 750714d4 00000000 trkwks!CNewTimer:oWork+0x62 (FPO: [Non-Fpo])
027efe8c 7c927911 017d03a8 000f7400 000f74a0 trkwks!ThreadPoolCallbackFunction+0x52 (FPO: [Non-Fpo])
027efed8 7c938785 750714d4 017d03a8 000f7400 ntdll!RtlpWaitOrTimerCallout+0x73 (FPO: [Non-Fpo])
027efef8 7c927545 000f74a0 7c97c3a0 02d7b4e0 ntdll!RtlpAsyncWaitCallbackCompletion+0x25 (FPO: [Non-Fpo])
027eff40 7c927583 7c938760 000f74a0 00000000 ntdll!RtlpWorkerCallout+0x70 (FPO: [Non-Fpo])
027eff60 7c927645 00000000 000f74a0 02d7b4e0 ntdll!RtlpExecuteWorkerRequest+0x1a (FPO: [Non-Fpo])
027eff74 7c92761c 7c927569 00000000 000f74a0 ntdll!RtlpApcCallout+0x11 (FPO: [Non-Fpo])
start end module name
01000000 01006000 svchost svchost.exe Wed Aug 04 09:14:46 2004 (41107ED6)
0ffd0000 0fff8000 rsaenh rsaenh.dll Wed Jul 07 05:17:12 2004 (40EB5D28)
20000000 202c5000 xpsp2res xpsp2res.dll Wed Aug 04 10:56:41 2004 (411096B9)
4c0a0000 4c0b7000 wscsvc wscsvc.dll Wed Aug 04 10:57:40 2004 (411096F4)
4d4f0000 4d548000 WINHTTP WINHTTP.dll Wed Aug 04 10:57:07 2004 (411096D3)
50000000 50005000 wuauserv wuauserv.dll Wed Aug 04 09:14:32 2004 (41107EC8)
50040000 5018a000 wuaueng wuaueng.dll Thu May 26 10:16:48 2005 (429577E0)
50640000 5064c000 wups wups.dll Thu May 26 10:16:44 2005 (429577DC)
57cc0000 57cf6000 unimdm unimdm.tsp Wed Aug 04 10:56:40 2004 (411096B8)
57d20000 57d30000 ndptsp ndptsp.tsp Wed Aug 04 10:56:27 2004 (411096AB)
57d40000 57d4b000 kmddsp kmddsp.tsp Wed Aug 04 10:56:24 2004 (411096A8)
57d50000 57d58000 ipconf ipconf.tsp Wed Aug 04 10:56:09 2004 (41109699)
57d60000 57d6a000 hidphone hidphone.tsp Wed Aug 04 10:56:13 2004 (4110969D)
57d70000 57db6000 h323 h323.tsp Wed Aug 04 10:56:07 2004 (41109697)
59490000 594b8000 wmisvc wmisvc.dll Wed Aug 04 10:57:05 2004 (411096D1)
597f0000 5985d000 wmiprvsd wmiprvsd.dll Wed Aug 04 10:57:03 2004 (411096CF)
5ad70000 5ada8000 UxTheme UxTheme.dll Wed Aug 04 10:56:43 2004 (411096BB)
5b860000 5b8b4000 NETAPI32 NETAPI32.dll Wed Aug 04 10:56:28 2004 (411096AC)
5cb70000 5cb96000 ShimEng ShimEng.dll Wed Aug 04 10:56:42 2004 (411096BA)
5d090000 5d127000 comctl32_5d090000 comctl32.dll Wed Aug 04 10:56:31 2004 (411096AF)
5f740000 5f74e000 ncprov ncprov.dll Wed Aug 04 10:56:22 2004 (411096A6)
5f770000 5f77c000 NCObjAPI NCObjAPI.DLL Wed Aug 04 10:56:21 2004 (411096A5)
600a0000 600ab000 mspatcha mspatcha.dll Wed Aug 04 10:58:55 2004 (4110973F)
606b0000 607bd000 ESENT ESENT.dll Fri Oct 21 01:20:02 2005 (43581812)
662b0000 66308000 HNETCFG HNETCFG.DLL Wed Aug 04 10:56:16 2004 (411096A0)
66460000 664b5000 ipnathlp ipnathlp.dll Wed Aug 04 10:56:11 2004 (4110969B)
688f0000 688f9000 HID HID.DLL Wed Aug 04 10:56:12 2004 (4110969C)
6f880000 6fa4a000 AcGenral AcGenral.DLL Wed Aug 04 10:55:58 2004 (4110968E)
708b0000 708bd000 audiosrv audiosrv.dll Wed Aug 04 10:57:03 2004 (411096CF)
71a50000 71a8f000 mswsock mswsock.dll Wed Aug 04 10:59:20 2004 (41109758)
71a90000 71a98000 wshtcpip wshtcpip.dll Wed Aug 04 10:57:49 2004 (411096FD)
71aa0000 71aa8000 WS2HELP WS2HELP.dll Wed Aug 04 10:57:39 2004 (411096F3)
71ab0000 71ac7000 WS2_32 WS2_32.dll Wed Aug 04 10:57:38 2004 (411096F2)
71ad0000 71ad9000 WSOCK32 WSOCK32.dll Wed Aug 04 10:57:51 2004 (411096FF)
71bf0000 71c03000 SAMLIB SAMLIB.dll Wed Aug 04 10:56:29 2004 (411096AD)
71cf0000 71d3b000 kerberos kerberos.dll Wed Jun 15 20:49:30 2005 (42B06A2A)
72000000 72007000 uniplat uniplat.dll Wed Aug 04 10:56:42 2004 (411096BA)
72240000 72275000 rasppp rasppp.dll Wed Aug 04 10:56:31 2004 (411096AF)
722d0000 722dd000 sens sens.dll Wed Aug 04 10:56:27 2004 (411096AB)
723d0000 723ec000 WinSCard WinSCard.dll Wed Aug 04 10:56:36 2004 (411096B4)
72480000 724b0000 rasmans rasmans.dll Wed Aug 04 10:56:30 2004 (411096AE)
724b0000 724b6000 ntlsapi ntlsapi.dll Wed Aug 04 10:57:01 2004 (411096CD)
73000000 73026000 WINSPOOL WINSPOOL.DRV Wed Aug 04 10:56:38 2004 (411096B6)
73030000 73040000 WZCSAPI WZCSAPI.DLL Wed Aug 04 10:57:57 2004 (41109705)
733e0000 73420000 tapisrv tapisrv.dll Fri Jul 08 19:27:56 2005 (42CEA98C)
73d20000 73d28000 seclogon seclogon.dll Wed Aug 04 10:56:48 2004 (411096C0)
74370000 7437b000 WINIPSEC WINIPSEC.DLL Wed Aug 04 10:57:09 2004 (411096D5)
745e0000 748a6000 msi msi.dll Mon May 02 18:51:33 2005 (42764C85)
74ad0000 74ad8000 POWRPROF POWRPROF.dll Wed Aug 04 10:56:53 2004 (411096C5)
74ed0000 74ede000 wbemsvc wbemsvc.dll Wed Aug 04 10:56:51 2004 (411096C3)
74f00000 74f0c000 SSDPAPI SSDPAPI.dll Wed Aug 04 10:59:16 2004 (41109754)
74f40000 74f4c000 pchsvc pchsvc.dll Wed Aug 04 10:56:29 2004 (411096AD)
74f50000 74f55000 MSIDLE MSIDLE.DLL Wed Aug 04 10:58:28 2004 (41109724)
74f80000 74f89000 ersvc ersvc.dll Wed Aug 04 10:56:46 2004 (411096BE)
74f90000 74f99000 dmserver dmserver.dll Wed Aug 04 10:56:40 2004 (411096B8)
75020000 7503b000 wmiutils wmiutils.dll Wed Aug 04 10:57:06 2004 (411096D2)
75070000 75089000 trkwks trkwks.dll Wed Aug 04 10:57:00 2004 (411096CC)
75090000 750aa000 srvsvc srvsvc.dll Tue Dec 07 21:32:34 2004 (41B60552)
750b0000 750c2000 RESUTILS RESUTILS.DLL Wed Aug 04 10:56:25 2004 (411096A9)
750f0000 75103000 MTXCLU MTXCLU.DLL Tue Jul 26 07:39:47 2005 (42E5BE93)
75130000 75144000 colbact colbact.DLL Tue Jul 26 07:39:45 2005 (42E5BE91)
75150000 75164000 Cabinet Cabinet.dll Wed Aug 04 10:56:00 2004 (41109690)
751a0000 751ce000 srsvc srsvc.dll Wed Aug 04 10:59:14 2004 (41109752)
75200000 7522e000 repdrvfs repdrvfs.dll Wed Aug 04 10:56:45 2004 (411096BD)
75260000 75289000 ADVPACK ADVPACK.dll Wed Aug 04 10:56:24 2004 (411096A8)
75290000 752c7000 wbemcomn wbemcomn.dll Wed Aug 04 10:56:44 2004 (411096BC)
75310000 7534f000 esscli esscli.dll Wed Aug 04 10:56:50 2004 (411096C2)
75390000 753d6000 wbemess wbemess.dll Wed Aug 04 10:56:48 2004 (411096C0)
753e0000 7544d000 VSSAPI VSSAPI.DLL Wed Aug 04 10:56:44 2004 (411096BC)
754d0000 75550000 CRYPTUI CRYPTUI.dll Wed Aug 04 10:56:06 2004 (41109696)
755f0000 7568a000 netcfgx netcfgx.dll Wed Aug 04 10:56:29 2004 (411096AD)
75690000 75706000 FastProx FastProx.dll Wed Aug 04 10:56:05 2004 (41109695)
75880000 75891000 rastapi rastapi.dll Wed Aug 04 10:56:33 2004 (411096B1)
75e90000 75f40000 SXS SXS.DLL Wed Aug 04 09:14:57 2004 (41107EE1)
76080000 760e5000 MSVCP60 MSVCP60.dll Wed Aug 04 10:59:13 2004 (41109751)
762c0000 76345000 wbemcore wbemcore.dll Wed Aug 04 10:56:46 2004 (411096BE)
76360000 76370000 WINSTA WINSTA.dll Wed Aug 04 10:56:40 2004 (411096B8)
76400000 765a6000 netshell netshell.dll Wed Aug 04 10:56:37 2004 (411096B5)
76620000 7675c000 comsvcs comsvcs.dll Tue Jul 26 07:39:48 2005 (42E5BE94)
76780000 76789000 SHFOLDER SHFOLDER.dll Wed Aug 04 10:56:40 2004 (411096B8)
76790000 7679c000 cryptdll cryptdll.dll Wed Aug 04 10:56:02 2004 (41109692)
767a0000 767b3000 NTDSAPI NTDSAPI.dll Wed Aug 04 10:56:57 2004 (411096C9)
767c0000 767ec000 w32time w32time.dll Wed Aug 04 10:56:34 2004 (411096B2)
767f0000 76817000 SCHANNEL SCHANNEL.dll Wed Aug 04 10:56:39 2004 (411096B7)
768d0000 76974000 RASDLG RASDLG.dll Wed Aug 04 10:56:28 2004 (411096AC)
769c0000 76a73000 USERENV USERENV.dll Wed Aug 04 10:56:41 2004 (411096B9)
76b20000 76b31000 ATL ATL.DLL Wed Aug 04 10:56:55 2004 (411096C7)
76b40000 76b6d000 WINMM WINMM.dll Wed Aug 04 10:57:10 2004 (411096D6)
76b70000 76b8f000 rastls rastls.dll Wed Aug 04 10:56:34 2004 (411096B2)
76bb0000 76bb5000 sfc sfc.dll Wed Aug 04 10:56:34 2004 (411096B2)
76bd0000 76be4000 raschap raschap.dll Wed Aug 04 10:56:27 2004 (411096AB)
76bf0000 76bfb000 PSAPI PSAPI.DLL Wed Aug 04 10:56:58 2004 (411096CA)
76c00000 76c2e000 credui credui.dll Wed Aug 04 10:56:42 2004 (411096BA)
76c30000 76c5e000 WINTRUST WINTRUST.dll Wed Aug 04 10:56:41 2004 (411096B9)
76c60000 76c8a000 sfc_os sfc_os.dll Wed Aug 04 10:56:35 2004 (411096B3)
76c90000 76cb8000 IMAGEHLP IMAGEHLP.dll Wed Aug 04 10:56:25 2004 (411096A9)
76ce0000 76cf2000 cryptsvc cryptsvc.dll Wed Aug 04 10:56:05 2004 (41109695)
76d10000 76d21000 CLUSAPI CLUSAPI.DLL Wed Aug 04 10:56:20 2004 (411096A4)
76d30000 76d34000 WMI WMI.dll Wed Aug 04 10:56:51 2004 (411096C3)
76d40000 76d58000 MPRAPI MPRAPI.dll Wed Aug 04 10:56:47 2004 (411096BF)
76d60000 76d79000 iphlpapi iphlpapi.dll Wed Aug 04 10:56:10 2004 (4110969A)
76d80000 76d9e000 dhcpcsvc dhcpcsvc.dll Wed Aug 04 10:56:28 2004 (411096AC)
76da0000 76db5000 browser browser.dll Wed Aug 04 10:56:08 2004 (41109698)
76de0000 76e03000 upnp upnp.dll Wed Aug 04 10:56:45 2004 (411096BD)
76e10000 76e35000 adsldpc adsldpc.dll Wed Aug 04 10:56:13 2004 (4110969D)
76e40000 76e63000 wkssvc wkssvc.dll Wed Aug 04 10:56:42 2004 (411096BA)
76e80000 76e8e000 rtutils rtutils.dll Wed Aug 04 10:56:36 2004 (411096B4)
76e90000 76ea2000 rasman rasman.dll Wed Aug 04 10:56:29 2004 (411096AD)
76eb0000 76edf000 TAPI32 TAPI32.dll Wed Aug 04 10:56:38 2004 (411096B6)
76ee0000 76f1c000 RASAPI32 RASAPI32.dll Wed Aug 04 10:56:25 2004 (411096A9)
76f20000 76f47000 DNSAPI DNSAPI.dll Wed Aug 04 10:56:45 2004 (411096BD)
76f50000 76f58000 WTSAPI32 WTSAPI32.dll Wed Aug 04 10:57:55 2004 (41109703)
76f60000 76f8c000 WLDAP32 WLDAP32.dll Wed Aug 04 10:56:43 2004 (411096BB)
76fc0000 76fc6000 rasadhlp rasadhlp.dll Wed Aug 04 10:56:24 2004 (411096A8)
76fd0000 7704f000 CLBCATQ CLBCATQ.DLL Tue Jul 26 07:39:44 2005 (42E5BE90)
77050000 77115000 COMRes COMRes.dll Wed Aug 04 10:56:36 2004 (411096B4)
77120000 771ac000 OLEAUT32 OLEAUT32.dll Wed Aug 04 10:57:39 2004 (411096F3)
771b0000 77256000 WININET WININET.dll Fri Oct 21 06:39:30 2005 (435862F2)
77300000 77332000 schedsvc schedsvc.dll Wed Aug 04 10:56:40 2004 (411096B8)
773d0000 774d2000 comctl32 comctl32.dll Wed Aug 04 10:55:56 2004 (4110968C)
774e0000 7761d000 ole32 ole32.dll Tue Jul 26 07:39:47 2005 (42E5BE93)
77620000 7768e000 wzcsvc wzcsvc.dll Wed Aug 04 10:57:58 2004 (41109706)
77690000 776b1000 NTMARTA NTMARTA.DLL Wed Aug 04 10:57:02 2004 (411096CE)
776c0000 776d1000 AUTHZ AUTHZ.dll Wed Mar 02 20:09:29 2005 (42260159)
776e0000 77703000 shsvcs shsvcs.dll Wed Aug 04 10:56:47 2004 (411096BF)
77710000 77751000 es es.dll Tue Jul 26 07:39:45 2005 (42E5BE91)
77920000 77a13000 SETUPAPI SETUPAPI.dll Wed Aug 04 10:56:32 2004 (411096B0)
77a80000 77b14000 CRYPT32 CRYPT32.dll Wed Aug 04 10:56:01 2004 (41109691)
77b20000 77b32000 MSASN1 MSASN1.dll Wed Aug 04 10:57:23 2004 (411096E3)
77b40000 77b62000 Apphelp Apphelp.dll Wed Aug 04 10:56:36 2004 (411096B4)
77b90000 77bc2000 certcli certcli.dll Wed Aug 04 10:56:08 2004 (41109698)
77be0000 77bf5000 MSACM32 MSACM32.dll Wed Aug 04 10:57:03 2004 (411096CF)
77c00000 77c08000 VERSION VERSION.dll Wed Aug 04 10:56:39 2004 (411096B7)
77c10000 77c68000 msvcrt msvcrt.dll Wed Aug 04 10:59:14 2004 (41109752)
77c70000 77c93000 msv1_0 msv1_0.dll Wed Aug 04 10:59:11 2004 (4110974F)
77cc0000 77cf2000 ACTIVEDS ACTIVEDS.dll Wed Aug 04 10:56:03 2004 (41109693)
77d00000 77d33000 netman netman.dll Mon Aug 22 21:29:46 2005 (430A199A)
77d40000 77dd0000 USER32 USER32.dll Wed Mar 02 20:09:29 2005 (42260159)
77dd0000 77e6b000 ADVAPI32 ADVAPI32.dll Wed Aug 04 10:56:23 2004 (411096A7)
77e70000 77f01000 RPCRT4 RPCRT4.dll Wed Aug 04 10:56:30 2004 (411096AE)
77f10000 77f57000 GDI32 GDI32.dll Thu Dec 29 04:54:35 2005 (43B34FEB)
77f60000 77fd6000 SHLWAPI SHLWAPI.dll Fri Oct 21 06:39:29 2005 (435862F1)
77fe0000 77ff1000 Secur32 Secur32.dll Wed Aug 04 10:56:49 2004 (411096C1)
7c800000 7c8f4000 kernel32 kernel32.dll Wed Aug 04 10:56:36 2004 (411096B4)
7c900000 7c9b0000 ntdll ntdll.dll Wed Aug 04 10:56:36 2004 (411096B4)
7c9c0000 7d1d5000 SHELL32 SHELL32.dll Fri Sep 23 06:05:26 2005 (433370F6)
804d7000 806fd000 nt ntkrnlmp.exe Wed Mar 02 02:57:27 2005 (42250F77)
806fd000 8071dd00 hal halmacpi.dll Wed Aug 04 08:59:09 2004 (41107B2D)
bf800000 bf9c1180 win32k win32k.sys Thu Oct 06 03:05:44 2005 (43446A58)
bf9c2000 bf9d3580 dxg dxg.sys Wed Aug 04 09:00:51 2004 (41107B93)
bf9d4000 bf9e2000 ialmrnt5 ialmrnt5.dll Mon Aug 04 09:16:10 2003 (3F2DFA2A)

