Another dump file...

Cube · 19th September 2007

Windows XP SP2, IE7

Dell D510 notebook.

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [E:\Chesane Dump Files\Mini091607-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
Debug session time: Sun Sep 16 22:30:25.515 2007 (GMT-4)
System Uptime: 0 days 0:02:02.062
Loading Kernel Symbols
........................................................................... ............................................................
Loading User Symbols
Loading unloaded module list
......
Unable to load image windev-53cd-7c81.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for windev-53cd-7c81.sys
*** ERROR: Module load completed but symbols could not be loaded for windev-53cd-7c81.sys
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

Use !analyze -v to get detailed debugging information.

BugCheck 10000050, {e328f000, 0, 80536eff, 1}

Could not read faulting driver name
Probably caused by : windev-53cd-7c81.sys ( windev_53cd_7c81+9b3 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: e328f000, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 80536eff, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000001, (reserved)

Debugging Details:
------------------

Could not read faulting driver name

READ_ADDRESS: e328f000

FAULTING_IP:
nt!wcsncpy+16
80536eff 668b02 mov ax,word ptr [edx]

MM_INTERNAL_CODE: 1

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: System

LOCK_ADDRESS: 80551160 -- (!locks 80551160)
!locks ffffffff80551160

Resource @ nt!PiEngineLock (0x80551160) Available

WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.

WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.

1 total locks

PNP_TRIAGE:
Lock address : 0x80551160
Thread Count : 0
Thread address: 0x00000000
Thread wait : 0x0

LAST_CONTROL_TRANSFER: from a9fce9b3 to 80536eff

STACK_TEXT:
f7a4686c a9fce9b3 f7a46890 e328ee10 000000ff nt!wcsncpy+0x16
WARNING: Stack unwind information not available. Following frames may be wrong.
f7a46a94 8053c808 80000750 00000001 00000000 windev_53cd_7c81+0x9b3
f7a46a94 804fd811 80000750 00000001 00000000 nt!KiFastCallEntry+0xf8
f7a46b24 8057bf73 80000750 00000001 00000000 nt!ZwEnumerateKey+0x11
f7a46bcc 8057d6c7 000000e2 8419f994 00000000 nt!IopGetDeviceInterfaces+0x5bb
f7a46c40 80587b06 8419f994 e2fb1b98 00000000 nt!IopDisableDeviceInterfaces+0xf1
f7a46c58 80588984 00000308 e2fb1b98 00000000 nt!IopSurpriseRemoveLockedDeviceNode+0xb6
f7a46c6c 805889fb 8419f900 00000003 e2fb1b98 nt!IopDeleteLockedDeviceNode+0x24
f7a46ca0 8058e3d2 842dfad8 02fb1b98 00000003 nt!IopDeleteLockedDeviceNodes+0x3f
f7a46d34 8058e92e f7a46d70 806d0778 e2dc4848 nt!PiProcessQueryRemoveAndEject+0x4d2
f7a46d50 8058ea87 f7a46d70 841e64a0 8055a1fc nt!PiProcessTargetDeviceEvent+0x2a
f7a46d74 80533dd0 841e64a0 00000000 8631d260 nt!PiWalkDeviceList+0xfd
f7a46dac 805c4a06 841e64a0 00000000 00000000 nt!ExpWorkerThread+0x100
f7a46ddc 80540fa2 80533cd0 80000001 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

STACK_COMMAND: kb

FOLLOWUP_IP:
windev_53cd_7c81+9b3
a9fce9b3 ?? ???

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: windev_53cd_7c81+9b3

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: windev_53cd_7c81

IMAGE_NAME: windev-53cd-7c81.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 465c267c