 

debuglog.txt 3/3

bf9e2000 bfa04000 ialmdnt5 ialmdnt5.dll Mon Aug 04 09:15:00 2003 (3F2DF9E4)
bfa04000 bfa34120 ialmdev5 ialmdev5.DLL Mon Aug 04 09:14:52 2003 (3F2DF9DC)
bfa35000 bfab0000 ialmdd5 ialmdd5.DLL Mon Aug 04 09:14:24 2003 (3F2DF9C0)
eef3d000 eef5f080 RDPWD RDPWD.SYS Fri Jun 10 02:52:39 2005 (42A8D647)
ef078000 ef0b8100 HTTP HTTP.sys Sat Oct 09 02:48:20 2004 (41672744)
ef339000 ef3f22a0 tm_cfw tm_cfw.sys Fri Nov 05 09:05:35 2004 (418B263F)
ef403000 ef40b080 ipfltdrv ipfltdrv.sys Fri Aug 17 23:55:07 2001 (3B7D84AB)
ef5d8000 ef5ec400 wdmaud wdmaud.sys Wed Aug 04 09:15:03 2004 (41107EE7)
ef765000 ef773d80 sysaudio sysaudio.sys Wed Aug 04 09:15:54 2004 (41107F1A)
ef7a5000 ef7f6300 srv srv.sys Tue May 10 03:17:49 2005 (427FFDAD)
ef81f000 ef8484a0 PGPdisk PGPdisk.SYS Wed Jun 09 13:42:03 2004 (40C6E97B)
ef899000 ef8c5400 mrxdav mrxdav.sys Wed Aug 04 09:00:49 2004 (41107B91)
ef9a6000 ef9a9c00 aspi32 aspi32.sys Fri Nov 30 23:09:43 2001 (3C07F597)
efae2000 efae5280 ndisuio ndisuio.sys Wed Aug 04 09:03:10 2004 (41107C1E)
efaf6000 efb33000 TmXPFlt TmXPFlt.sys Wed Nov 09 14:34:28 2005 (4371ECD4)
efb33000 efc2b2c0 VSApiNt VSApiNt.sys Wed Nov 09 14:07:08 2005 (4371E66C)
efd6c000 efd83480 dump_atapi dump_atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
efdac000 efe1a400 mrxsmb mrxsmb.sys Wed Jan 19 06:26:50 2005 (41EDE18A)
efe1b000 efe45a00 rdbss rdbss.sys Thu Oct 28 04:13:57 2004 (418047D5)
efe46000 efe67d00 afd afd.sys Wed Aug 04 09:14:13 2004 (41107EB5)
efe68000 efe88f00 ipnat ipnat.sys Thu Sep 30 01:28:36 2004 (415B3714)
efe89000 efeb0c00 netbt netbt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
efeb1000 eff08d80 tcpip tcpip.sys Fri Jan 13 04:28:12 2006 (43C7103C)
eff09000 eff1b400 ipsec ipsec.sys Wed Aug 04 09:14:27 2004 (41107EC3)
eff94000 effa1000 TmPreFlt TmPreFlt.sys Wed Nov 09 14:34:27 2005 (4371ECD3)
f0004000 f00214e0 ialmsbw ialmsbw.sys Mon Aug 04 09:16:06 2003 (3F2DFA26)
f0022000 f0039a20 ialmkchw ialmkchw.sys Mon Aug 04 09:15:59 2003 (3F2DFA1F)
f80d6000 f80d8f80 mouhid mouhid.sys Fri Aug 17 23:47:57 2001 (3B7D82FD)
f80e2000 f8115200 update update.sys Wed Aug 04 08:58:32 2004 (41107B08)
f8116000 f8146100 rdpdr rdpdr.sys Wed Aug 04 09:01:10 2004 (41107BA6)
f8147000 f815d680 ndiswan ndiswan.sys Wed Aug 04 09:14:30 2004 (41107EC6)
f815e000 f8181980 portcls portcls.sys Wed Aug 04 09:15:47 2004 (41107F13)
f8182000 f820f300 smwdm smwdm.sys Fri Aug 29 22:08:57 2003 (3F4FA4C9)
f8210000 f8232680 ks ks.sys Wed Aug 04 09:15:20 2004 (41107EF8)
f8237000 f823ad80 aw_host5 aw_host5.sys Thu Oct 23 17:32:19 2003 (3F97E673)
f823b000 f823d840 i386p i386p.sys Tue Jan 10 12:14:07 2006 (43C388EF)
f8257000 f8259280 rasacd rasacd.sys Fri Aug 17 23:55:39 2001 (3B7D84CB)
f825b000 f826e900 parport parport.sys Wed Aug 04 08:59:04 2004 (41107B28)
f826f000 f8292800 e100b325 e100b325.sys Wed Sep 17 21:44:40 2003 (3F68AB98)
f8293000 f82b5e80 USBPORT USBPORT.SYS Wed Aug 04 09:08:34 2004 (41107D62)
f82b6000 f82c9780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 09:07:04 2004 (41107D08)
f82ca000 f82e04e0 ialmnt5 ialmnt5.sys Mon Aug 04 09:15:02 2003 (3F2DF9E6)
f8329000 f8343580 Mup Mup.sys Wed Aug 04 09:15:20 2004 (41107EF8)
f8344000 f8370a80 NDIS NDIS.sys Wed Aug 04 09:14:27 2004 (41107EC3)
f8371000 f83fd480 Ntfs Ntfs.sys Wed Aug 04 09:15:06 2004 (41107EEA)
f83fe000 f8414780 KSecDD KSecDD.sys Wed Aug 04 08:59:45 2004 (41107B51)
f8415000 f8426f00 sr sr.sys Wed Aug 04 09:06:22 2004 (41107CDE)
f8427000 f8445780 fltMgr fltMgr.sys Wed Aug 04 09:01:17 2004 (41107BAD)
f8446000 f845d800 SCSIPORT SCSIPORT.SYS Wed Aug 04 08:59:39 2004 (41107B4B)
f845e000 f8475480 Unknown_Module_f845e000 Unknown_Module_f845e000 Wed Aug 04 08:59:41 2004 (41107B4D)
f8476000 f849b700 dmio dmio.sys Wed Aug 04 09:07:13 2004 (41107D11)
f849c000 f84ba880 ftdisk ftdisk.sys Fri Aug 17 23:52:41 2001 (3B7D8419)
f84bb000 f84cba80 pci pci.sys Wed Aug 04 09:07:45 2004 (41107D31)
f84cc000 f84f2f80 vax347b vax347b.sys Fri Jul 08 14:44:17 2005 (42CE6711)
f84f3000 f8520d80 ACPI ACPI.sys Wed Aug 04 09:07:35 2004 (41107D27)
f8542000 f854ac00 isapnp isapnp.sys Fri Aug 17 23:58:01 2001 (3B7D8559)
f8552000 f855c500 MountMgr MountMgr.sys Wed Aug 04 08:58:29 2004 (41107B05)
f8562000 f856ec80 VolSnap VolSnap.sys Wed Aug 04 09:00:14 2004 (41107B6E)
f8572000 f857ae00 disk disk.sys Wed Aug 04 08:59:53 2004 (41107B59)
f8582000 f858e200 CLASSPNP CLASSPNP.SYS Wed Aug 04 09:14:26 2004 (41107EC2)
f85b2000 f85bad00 intelppm intelppm.sys Wed Aug 04 08:59:19 2004 (41107B37)
f85c2000 f85d1d80 serial serial.sys Wed Aug 04 09:15:51 2004 (41107F17)
f85d2000 f85dee00 i8042prt i8042prt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
f85e2000 f85ed000 PGPsdk PGPsdk.sys Wed Jun 09 13:44:04 2004 (40C6E9F4)
f85f2000 f85fc380 imapi imapi.sys Wed Aug 04 09:00:12 2004 (41107B6C)
f8602000 f860e180 cdrom cdrom.sys Wed Aug 04 08:59:52 2004 (41107B58)
f8612000 f8620080 redbook redbook.sys Wed Aug 04 08:59:34 2004 (41107B46)
f8622000 f8630b80 drmk drmk.sys Wed Aug 04 09:07:54 2004 (41107D3A)
f8632000 f863e880 rasl2tp rasl2tp.sys Wed Aug 04 09:14:21 2004 (41107EBD)
f8642000 f864c200 raspppoe raspppoe.sys Wed Aug 04 09:05:06 2004 (41107C92)
f8652000 f865dd00 raspptp raspptp.sys Wed Aug 04 09:14:26 2004 (41107EC2)
f8662000 f866bf00 termdd termdd.sys Wed Aug 04 08:58:52 2004 (41107B1C)
f8672000 f867b480 NDProxy NDProxy.SYS Fri Aug 17 23:55:30 2001 (3B7D84C2)
f8692000 f86a0100 usbhub usbhub.sys Wed Aug 04 09:08:40 2004 (41107D68)
f86b2000 f86ba900 msgpc msgpc.sys Wed Aug 04 09:04:11 2004 (41107C5B)
f86c2000 f86ca700 wanarp wanarp.sys Wed Aug 04 09:04:57 2004 (41107C89)
f86d2000 f86da700 netbios netbios.sys Wed Aug 04 09:03:19 2004 (41107C27)
f86f2000 f86fa880 Fips Fips.SYS Sat Aug 18 04:31:49 2001 (3B7DC585)
f8712000 f871ad80 HIDCLASS HIDCLASS.SYS Wed Aug 04 09:08:18 2004 (41107D52)
f8732000 f8741900 Cdfs Cdfs.SYS Wed Aug 04 09:14:09 2004 (41107EB1)
f87c2000 f87c8200 PCIIDEX PCIIDEX.SYS Wed Aug 04 08:59:40 2004 (41107B4C)
f87ca000 f87ce900 PartMgr PartMgr.sys Sat Aug 18 04:32:23 2001 (3B7DC5A7)
f87d2000 f87d6bc0 PxHelp20 PxHelp20.sys Tue Oct 28 20:25:49 2003 (3F9EB4AD)
f8802000 f8807000 usbuhci usbuhci.sys Wed Aug 04 09:08:34 2004 (41107D62)
f880a000 f8810800 usbehci usbehci.sys Wed Aug 04 09:08:34 2004 (41107D62)
f8822000 f8829000 fdc fdc.sys unavailable (FFFFFFFE)
f882a000 f8830000 kbdclass kbdclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
f886a000 f886e880 TDI TDI.SYS Wed Aug 04 09:07:47 2004 (41107D33)
f887a000 f887e580 ptilink ptilink.sys Fri Aug 17 23:49:53 2001 (3B7D8371)
f888a000 f888e080 raspti raspti.sys Fri Aug 17 23:55:32 2001 (3B7D84C4)
f8892000 f8897a00 mouclass mouclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
f88aa000 f88af500 TDTCP TDTCP.SYS Wed Aug 04 08:58:52 2004 (41107B1C)
f88b2000 f88b7000 flpydisk flpydisk.sys Wed Aug 04 08:59:24 2004 (41107B3C)
f88ca000 f88cf200 vga vga.sys Wed Aug 04 09:07:06 2004 (41107D0A)
f88da000 f88dea80 Msfs Msfs.SYS Wed Aug 04 09:00:37 2004 (41107B85)
f88ea000 f88f1880 Npfs Npfs.SYS Wed Aug 04 09:00:38 2004 (41107B86)
f8912000 f8918180 HIDPARSE HIDPARSE.SYS Wed Aug 04 09:08:15 2004 (41107D4F)
f8942000 f8946500 watchdog watchdog.sys Wed Aug 04 09:07:32 2004 (41107D24)
f8952000 f8955000 BOOTVID BOOTVID.dll Fri Aug 17 23:49:09 2001 (3B7D8345)
f8956000 f8959320 Gernuwa Gernuwa.sys Mon Apr 21 20:00:31 2003 (3EA423AF)
f89ee000 f89f0900 Dxapi Dxapi.sys Fri Aug 17 23:53:19 2001 (3B7D843F)
f89f6000 f89f9c80 serenum serenum.sys Wed Aug 04 08:59:06 2004 (41107B2A)
f89fe000 f8a00820 awlegacy awlegacy.sys Tue Nov 18 01:06:47 2003 (3FB95487)
f8a06000 f8a08680 pfc pfc.sys Wed Jun 18 04:39:42 2003 (3EEFC2DE)
f8a0a000 f8a0c580 hidusb hidusb.sys Sat Aug 18 00:02:16 2001 (3B7D8658)
f8a16000 f8a18580 ndistapi ndistapi.sys Fri Aug 17 23:55:29 2001 (3B7D84C1)
f8a36000 f8a39c80 mssmbios mssmbios.sys Wed Aug 04 09:07:47 2004 (41107D33)
f8a42000 f8a43b80 kdcom kdcom.dll Fri Aug 17 23:49:10 2001 (3B7D8346)
f8a44000 f8a45100 WMILIB WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
f8a46000 f8a47700 dmload dmload.sys Fri Aug 17 23:58:15 2001 (3B7D8567)
f8a48000 f8a49480 vax347s vax347s.sys Fri Apr 30 09:32:58 2004 (4091F31A)
f8a4c000 f8a4d120 aeaudio aeaudio.sys Mon Apr 01 17:39:14 2002 (3CA87112)
f8a52000 f8a53100 swenum swenum.sys Wed Aug 04 08:58:41 2004 (41107B11)
f8a58000 f8a59280 USBD USBD.SYS Sat Aug 18 00:02:58 2001 (3B7D8682)
f8a5c000 f8a5df00 Fs_Rec Fs_Rec.SYS Fri Aug 17 23:49:37 2001 (3B7D8361)
f8a60000 f8a61080 Beep Beep.SYS Fri Aug 17 23:47:33 2001 (3B7D82E5)
f8a62000 f8a63de0 awechomd awechomd.sys Fri Mar 05 19:52:22 2004 (4048BE56)
f8a66000 f8a67080 mnmdd mnmdd.SYS Fri Aug 17 23:57:28 2001 (3B7D8538)
f8a6a000 f8a6b080 RDPCDD RDPCDD.sys Fri Aug 17 23:46:56 2001 (3B7D82C0)
f8a76000 f8a77100 dump_WMILIB dump_WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
f8b0a000 f8b0ad00 pciide pciide.sys Fri Aug 17 23:51:49 2001 (3B7D83E5)
f8b91000 f8b91d00 dxgthk dxgthk.sys Fri Aug 17 23:53:12 2001 (3B7D8438)
f8be5000 f8be5c00 audstub audstub.sys Fri Aug 17 23:59:40 2001 (3B7D85BC)
f8c2a000 f8c2ab80 Null Null.SYS Fri Aug 17 23:47:39 2001 (3B7D82EB)
f8c59000 f8c59a80 PQNTDrv PQNTDrv.SYS Tue Sep 17 02:14:30 2002 (3D8665D6)

Unloaded modules:
ef58b000 ef5b5000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8bfa000 f8bfb000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef5b5000 ef5d8000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef725000 ef732000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef745000 ef753000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8ada000 f8adc000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f86e2000 f86ed000 p3.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f88c2000 f88c7000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f89ee000 f89f1000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
77920000 77a13000 SETUPAPI.DLL
Timestamp: Wed Aug 04 10:56:32 2004 (411096B0)
Checksum: 000F596B
74e30000 74e9c000 RichEd20.dll
Timestamp: Wed Aug 04 10:56:28 2004 (411096AC)
Checksum: 000765F3
5fff0000 5fff4000 KBDUS.DLL
Timestamp: Sat Aug 18 00:57:00 2001 (3B7D932C)
Checksum: 00002ADC
71b40000 71b6c000 NETMSG.DLL
Timestamp: Sat Aug 18 08:33:37 2001 (3B7DFE31)
Checksum: 0002C767
74980000 74ab0000 msxml3.dll
Timestamp: Wed Aug 04 10:59:24 2004 (4110975C)
Checksum: 00138815
74ed0000 74ede000 wbemsvc.dll
Timestamp: Wed Aug 04 10:56:51 2004 (411096C3)
Checksum: 000100AC
74ef0000 74ef8000 wbemprox.dll
Timestamp: Wed Aug 04 10:56:50 2004 (411096C2)
Checksum: 000081F1
71d40000 71d5c000 actxprxy.dll
Timestamp: Wed Aug 04 10:56:04 2004 (41109694)
Checksum: 00025297
73d30000 73d47000 wbemcons.dll
Timestamp: Wed Aug 04 10:56:45 2004 (411096BD)
Checksum: 00016BC9
Closing open log file c:\debuglog.txt

 

Maybe faulty memory

Hi,

The prelimary finding of your problem is faulty ram. However one minidump is insufficient to find out the culprit. If it is hardware error, you will have minidumps with various bugcheck code. Attach more debug report here if you have.

Your windows install Trend Micro. If your windows started to crash after you upgrade Trend Micro, the new version of Trend Micro may be the culprit.

 

Hallo cpc2004, thanx 4 your answer.

I've changed RAM's position and RAM chip itself in all available banks and the error still occurs, so i don't think this is the one.
I'll attach another report, in case it helps.

Nope, there was not any antivirus upgrade lately. Just the virus pattern files. By the way, TM's engine version is 8.000.1001.

Thanx for your help, any more ideas would be appreciated.
Please do excuse once more my english.

 

debuglog.txt --- No2 (1 of 2)

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0003.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\TEMP\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
Debug session time: Fri Feb 17 20:25:40.296 2006 (GMT+2)
System Uptime: 0 days 2:48:29.859
Loading Kernel Symbols
................................................................................................................................
Loading User Symbols
.....................................................................................................................................................
Loading unloaded module list
......................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 8E, {c0000005, 81e7a5d0, eeeb2cb0, 0}

Probably caused by : ntkrnlmp.exe ( nt!KiDispatchException+3b1 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED (8e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 81e7a5d0, The address that the exception occurred at
Arg3: eeeb2cb0, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
+ffffffff81e7a5d0
81e7a5d0 033e add edi,[esi]

TRAP_FRAME: eeeb2cb0 -- (.trap ffffffffeeeb2cb0)
.trap ffffffffeeeb2cb0
ErrCode = 00000000
eax=017fe0a0 ebx=00000000 ecx=81ffd2f0 edx=f3350003 esi=018d0556 edi=000d24b6
eip=81e7a5d0 esp=eeeb2d24 ebp=eeeb2d30 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
81e7a5d0 033e add edi,[esi] ds:0023:018d0556=????????
.trap
Resetting default scope

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

LAST_CONTROL_TRANSFER: from 8052202d to 805371aa

DEVICE_OBJECT: 0000107c

STACK_TEXT:
eeeb2878 8052202d 0000008e c0000005 81e7a5d0 nt!KeBugCheckEx+0x1b
eeeb2c40 804de403 eeeb2c5c 00000000 eeeb2cb0 nt!KiDispatchException+0x3b1
eeeb2ca8 804de3b4 eeeb2d30 81e7a5d0 badb0d00 nt!CommonDispatchException+0x4d
eeeb2cbc 8056f572 eeeb2d64 02d5fb00 81e7a532 nt!Kei386EoiHelper+0x18a
eeeb2d30 804dd99f 0000107c 00000000 00000000 nt!IopSynchronousServiceTail+0x10f
eeeb2d30 7c90eb94 0000107c 00000000 00000000 nt!KiFastCallEntry+0xfc
02d5fac8 7c90df6a 75083240 0000107c 00000000 ntdll!KiFastSystemCallRet
02d5facc 75083240 0000107c 00000000 00000000 ntdll!ZwQueryDirectoryFile+0xc
02d5fb14 7507be92 017fc8e0 017fd158 00000000 trkwks!CObjIdEnumerator::Find+0xae
02d5fb30 7507fddd 017fc8e0 017fd158 00000007 trkwks!CObjIdEnumerator::FindNext+0x50
02d5fb48 75080e17 017fc8e0 017fd158 0035f7b0 trkwks!CAllVolumesObjIdEnumerator::FindNext+0x19
02d5fdb8 750775ab 8e370a90 01c633ef 00278d00 trkwks!CTrkWksSvc::OnRefreshTimeout+0x1d6
02d5fe08 75073a8d 00000006 0035f7b0 750714d4 trkwks!CVolumeManager::Timer+0xe4
02d5fe54 75071512 0035f7b0 750714d4 00000000 trkwks!CNewTimer:oWork+0x62
02d5fe8c 7c927911 0035f7b0 000eb200 000eb258 trkwks!ThreadPoolCallbackFunction+0x52
02d5fed8 7c938785 750714d4 0035f7b0 000eb200 ntdll!RtlpWaitOrTimerCallout+0x73
02d5fef8 7c927545 000eb258 7c97c3a0 0011ab28 ntdll!RtlpAsyncWaitCallbackCompletion+0x25
02d5ff40 7c927583 7c938760 000eb258 00000000 ntdll!RtlpWorkerCallout+0x70
02d5ff60 7c927645 00000000 000eb258 0011ab28 ntdll!RtlpExecuteWorkerRequest+0x1a
02d5ff74 7c92761c 7c927569 00000000 000eb258 ntdll!RtlpApcCallout+0x11
02d5ffb4 7c80b50b 00000000 00000000 0010ccb0 ntdll!RtlpWorkerThread+0x87
02d5ffec 00000000 7c910760 00000000 00000000 kernel32!BaseThreadStart+0x37


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!KiDispatchException+3b1
8052202d cc int 3