FAILURE_BUCKET_ID: 0x50_windev_53cd_7c81+9b3

BUCKET_ID: 0x50_windev_53cd_7c81+9b3

Followup: MachineOwner
---------

eax=f7a44631 ebx=f7a46bd4 ecx=00000007 edx=e328f000 esi=f7a46890 edi=f7a46a80
eip=80536eff esp=f7a46864 ebp=f7a4686c iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
nt!wcsncpy+0x16:
80536eff 668b02 mov ax,word ptr [edx] ds:0023:e328f000=????
ChildEBP RetAddr Args to Child
f7a4686c a9fce9b3 f7a46890 e328ee10 000000ff nt!wcsncpy+0x16 (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
f7a46a94 8053c808 80000750 00000001 00000000 windev_53cd_7c81+0x9b3
f7a46a94 804fd811 80000750 00000001 00000000 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ f7a46ab4)
f7a46b24 8057bf73 80000750 00000001 00000000 nt!ZwEnumerateKey+0x11 (FPO: [6,0,0])
f7a46bcc 8057d6c7 000000e2 8419f994 00000000 nt!IopGetDeviceInterfaces+0x5bb (FPO: [Non-Fpo])
f7a46c40 80587b06 8419f994 e2fb1b98 00000000 nt!IopDisableDeviceInterfaces+0xf1 (FPO: [Non-Fpo])
f7a46c58 80588984 00000308 e2fb1b98 00000000 nt!IopSurpriseRemoveLockedDeviceNode+0xb6 (FPO: [Non-Fpo])
f7a46c6c 805889fb 8419f900 00000003 e2fb1b98 nt!IopDeleteLockedDeviceNode+0x24 (FPO: [Non-Fpo])
f7a46ca0 8058e3d2 842dfad8 02fb1b98 00000003 nt!IopDeleteLockedDeviceNodes+0x3f (FPO: [Non-Fpo])
f7a46d34 8058e92e f7a46d70 806d0778 e2dc4848 nt!PiProcessQueryRemoveAndEject+0x4d2 (FPO: [Non-Fpo])
f7a46d50 8058ea87 f7a46d70 841e64a0 8055a1fc nt!PiProcessTargetDeviceEvent+0x2a (FPO: [Non-Fpo])
f7a46d74 80533dd0 841e64a0 00000000 8631d260 nt!PiWalkDeviceList+0xfd (FPO: [Non-Fpo])
f7a46dac 805c4a06 841e64a0 00000000 00000000 nt!ExpWorkerThread+0x100 (FPO: [Non-Fpo])
f7a46ddc 80540fa2 80533cd0 80000001 00000000 nt!PspSystemThreadStartup+0x34 (FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
804d7000 806cd280 nt ntkrnlpa.exe Tue Mar 01 19:34:37 2005 (42250A1D)
806ce000 806ee380 hal halaacpi.dll Wed Aug 04 01:59:05 2004 (41107B29)
a9618000 a963a080 RDPWD RDPWD.SYS Thu Jun 09 19:52:39 2005 (42A8D647)
a97f3000 a9833280 HTTP HTTP.sys Thu Mar 16 20:33:09 2006 (441A03C5)
a9d64000 a9d8df00 kmixer kmixer.sys Wed Aug 04 02:07:46 2004 (41107D32)
a9db1000 a9dc5400 wdmaud wdmaud.sys Wed Aug 04 02:15:03 2004 (41107EE7)
a9dfe000 a9e0cd80 sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)
a9f06000 a9f12e80 DMusic DMusic.sys Wed Aug 04 02:07:37 2004 (41107D29)
a9fce000 a9ff3880 windev_53cd_7c81 windev-53cd-7c81.sys Tue May 29 09:11:24 2007 (465C267C)
aa044000 aa095400 srv srv.sys Fri Apr 21 02:12:25 2006 (444877C9)
aa0e6000 aa0f3400 swmidi swmidi.sys Fri Aug 17 17:00:42 2001 (3B7D85FA)
aa1d6000 aa202400 mrxdav mrxdav.sys Wed Aug 04 02:00:49 2004 (41107B91)
aa2b7000 aa2b9e40 mdmxsdk mdmxsdk.sys Wed Mar 17 15:04:10 2004 (4058A12A)
aa5b7000 aa5ba280 ndisuio ndisuio.sys Wed Aug 04 02:03:10 2004 (41107C1E)
aa5e3000 aa5e6080 s24trans s24trans.sys Wed Feb 21 14:16:11 2007 (45DC9A7B)
aa6db000 aa6f2480 dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
aa7bb000 aa7dbf00 ipnat ipnat.sys Wed Sep 29 18:28:36 2004 (415B3714)
aa7dc000 aa83e000 eeCtrl eeCtrl.sys Tue Nov 28 17:41:47 2006 (456CBB2B)
aa83e000 aa8aca00 mrxsmb mrxsmb.sys Fri May 05 05:41:42 2006 (445B1DD6)
aa8b5000 aa8b7900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
aa8d5000 aa8ffa00 rdbss rdbss.sys Fri May 05 05:47:55 2006 (445B1F4B)
aa900000 aa921d00 afd afd.sys Wed Aug 04 02:14:13 2004 (41107EB5)
aa922000 aa949c00 netbt netbt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
aa94a000 aa989ce0 SYMTDI SYMTDI.SYS Tue Apr 05 14:10:52 2005 (4252D4AC)
aa98a000 aa9e1d80 tcpip tcpip.sys Thu Apr 20 07:51:47 2006 (444775D3)