SYMBOL_STACK_INDEX: 1

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!KiDispatchException+3b1

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 42250f77

FAILURE_BUCKET_ID: 0x8E_nt!KiDispatchException+3b1

BUCKET_ID: 0x8E_nt!KiDispatchException+3b1

Followup: MachineOwner
---------

eax=ffdff13c ebx=81e7a5d0 ecx=00000000 edx=804dc0f4 esi=eeeb2c5c edi=00000000
eip=805371aa esp=eeeb2860 ebp=eeeb2878 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
805371aa 5d pop ebp
ChildEBP RetAddr Args to Child
eeeb2878 8052202d 0000008e c0000005 81e7a5d0 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
eeeb2c40 804de403 eeeb2c5c 00000000 eeeb2cb0 nt!KiDispatchException+0x3b1 (FPO: [Non-Fpo])
eeeb2ca8 804de3b4 eeeb2d30 81e7a5d0 badb0d00 nt!CommonDispatchException+0x4d (FPO: [0,20,0])
eeeb2cbc 8056f572 eeeb2d64 02d5fb00 81e7a532 nt!Kei386EoiHelper+0x18a
eeeb2d30 804dd99f 0000107c 00000000 00000000 nt!IopSynchronousServiceTail+0x10f (FPO: [Non-Fpo])
eeeb2d30 7c90eb94 0000107c 00000000 00000000 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ eeeb2d64)
02d5fac8 7c90df6a 75083240 0000107c 00000000 ntdll!KiFastSystemCallRet (FPO: [0,0,0])
02d5facc 75083240 0000107c 00000000 00000000 ntdll!ZwQueryDirectoryFile+0xc (FPO: [11,0,0])
02d5fb14 7507be92 017fc8e0 017fd158 00000000 trkwks!CObjIdEnumerator::Find+0xae (FPO: [Non-Fpo])
02d5fb30 7507fddd 017fc8e0 017fd158 00000007 trkwks!CObjIdEnumerator::FindNext+0x50 (FPO: [Non-Fpo])
02d5fb48 75080e17 017fc8e0 017fd158 0035f7b0 trkwks!CAllVolumesObjIdEnumerator::FindNext+0x19 (FPO: [Non-Fpo])
02d5fdb8 750775ab 8e370a90 01c633ef 00278d00 trkwks!CTrkWksSvc::OnRefreshTimeout+0x1d6 (FPO: [Non-Fpo])
02d5fe08 75073a8d 00000006 0035f7b0 750714d4 trkwks!CVolumeManager::Timer+0xe4 (FPO: [Non-Fpo])
02d5fe54 75071512 0035f7b0 750714d4 00000000 trkwks!CNewTimer:oWork+0x62 (FPO: [Non-Fpo])
02d5fe8c 7c927911 0035f7b0 000eb200 000eb258 trkwks!ThreadPoolCallbackFunction+0x52 (FPO: [Non-Fpo])
02d5fed8 7c938785 750714d4 0035f7b0 000eb200 ntdll!RtlpWaitOrTimerCallout+0x73 (FPO: [Non-Fpo])
02d5fef8 7c927545 000eb258 7c97c3a0 0011ab28 ntdll!RtlpAsyncWaitCallbackCompletion+0x25 (FPO: [Non-Fpo])
02d5ff40 7c927583 7c938760 000eb258 00000000 ntdll!RtlpWorkerCallout+0x70 (FPO: [Non-Fpo])
02d5ff60 7c927645 00000000 000eb258 0011ab28 ntdll!RtlpExecuteWorkerRequest+0x1a (FPO: [Non-Fpo])
02d5ff74 7c92761c 7c927569 00000000 000eb258 ntdll!RtlpApcCallout+0x11 (FPO: [Non-Fpo])
start end module name
01000000 01006000 svchost svchost.exe Wed Aug 04 09:14:46 2004 (41107ED6)
0ffd0000 0fff8000 rsaenh rsaenh.dll Wed Jul 07 05:17:12 2004 (40EB5D28)
20000000 202c5000 xpsp2res xpsp2res.dll Wed Aug 04 10:56:41 2004 (411096B9)
4c0a0000 4c0b7000 wscsvc wscsvc.dll Wed Aug 04 10:57:40 2004 (411096F4)
4d4f0000 4d548000 WINHTTP WINHTTP.dll Wed Aug 04 10:57:07 2004 (411096D3)
50000000 50005000 wuauserv wuauserv.dll Wed Aug 04 09:14:32 2004 (41107EC8)
50040000 5018a000 wuaueng wuaueng.dll Thu May 26 10:16:48 2005 (429577E0)
50640000 5064c000 wups wups.dll Thu May 26 10:16:44 2005 (429577DC)
57cc0000 57cf6000 unimdm unimdm.tsp Wed Aug 04 10:56:40 2004 (411096B8)
57d20000 57d30000 ndptsp ndptsp.tsp Wed Aug 04 10:56:27 2004 (411096AB)
57d40000 57d4b000 kmddsp kmddsp.tsp Wed Aug 04 10:56:24 2004 (411096A8)
57d50000 57d58000 ipconf ipconf.tsp Wed Aug 04 10:56:09 2004 (41109699)
57d60000 57d6a000 hidphone hidphone.tsp Wed Aug 04 10:56:13 2004 (4110969D)
57d70000 57db6000 h323 h323.tsp Wed Aug 04 10:56:07 2004 (41109697)
59490000 594b8000 wmisvc wmisvc.dll Wed Aug 04 10:57:05 2004 (411096D1)
597f0000 5985d000 wmiprvsd wmiprvsd.dll Wed Aug 04 10:57:03 2004 (411096CF)
5ad70000 5ada8000 UxTheme UxTheme.dll Wed Aug 04 10:56:43 2004 (411096BB)
5b860000 5b8b4000 NETAPI32 NETAPI32.dll Wed Aug 04 10:56:28 2004 (411096AC)
5cb70000 5cb96000 ShimEng ShimEng.dll Wed Aug 04 10:56:42 2004 (411096BA)
5d090000 5d127000 comctl32_5d090000 comctl32.dll Wed Aug 04 10:56:31 2004 (411096AF)
5f740000 5f74e000 ncprov ncprov.dll Wed Aug 04 10:56:22 2004 (411096A6)
5f770000 5f77c000 NCObjAPI NCObjAPI.DLL Wed Aug 04 10:56:21 2004 (411096A5)
600a0000 600ab000 mspatcha mspatcha.dll Wed Aug 04 10:58:55 2004 (4110973F)
606b0000 607bd000 ESENT ESENT.dll Fri Oct 21 01:20:02 2005 (43581812)
662b0000 66308000 HNETCFG HNETCFG.DLL Wed Aug 04 10:56:16 2004 (411096A0)
66460000 664b5000 ipnathlp ipnathlp.dll Wed Aug 04 10:56:11 2004 (4110969B)
688f0000 688f9000 HID HID.DLL Wed Aug 04 10:56:12 2004 (4110969C)
6f880000 6fa4a000 AcGenral AcGenral.DLL Wed Aug 04 10:55:58 2004 (4110968E)
708b0000 708bd000 audiosrv audiosrv.dll Wed Aug 04 10:57:03 2004 (411096CF)
71a50000 71a8f000 mswsock mswsock.dll Wed Aug 04 10:59:20 2004 (41109758)
71a90000 71a98000 wshtcpip wshtcpip.dll Wed Aug 04 10:57:49 2004 (411096FD)
71aa0000 71aa8000 WS2HELP WS2HELP.dll Wed Aug 04 10:57:39 2004 (411096F3)
71ab0000 71ac7000 WS2_32 WS2_32.dll Wed Aug 04 10:57:38 2004 (411096F2)
71ad0000 71ad9000 WSOCK32 WSOCK32.dll Wed Aug 04 10:57:51 2004 (411096FF)
71bf0000 71c03000 SAMLIB SAMLIB.dll Wed Aug 04 10:56:29 2004 (411096AD)
71c80000 71c87000 NETRAP NETRAP.dll Wed Aug 04 10:56:35 2004 (411096B3)
71cf0000 71d3b000 kerberos kerberos.dll Wed Jun 15 20:49:30 2005 (42B06A2A)
72000000 72007000 uniplat uniplat.dll Wed Aug 04 10:56:42 2004 (411096BA)
72080000 72099000 xactsrv xactsrv.dll Wed Aug 04 10:56:36 2004 (411096B4)
72240000 72275000 rasppp rasppp.dll Wed Aug 04 10:56:31 2004 (411096AF)
722d0000 722dd000 sens sens.dll Wed Aug 04 10:56:27 2004 (411096AB)
723d0000 723ec000 WinSCard WinSCard.dll Wed Aug 04 10:56:36 2004 (411096B4)
72480000 724b0000 rasmans rasmans.dll Wed Aug 04 10:56:30 2004 (411096AE)
724b0000 724b6000 ntlsapi ntlsapi.dll Wed Aug 04 10:57:01 2004 (411096CD)
73000000 73026000 WINSPOOL WINSPOOL.DRV Wed Aug 04 10:56:38 2004 (411096B6)
73030000 73040000 WZCSAPI WZCSAPI.DLL Wed Aug 04 10:57:57 2004 (41109705)
733e0000 73420000 tapisrv tapisrv.dll Fri Jul 08 19:27:56 2005 (42CEA98C)
73d20000 73d28000 seclogon seclogon.dll Wed Aug 04 10:56:48 2004 (411096C0)
74370000 7437b000 WINIPSEC WINIPSEC.DLL Wed Aug 04 10:57:09 2004 (411096D5)
745e0000 748a6000 msi msi.dll Mon May 02 18:51:33 2005 (42764C85)
74ad0000 74ad8000 POWRPROF POWRPROF.dll Wed Aug 04 10:56:53 2004 (411096C5)
74ed0000 74ede000 wbemsvc wbemsvc.dll Wed Aug 04 10:56:51 2004 (411096C3)
74ef0000 74ef8000 wbemprox wbemprox.dll Wed Aug 04 10:56:50 2004 (411096C2)
74f00000 74f0c000 SSDPAPI SSDPAPI.dll Wed Aug 04 10:59:16 2004 (41109754)
74f40000 74f4c000 pchsvc pchsvc.dll Wed Aug 04 10:56:29 2004 (411096AD)
74f50000 74f55000 MSIDLE MSIDLE.DLL Wed Aug 04 10:58:28 2004 (41109724)
74f80000 74f89000 ersvc ersvc.dll Wed Aug 04 10:56:46 2004 (411096BE)
74f90000 74f99000 dmserver dmserver.dll Wed Aug 04 10:56:40 2004 (411096B8)
75020000 7503b000 wmiutils wmiutils.dll Wed Aug 04 10:57:06 2004 (411096D2)
75070000 75089000 trkwks trkwks.dll Wed Aug 04 10:57:00 2004 (411096CC)
75090000 750aa000 srvsvc srvsvc.dll Tue Dec 07 21:32:34 2004 (41B60552)
750b0000 750c2000 RESUTILS RESUTILS.DLL Wed Aug 04 10:56:25 2004 (411096A9)
750f0000 75103000 MTXCLU MTXCLU.DLL Tue Jul 26 07:39:47 2005 (42E5BE93)
75130000 75144000 colbact colbact.DLL Tue Jul 26 07:39:45 2005 (42E5BE91)
75150000 75164000 Cabinet Cabinet.dll Wed Aug 04 10:56:00 2004 (41109690)
751a0000 751ce000 srsvc srsvc.dll Wed Aug 04 10:59:14 2004 (41109752)
75200000 7522e000 repdrvfs repdrvfs.dll Wed Aug 04 10:56:45 2004 (411096BD)
75260000 75289000 ADVPACK ADVPACK.dll Wed Aug 04 10:56:24 2004 (411096A8)

 

debuglog.txt --- No2 (2 of 2)

75290000 752c7000 wbemcomn wbemcomn.dll Wed Aug 04 10:56:44 2004 (411096BC)
75310000 7534f000 esscli esscli.dll Wed Aug 04 10:56:50 2004 (411096C2)
75390000 753d6000 wbemess wbemess.dll Wed Aug 04 10:56:48 2004 (411096C0)
753e0000 7544d000 VSSAPI VSSAPI.DLL Wed Aug 04 10:56:44 2004 (411096BC)
754d0000 75550000 CRYPTUI CRYPTUI.dll Wed Aug 04 10:56:06 2004 (41109696)
755f0000 7568a000 netcfgx netcfgx.dll Wed Aug 04 10:56:29 2004 (411096AD)
75690000 75706000 FastProx FastProx.dll Wed Aug 04 10:56:05 2004 (41109695)
75880000 75891000 rastapi rastapi.dll Wed Aug 04 10:56:33 2004 (411096B1)
75e90000 75f40000 SXS SXS.DLL Wed Aug 04 09:14:57 2004 (41107EE1)
76080000 760e5000 MSVCP60 MSVCP60.dll Wed Aug 04 10:59:13 2004 (41109751)
762c0000 76345000 wbemcore wbemcore.dll Wed Aug 04 10:56:46 2004 (411096BE)
76360000 76370000 WINSTA WINSTA.dll Wed Aug 04 10:56:40 2004 (411096B8)
76400000 765a6000 netshell netshell.dll Wed Aug 04 10:56:37 2004 (411096B5)
76620000 7675c000 comsvcs comsvcs.dll Tue Jul 26 07:39:48 2005 (42E5BE94)
76780000 76789000 SHFOLDER SHFOLDER.dll Wed Aug 04 10:56:40 2004 (411096B8)
76790000 7679c000 cryptdll cryptdll.dll Wed Aug 04 10:56:02 2004 (41109692)
767a0000 767b3000 NTDSAPI NTDSAPI.dll Wed Aug 04 10:56:57 2004 (411096C9)
767c0000 767ec000 w32time w32time.dll Wed Aug 04 10:56:34 2004 (411096B2)
767f0000 76817000 SCHANNEL SCHANNEL.dll Wed Aug 04 10:56:39 2004 (411096B7)
768d0000 76974000 RASDLG RASDLG.dll Wed Aug 04 10:56:28 2004 (411096AC)
769c0000 76a73000 USERENV USERENV.dll Wed Aug 04 10:56:41 2004 (411096B9)
76b20000 76b31000 ATL ATL.DLL Wed Aug 04 10:56:55 2004 (411096C7)
76b40000 76b6d000 WINMM WINMM.dll Wed Aug 04 10:57:10 2004 (411096D6)
76b70000 76b8f000 rastls rastls.dll Wed Aug 04 10:56:34 2004 (411096B2)
76bb0000 76bb5000 sfc sfc.dll Wed Aug 04 10:56:34 2004 (411096B2)
76bd0000 76be4000 raschap raschap.dll Wed Aug 04 10:56:27 2004 (411096AB)
76bf0000 76bfb000 PSAPI PSAPI.DLL Wed Aug 04 10:56:58 2004 (411096CA)
76c00000 76c2e000 credui credui.dll Wed Aug 04 10:56:42 2004 (411096BA)
76c30000 76c5e000 WINTRUST WINTRUST.dll Wed Aug 04 10:56:41 2004 (411096B9)
76c60000 76c8a000 sfc_os sfc_os.dll Wed Aug 04 10:56:35 2004 (411096B3)
76c90000 76cb8000 IMAGEHLP IMAGEHLP.dll Wed Aug 04 10:56:25 2004 (411096A9)
76ce0000 76cf2000 cryptsvc cryptsvc.dll Wed Aug 04 10:56:05 2004 (41109695)
76d10000 76d21000 CLUSAPI CLUSAPI.DLL Wed Aug 04 10:56:20 2004 (411096A4)
76d30000 76d34000 WMI WMI.dll Wed Aug 04 10:56:51 2004 (411096C3)
76d40000 76d58000 MPRAPI MPRAPI.dll Wed Aug 04 10:56:47 2004 (411096BF)
76d60000 76d79000 iphlpapi iphlpapi.dll Wed Aug 04 10:56:10 2004 (4110969A)
76d80000 76d9e000 dhcpcsvc dhcpcsvc.dll Wed Aug 04 10:56:28 2004 (411096AC)
76da0000 76db5000 browser browser.dll Wed Aug 04 10:56:08 2004 (41109698)
76de0000 76e03000 upnp upnp.dll Wed Aug 04 10:56:45 2004 (411096BD)
76e10000 76e35000 adsldpc adsldpc.dll Wed Aug 04 10:56:13 2004 (4110969D)
76e40000 76e63000 wkssvc wkssvc.dll Wed Aug 04 10:56:42 2004 (411096BA)
76e80000 76e8e000 rtutils rtutils.dll Wed Aug 04 10:56:36 2004 (411096B4)
76e90000 76ea2000 rasman rasman.dll Wed Aug 04 10:56:29 2004 (411096AD)
76eb0000 76edf000 TAPI32 TAPI32.dll Wed Aug 04 10:56:38 2004 (411096B6)
76ee0000 76f1c000 RASAPI32 RASAPI32.dll Wed Aug 04 10:56:25 2004 (411096A9)
76f20000 76f47000 DNSAPI DNSAPI.dll Wed Aug 04 10:56:45 2004 (411096BD)
76f50000 76f58000 WTSAPI32 WTSAPI32.dll Wed Aug 04 10:57:55 2004 (41109703)
76f60000 76f8c000 WLDAP32 WLDAP32.dll Wed Aug 04 10:56:43 2004 (411096BB)
76fc0000 76fc6000 rasadhlp rasadhlp.dll Wed Aug 04 10:56:24 2004 (411096A8)
76fd0000 7704f000 CLBCATQ CLBCATQ.DLL Tue Jul 26 07:39:44 2005 (42E5BE90)
77050000 77115000 COMRes COMRes.dll Wed Aug 04 10:56:36 2004 (411096B4)
77120000 771ac000 OLEAUT32 OLEAUT32.dll Wed Aug 04 10:57:39 2004 (411096F3)
771b0000 77256000 WININET WININET.dll Fri Oct 21 06:39:30 2005 (435862F2)
77300000 77332000 schedsvc schedsvc.dll Wed Aug 04 10:56:40 2004 (411096B8)
773d0000 774d2000 comctl32 comctl32.dll Wed Aug 04 10:55:56 2004 (4110968C)
774e0000 7761d000 ole32 ole32.dll Tue Jul 26 07:39:47 2005 (42E5BE93)
77620000 7768e000 wzcsvc wzcsvc.dll Wed Aug 04 10:57:58 2004 (41109706)
77690000 776b1000 NTMARTA NTMARTA.DLL Wed Aug 04 10:57:02 2004 (411096CE)
776c0000 776d1000 AUTHZ AUTHZ.dll Wed Mar 02 20:09:29 2005 (42260159)
776e0000 77703000 shsvcs shsvcs.dll Wed Aug 04 10:56:47 2004 (411096BF)
77710000 77751000 es es.dll Tue Jul 26 07:39:45 2005 (42E5BE91)
77920000 77a13000 SETUPAPI SETUPAPI.dll Wed Aug 04 10:56:32 2004 (411096B0)
77a80000 77b14000 CRYPT32 CRYPT32.dll Wed Aug 04 10:56:01 2004 (41109691)
77b20000 77b32000 MSASN1 MSASN1.dll Wed Aug 04 10:57:23 2004 (411096E3)
77b40000 77b62000 Apphelp Apphelp.dll Wed Aug 04 10:56:36 2004 (411096B4)
77b90000 77bc2000 certcli certcli.dll Wed Aug 04 10:56:08 2004 (41109698)
77be0000 77bf5000 MSACM32 MSACM32.dll Wed Aug 04 10:57:03 2004 (411096CF)
77c00000 77c08000 VERSION VERSION.dll Wed Aug 04 10:56:39 2004 (411096B7)
77c10000 77c68000 msvcrt msvcrt.dll Wed Aug 04 10:59:14 2004 (41109752)
77c70000 77c93000 msv1_0 msv1_0.dll Wed Aug 04 10:59:11 2004 (4110974F)
77cc0000 77cf2000 ACTIVEDS ACTIVEDS.dll Wed Aug 04 10:56:03 2004 (41109693)
77d00000 77d33000 netman netman.dll Mon Aug 22 21:29:46 2005 (430A199A)
77d40000 77dd0000 USER32 USER32.dll Wed Mar 02 20:09:29 2005 (42260159)
77dd0000 77e6b000 ADVAPI32 ADVAPI32.dll Wed Aug 04 10:56:23 2004 (411096A7)
77e70000 77f01000 RPCRT4 RPCRT4.dll Wed Aug 04 10:56:30 2004 (411096AE)
77f10000 77f57000 GDI32 GDI32.dll Thu Dec 29 04:54:35 2005 (43B34FEB)
77f60000 77fd6000 SHLWAPI SHLWAPI.dll Fri Oct 21 06:39:29 2005 (435862F1)
77fe0000 77ff1000 Secur32 Secur32.dll Wed Aug 04 10:56:49 2004 (411096C1)
7c800000 7c8f4000 kernel32 kernel32.dll Wed Aug 04 10:56:36 2004 (411096B4)
7c900000 7c9b0000 ntdll ntdll.dll Wed Aug 04 10:56:36 2004 (411096B4)
7c9c0000 7d1d5000 SHELL32 SHELL32.dll Fri Sep 23 06:05:26 2005 (433370F6)
804d7000 806fd000 nt ntkrnlmp.exe Wed Mar 02 02:57:27 2005 (42250F77)
806fd000 8071dd00 hal halmacpi.dll Wed Aug 04 08:59:09 2004 (41107B2D)
bf800000 bf9c1180 win32k win32k.sys Thu Oct 06 03:05:44 2005 (43446A58)
bf9c2000 bf9d3580 dxg dxg.sys Wed Aug 04 09:00:51 2004 (41107B93)
bf9d4000 bf9e2000 ialmrnt5 ialmrnt5.dll Mon Aug 04 09:16:10 2003 (3F2DFA2A)
bf9e2000 bfa04000 ialmdnt5 ialmdnt5.dll Mon Aug 04 09:15:00 2003 (3F2DF9E4)
bfa04000 bfa34120 ialmdev5 ialmdev5.DLL Mon Aug 04 09:14:52 2003 (3F2DF9DC)
bfa35000 bfab0000 ialmdd5 ialmdd5.DLL Mon Aug 04 09:14:24 2003 (3F2DF9C0)
ee5d3000 ee5f5080 RDPWD RDPWD.SYS Fri Jun 10 02:52:39 2005 (42A8D647)
ee736000 ee776100 HTTP HTTP.sys Sat Oct 09 02:48:20 2004 (41672744)
ee9a7000 ee9af080 ipfltdrv ipfltdrv.sys Fri Aug 17 23:55:07 2001 (3B7D84AB)
eec04000 eec18400 wdmaud wdmaud.sys Wed Aug 04 09:15:03 2004 (41107EE7)
eed09000 eedc22a0 tm_cfw tm_cfw.sys Fri Nov 05 09:05:35 2004 (418B263F)
eeedb000 eef2c300 srv srv.sys Tue May 10 03:17:49 2005 (427FFDAD)
eef55000 eef7e4a0 PGPdisk PGPdisk.SYS Wed Jun 09 13:42:03 2004 (40C6E97B)
eefbf000 eefcdd80 sysaudio sysaudio.sys Wed Aug 04 09:15:54 2004 (41107F1A)
ef07f000 ef082c00 aspi32 aspi32.sys Fri Nov 30 23:09:43 2001 (3C07F597)
ef1af000 ef1ec000 TmXPFlt TmXPFlt.sys Wed Nov 09 14:34:28 2005 (4371ECD4)
ef1ec000 ef2e42c0 VSApiNt VSApiNt.sys Wed Nov 09 14:07:08 2005 (4371E66C)
ef2ed000 ef2f0280 ndisuio ndisuio.sys Wed Aug 04 09:03:10 2004 (41107C1E)
ef425000 ef43c480 dump_atapi dump_atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
ef465000 ef485f00 ipnat ipnat.sys Thu Sep 30 01:28:36 2004 (415B3714)
ef486000 ef4f4400 mrxsmb mrxsmb.sys Wed Jan 19 06:26:50 2005 (41EDE18A)
ef4f5000 ef51fa00 rdbss rdbss.sys Thu Oct 28 04:13:57 2004 (418047D5)
ef520000 ef541d00 afd afd.sys Wed Aug 04 09:14:13 2004 (41107EB5)
ef542000 ef569c00 netbt netbt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
ef56a000 ef5c1d80 tcpip tcpip.sys Fri Jan 13 04:28:12 2006 (43C7103C)
ef5c2000 ef5d4400 ipsec ipsec.sys Wed Aug 04 09:14:27 2004 (41107EC3)
ef67d000 ef68a000 TmPreFlt TmPreFlt.sys Wed Nov 09 14:34:27 2005 (4371ECD3)
ef6bd000 ef6da4e0 ialmsbw ialmsbw.sys Mon Aug 04 09:16:06 2003 (3F2DFA26)
ef6db000 ef6f2a20 ialmkchw ialmkchw.sys Mon Aug 04 09:15:59 2003 (3F2DFA1F)
f778b000 f778d900 Dxapi Dxapi.sys Fri Aug 17 23:53:19 2001 (3B7D843F)
f779b000 f77ce200 update update.sys Wed Aug 04 08:58:32 2004 (41107B08)
f77cf000 f77ff100 rdpdr rdpdr.sys Wed Aug 04 09:01:10 2004 (41107BA6)
f7800000 f7816680 ndiswan ndiswan.sys Wed Aug 04 09:14:30 2004 (41107EC6)
f7817000 f783a980 portcls portcls.sys Wed Aug 04 09:15:47 2004 (41107F13)
f783b000 f78c8300 smwdm smwdm.sys Fri Aug 29 22:08:57 2003 (3F4FA4C9)
f78c9000 f78eb680 ks ks.sys Wed Aug 04 09:15:20 2004 (41107EF8)
f78ec000 f78ff900 parport parport.sys Wed Aug 04 08:59:04 2004 (41107B28)
f7900000 f7923800 e100b325 e100b325.sys Wed Sep 17 21:44:40 2003 (3F68AB98)
f7924000 f7946e80 USBPORT USBPORT.SYS Wed Aug 04 09:08:34 2004 (41107D62)
f7947000 f795a780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 09:07:04 2004 (41107D08)
f795b000 f79714e0 ialmnt5 ialmnt5.sys Mon Aug 04 09:15:02 2003 (3F2DF9E6)
f7986000 f7988280 rasacd rasacd.sys Fri Aug 17 23:55:39 2001 (3B7D84CB)
f798a000 f798c820 awlegacy awlegacy.sys Tue Nov 18 01:06:47 2003 (3FB95487)
f8329000 f8343580 Mup Mup.sys Wed Aug 04 09:15:20 2004 (41107EF8)
f8344000 f8370a80 NDIS NDIS.sys Wed Aug 04 09:14:27 2004 (41107EC3)
f8371000 f83fd480 Ntfs Ntfs.sys Wed Aug 04 09:15:06 2004 (41107EEA)
f83fe000 f8414780 KSecDD KSecDD.sys Wed Aug 04 08:59:45 2004 (41107B51)
f8415000 f8426f00 sr sr.sys Wed Aug 04 09:06:22 2004 (41107CDE)
f8427000 f8445780 fltMgr fltMgr.sys Wed Aug 04 09:01:17 2004 (41107BAD)
f8446000 f845d800 SCSIPORT SCSIPORT.SYS Wed Aug 04 08:59:39 2004 (41107B4B)
f845e000 f8475480 Unknown_Module_f845e000 Unknown_Module_f845e000 Wed Aug 04 08:59:41 2004 (41107B4D)
f8476000 f849b700 dmio dmio.sys Wed Aug 04 09:07:13 2004 (41107D11)
f849c000 f84ba880 ftdisk ftdisk.sys Fri Aug 17 23:52:41 2001 (3B7D8419)
f84bb000 f84cba80 pci pci.sys Wed Aug 04 09:07:45 2004 (41107D31)
f84cc000 f84f2f80 vax347b vax347b.sys Fri Jul 08 14:44:17 2005 (42CE6711)
f84f3000 f8520d80 ACPI ACPI.sys Wed Aug 04 09:07:35 2004 (41107D27)
f8542000 f854ac00 isapnp isapnp.sys Fri Aug 17 23:58:01 2001 (3B7D8559)
f8552000 f855c500 MountMgr MountMgr.sys Wed Aug 04 08:58:29 2004 (41107B05)
f8562000 f856ec80 VolSnap VolSnap.sys Wed Aug 04 09:00:14 2004 (41107B6E)
f8572000 f857ae00 disk disk.sys Wed Aug 04 08:59:53 2004 (41107B59)
f8582000 f858e200 CLASSPNP CLASSPNP.SYS Wed Aug 04 09:14:26 2004 (41107EC2)
f85b2000 f85bb480 NDProxy NDProxy.SYS Fri Aug 17 23:55:30 2001 (3B7D84C2)
f85d2000 f85e0100 usbhub usbhub.sys Wed Aug 04 09:08:40 2004 (41107D68)
f85f2000 f85fa900 msgpc msgpc.sys Wed Aug 04 09:04:11 2004 (41107C5B)
f8602000 f860a700 netbios netbios.sys Wed Aug 04 09:03:19 2004 (41107C27)
f8622000 f862a880 Fips Fips.SYS Sat Aug 18 04:31:49 2001 (3B7DC585)
f8632000 f863a700 wanarp wanarp.sys Wed Aug 04 09:04:57 2004 (41107C89)
f8652000 f8661900 Cdfs Cdfs.SYS Wed Aug 04 09:14:09 2004 (41107EB1)
f8662000 f866ad80 HIDCLASS HIDCLASS.SYS Wed Aug 04 09:08:18 2004 (41107D52)
f86f2000 f86fad00 intelppm intelppm.sys Wed Aug 04 08:59:19 2004 (41107B37)
f8702000 f8711d80 serial serial.sys Wed Aug 04 09:15:51 2004 (41107F17)
f8712000 f871ee00 i8042prt i8042prt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
f8722000 f872d000 PGPsdk PGPsdk.sys Wed Jun 09 13:44:04 2004 (40C6E9F4)
f8742000 f874c380 imapi imapi.sys Wed Aug 04 09:00:12 2004 (41107B6C)
f8752000 f875e180 cdrom cdrom.sys Wed Aug 04 08:59:52 2004 (41107B58)
f8762000 f8770080 redbook redbook.sys Wed Aug 04 08:59:34 2004 (41107B46)
f8772000 f8780b80 drmk drmk.sys Wed Aug 04 09:07:54 2004 (41107D3A)
f8782000 f878e880 rasl2tp rasl2tp.sys Wed Aug 04 09:14:21 2004 (41107EBD)
f8792000 f879c200 raspppoe raspppoe.sys Wed Aug 04 09:05:06 2004 (41107C92)
f87a2000 f87add00 raspptp raspptp.sys Wed Aug 04 09:14:26 2004 (41107EC2)
f87b2000 f87bbf00 termdd termdd.sys Wed Aug 04 08:58:52 2004 (41107B1C)
f87c2000 f87c8200 PCIIDEX PCIIDEX.SYS Wed Aug 04 08:59:40 2004 (41107B4C)
f87ca000 f87ce900 PartMgr PartMgr.sys Sat Aug 18 04:32:23 2001 (3B7DC5A7)
f87d2000 f87d6bc0 PxHelp20 PxHelp20.sys Tue Oct 28 20:25:49 2003 (3F9EB4AD)
f882a000 f882f500 TDTCP TDTCP.SYS Wed Aug 04 08:58:52 2004 (41107B1C)
f885a000 f885f000 usbuhci usbuhci.sys Wed Aug 04 09:08:34 2004 (41107D62)
f8862000 f8868800 usbehci usbehci.sys Wed Aug 04 09:08:34 2004 (41107D62)
f886a000 f8871000 fdc fdc.sys unavailable (FFFFFFFE)
f8872000 f8878000 kbdclass kbdclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
f887a000 f887e880 TDI TDI.SYS Wed Aug 04 09:07:47 2004 (41107D33)
f8882000 f8886580 ptilink ptilink.sys Fri Aug 17 23:49:53 2001 (3B7D8371)
f888a000 f888e080 raspti raspti.sys Fri Aug 17 23:55:32 2001 (3B7D84C4)
f8892000 f8897a00 mouclass mouclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
f889a000 f889f000 flpydisk flpydisk.sys Wed Aug 04 08:59:24 2004 (41107B3C)
f88aa000 f88af200 vga vga.sys Wed Aug 04 09:07:06 2004 (41107D0A)
f88b2000 f88b6a80 Msfs Msfs.SYS Wed Aug 04 09:00:37 2004 (41107B85)
f88ba000 f88c1880 Npfs Npfs.SYS Wed Aug 04 09:00:38 2004 (41107B86)
f88ca000 f88d0180 HIDPARSE HIDPARSE.SYS Wed Aug 04 09:08:15 2004 (41107D4F)
f88d2000 f88d6500 watchdog watchdog.sys Wed Aug 04 09:07:32 2004 (41107D24)
f8952000 f8955000 BOOTVID BOOTVID.dll Fri Aug 17 23:49:09 2001 (3B7D8345)
f8956000 f8959320 Gernuwa Gernuwa.sys Mon Apr 21 20:00:31 2003 (3EA423AF)
f89ea000 f89ec840 i386p i386p.sys Tue Jan 10 12:14:07 2006 (43C388EF)
f89ee000 f89f1d80 aw_host5 aw_host5.sys Thu Oct 23 17:32:19 2003 (3F97E673)
f8a0a000 f8a0c580 hidusb hidusb.sys Sat Aug 18 00:02:16 2001 (3B7D8658)
f8a0e000 f8a10f80 mouhid mouhid.sys Fri Aug 17 23:47:57 2001 (3B7D82FD)
f8a1a000 f8a1dc80 serenum serenum.sys Wed Aug 04 08:59:06 2004 (41107B2A)
f8a1e000 f8a20680 pfc pfc.sys Wed Jun 18 04:39:42 2003 (3EEFC2DE)
f8a22000 f8a24580 ndistapi ndistapi.sys Fri Aug 17 23:55:29 2001 (3B7D84C1)
f8a3a000 f8a3dc80 mssmbios mssmbios.sys Wed Aug 04 09:07:47 2004 (41107D33)
f8a42000 f8a43b80 kdcom kdcom.dll Fri Aug 17 23:49:10 2001 (3B7D8346)
f8a44000 f8a45100 WMILIB WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
f8a46000 f8a47700 dmload dmload.sys Fri Aug 17 23:58:15 2001 (3B7D8567)
f8a48000 f8a49480 vax347s vax347s.sys Fri Apr 30 09:32:58 2004 (4091F31A)
f8a58000 f8a59120 aeaudio aeaudio.sys Mon Apr 01 17:39:14 2002 (3CA87112)
f8a5a000 f8a5b100 swenum swenum.sys Wed Aug 04 08:58:41 2004 (41107B11)
f8a60000 f8a61280 USBD USBD.SYS Sat Aug 18 00:02:58 2001 (3B7D8682)
f8a62000 f8a63f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 23:49:37 2001 (3B7D8361)
f8a64000 f8a65080 Beep Beep.SYS Fri Aug 17 23:47:33 2001 (3B7D82E5)
f8a66000 f8a67de0 awechomd awechomd.sys Fri Mar 05 19:52:22 2004 (4048BE56)
f8a68000 f8a69080 mnmdd mnmdd.SYS Fri Aug 17 23:57:28 2001 (3B7D8538)
f8a6a000 f8a6b080 RDPCDD RDPCDD.sys Fri Aug 17 23:46:56 2001 (3B7D82C0)
f8a6e000 f8a6f100 dump_WMILIB dump_WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
f8b0a000 f8b0ad00 pciide pciide.sys Fri Aug 17 23:51:49 2001 (3B7D83E5)
f8b33000 f8b33c00 audstub audstub.sys Fri Aug 17 23:59:40 2001 (3B7D85BC)
f8b74000 f8b74b80 Null Null.SYS Fri Aug 17 23:47:39 2001 (3B7D82EB)
f8bd7000 f8bd7a80 PQNTDrv PQNTDrv.SYS Tue Sep 17 02:14:30 2002 (3D8665D6)
f8c0e000 f8c0ed00 dxgthk dxgthk.sys Fri Aug 17 23:53:12 2001 (3B7D8438)

Unloaded modules:
ee467000 ee491000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ee467000 ee491000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ee467000 ee491000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ee467000 ee491000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ee531000 ee55b000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eebb7000 eebe1000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8b91000 f8b92000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef68d000 ef69a000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eebe1000 eec04000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eefaf000 eefbd000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8ab2000 f8ab4000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8612000 f861d000 p3.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f88a2000 f88a7000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f798e000 f7991000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
74e30000 74e9c000 RichEd20.dll
Timestamp: Wed Aug 04 10:56:28 2004 (411096AC)
Checksum: 000765F3
5fff0000 5fff4000 KBDUS.DLL
Timestamp: Sat Aug 18 00:57:00 2001 (3B7D932C)
Checksum: 00002ADC
71b40000 71b6c000 NETMSG.DLL
Timestamp: Sat Aug 18 08:33:37 2001 (3B7DFE31)
Checksum: 0002C767
74980000 74ab0000 msxml3.dll
Timestamp: Wed Aug 04 10:59:24 2004 (4110975C)
Checksum: 00138815
74ed0000 74ede000 wbemsvc.dll
Timestamp: Wed Aug 04 10:56:51 2004 (411096C3)
Checksum: 000100AC
74ef0000 74ef8000 wbemprox.dll
Timestamp: Wed Aug 04 10:56:50 2004 (411096C2)
Checksum: 000081F1
71d40000 71d5c000 actxprxy.dll
Timestamp: Wed Aug 04 10:56:04 2004 (41109694)
Checksum: 00025297
73d30000 73d47000 wbemcons.dll
Timestamp: Wed Aug 04 10:56:45 2004 (411096BD)
Checksum: 00016BC9
Closing open log file c:\debuglog.txt

 

Machine's info follows, in case it helps:

Computer:
Computer Type ACPI Multiprocessor PC
Operating System Microsoft Windows XP Professional
OS Service Pack Service Pack 2
Internet Explorer 6.0.2900.2180 (IE 6.0 SP2)
DirectX 4.09.00.0904 (DirectX 9.0c)
Computer Name ...
User Name ...
Logon Domain ...
Date / Time 2006-02-15 / 04:18

Motherboard:
CPU Type Intel Pentium 4, 2800 MHz (21 x 133)
Motherboard Name Lite-On NR146
Motherboard Chipset Intel Morgan Hill i865GV
System Memory 246 MB (PC3200 DDR SDRAM)
BIOS Type AMI (07/04/05)
Communication Port Communications Port (COM1)
Communication Port ECP Printer Port (LPT1)

Display:
Video Adapter Intel(R) 82865G Graphics Controller (64 MB)
3D Accelerator Intel Extreme Graphics 2
Monitor HP L1740 [17" LCD] (CNP535B759)

Multimedia:
Audio Adapter Analog Devices AD1888 @ Intel 82801EB ICH5 - AC'97 Audio Controller [A-2/A-3]

Storage:
IDE Controller Intel(R) 82801EB Ultra ATA Storage Controllers
SCSI/RAID Controller VAX347S SCSI Controller
Floppy Drive Floppy disk drive
Disk Drive ST340014A (40 GB, 7200 RPM, Ultra-ATA/100)
Optical Drive LITE-ON CD-RW SOHR-4839S
Optical Drive SCSIVAX DVD/CD-ROM SCSI CdRom Device
SMART Hard Disks Status OK

Partitions:
C: (NTFS) 29996 MB (16589 MB free)
D: (NTFS) 8165 MB (5388 MB free)
Total Size 37.3 GB (21.5 GB free)

Input:
Keyboard Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
Mouse Microsoft USB Wheel Mouse Optical

Network:
Primary IP Address 192.....
Primary MAC Address 00-0F-FE-AB-13-AD
Network Adapter Intel(R) PRO/100 VE Network Connection (192......)

Peripherals:
Printer \\...\HP LaserJet 1100 (MS)
Printer \\...\HP LaserJet 5000 Series PCL 5e
Printer Adobe PDF
Printer Microsoft Office Document Image Writer
USB1 Controller Intel 82801EB ICH5 - USB Controller [A-2/A-3]
USB1 Controller Intel 82801EB ICH5 - USB Controller [A-2/A-3]
USB1 Controller Intel 82801EB ICH5 - USB Controller [A-2/A-3]
USB1 Controller Intel 82801EB ICH5 - USB Controller [A-2/A-3]
USB2 Controller Intel 82801EB ICH5 - Enhanced USB2 Controller [A-2/A-3]
USB Device Microsoft USB Wheel Mouse Optical

DMI:
DMI BIOS Vendor American Megatrends Inc.
DMI BIOS Version 1.16
DMI System Manufacturer Hewlett-Packard
DMI System Product HP dx2000 MT(DX873A)
DMI System Version
DMI System Serial Number ...
DMI System UUID ...
DMI Motherboard Manufacturer Lite-On Tech.
DMI Motherboard Product 08FCh
DMI Motherboard Version E01
DMI Motherboard Serial Number ...
DMI Chassis Manufacturer Hewlett-Packard
DMI Chassis Version
DMI Chassis Serial Number ...
DMI Chassis Asset Tag HUB54906WP
DMI Chassis Type Desktop Case
DMI Total / Free Memory Sockets 4 / 3

 

Here's a new (3rd posted here) one ...





debuglog.txt :

http://s51.yousendit.com/d.aspx?id=20V1YJFAQX59D2Z92MK6WJXO3X


scr :

http://img145.imageshack.us/img145/1922/latest1cl.gif

 

Trojan Backdoor.Rustock.

Hi,

Your windows is infected with trojan called Backdoor.Rustock as I find module i386p at your windows.
http://www.symantec.com/avcenter/venc/data/backdoor.rustock.html

 

I used Scan Spyware v3.8 and 14 files were infected by various viruses, including Backdoor.Rustock.
I hope that THIS was responsible for all those shutdowns.
If there will be any updates for this matter, i will inform you.

For now, i am very grateful for all your help: Thank you.

 

It seems that it won't be necessary; it's day 1 now that i don't get those shutdowns and i believe that a trojan was responsible for that mess.

I was infected by:

• Advanced Excel 2000 Password Recovery - HKEY_LOCAL_MACHINE\SOFTWARE\Elcom
• Boss EveryWare - HKEY_CLASSES_ROOT\.dbf
• cyber predator - HKEY_LOCAL_MACHINE\SOFTWARE\SOFTWARE FX, INC.
• GAIN - HKEY_USERS\.default\software\microsoft\systemcertificates\trustedpublisher\crls
• Rustock - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i386p
• Rustock - C:\WINDOWS\system32\msctl32.dll
• Rustock - C:\WINDOWS\system32\drivers\I386P.SYS
• Backdoor.IRC.Aladinz.R - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Office
• Trojan.Abwiz.C - C:\WINDOWS\system32\zlbw.dll
• Trojan.VxGame - C:\WINDOWS\system32\svcp.csv
• Trojan.VxGame - C:\WINDOWS\system32\winsub.xml
• Trojan-Abwiz - C:\WINDOWS\system32\sywsvcs.exe
• VX2.Transponder - C:\WINDOWS\Uninstal.exe

Anyways, thank you all for your help