aa9e2000 aa9f4400 ipsec ipsec.sys Wed Aug 04 02:14:27 2004 (41107EC3)
aa9f5000 aaa37f80 bthport bthport.sys Wed Aug 04 02:10:34 2004 (41107DDA)
aaa58000 aaa69f20 naveng naveng.sys Thu Dec 21 19:05:25 2006 (458B2145)
aaa6a000 aab38600 navex15 navex15.sys Thu Dec 21 19:42:48 2006 (458B2A08)
aab39000 aab4d000 Savrtpel Savrtpel.sys Fri Feb 04 23:03:26 2005 (4204458E)
aab4d000 aab69ac0 SYMEVENT SYMEVENT.SYS Mon Mar 21 23:19:36 2005 (423F8EC8)
aab6a000 aabbf000 savrt savrt.sys Fri Feb 04 23:03:24 2005 (4204458C)
bf800000 bf9c1180 win32k win32k.sys Wed Oct 05 20:05:44 2005 (43446A58)
bf9c2000 bf9d3580 dxg dxg.sys Wed Aug 04 02:00:51 2004 (41107B93)
bf9d4000 bf9e2000 ialmrnt5 ialmrnt5.dll Tue Sep 20 13:52:37 2005 (43304C65)
bf9e2000 bfa04000 ialmdnt5 ialmdnt5.dll Tue Sep 20 13:52:31 2005 (43304C5F)
bfa04000 bfa380a0 ialmdev5 ialmdev5.DLL Tue Sep 20 13:52:20 2005 (43304C54)
bfa39000 bfb1b000 ialmdd5 ialmdd5.DLL Tue Sep 20 13:59:53 2005 (43304E19)
f6a86000 f6a89240 OMCI OMCI.SYS Wed Aug 22 12:42:57 2001 (3B83E111)
f6a96000 f6a98280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
f6a9a000 f6acd200 update update.sys Wed Aug 04 01:58:32 2004 (41107B08)
f6ace000 f6afe100 rdpdr rdpdr.sys Wed Aug 04 02:01:10 2004 (41107BA6)
f6b7b000 f6b8be00 psched psched.sys Wed Aug 04 02:04:16 2004 (41107C60)
f6bfc000 f6c0b900 Cdfs Cdfs.SYS Wed Aug 04 02:14:09 2004 (41107EB1)
f6c0c000 f6c14a80 bthprint bthprint.sys Wed Aug 04 02:10:36 2004 (41107DDC)
f6c2c000 f6c42680 ndiswan ndiswan.sys Wed Aug 04 02:14:30 2004 (41107EC6)
f6c43000 f6c56900 parport parport.sys Wed Aug 04 01:59:04 2004 (41107B28)
f6c57000 f6cfe400 HSF_CNXT HSF_CNXT.sys Thu Jun 17 18:55:36 2004 (40D22168)
f6cff000 f6dfd480 HSF_DP HSF_DP.sys Thu Jun 17 18:55:00 2004 (40D22144)
f6dfe000 f6e2ed80 HSFHWICH HSFHWICH.sys Thu Jun 17 18:57:01 2004 (40D221BD)
f6e2f000 f6e51680 ks ks.sys Wed Aug 04 02:15:20 2004 (41107EF8)
f6e52000 f6e75980 portcls portcls.sys Wed Aug 04 02:15:47 2004 (41107F13)
f6e76000 f6eb8a00 STAC97 STAC97.sys Thu Mar 10 17:56:01 2005 (4230D081)
f6eb9000 f70d4680 w29n51 w29n51.sys Thu Feb 08 16:51:14 2007 (45CB9B52)
f70d5000 f70f7e80 USBPORT USBPORT.SYS Wed Aug 04 02:08:34 2004 (41107D62)
f70f8000 f710b780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)
f710c000 f7249ec0 ialmnt5 ialmnt5.sys Tue Sep 20 14:00:52 2005 (43304E54)
f72d5000 f72ef580 Mup Mup.sys Wed Aug 04 02:15:20 2004 (41107EF8)
f72f0000 f731ca80 NDIS NDIS.sys Wed Aug 04 02:14:27 2004 (41107EC3)
f731d000 f73a9480 Ntfs Ntfs.sys Wed Aug 04 02:15:06 2004 (41107EEA)
f73aa000 f73c0780 KSecDD KSecDD.sys Wed Aug 04 01:59:45 2004 (41107B51)
f73c1000 f73d2f00 sr sr.sys Wed Aug 04 02:06:22 2004 (41107CDE)
f73d3000 f73f1780 fltMgr fltMgr.sys Wed Aug 04 02:01:17 2004 (41107BAD)
f73f2000 f7409480 atapi atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
f740a000 f7428880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
f7429000 f7446480 pcmcia pcmcia.sys Wed Aug 04 02:07:45 2004 (41107D31)
f7447000 f7457a80 pci pci.sys Wed Aug 04 02:07:45 2004 (41107D31)
f7458000 f7485d80 ACPI ACPI.sys Wed Aug 04 02:07:35 2004 (41107D27)
f7587000 f758fc00 isapnp isapnp.sys Fri Aug 17 16:58:01 2001 (3B7D8559)
f7597000 f75a5e80 ohci1394 ohci1394.sys Wed Aug 04 02:10:05 2004 (41107DBD)
f75a7000 f75b4000 1394BUS 1394BUS.SYS Wed Aug 04 02:10:03 2004 (41107DBB)
f75b7000 f75c1500 MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
f75c7000 f75d3c80 VolSnap VolSnap.sys Wed Aug 04 02:00:14 2004 (41107B6E)
f75d7000 f75dfe00 disk disk.sys Wed Aug 04 01:59:53 2004 (41107B59)
f75e7000 f75f3200 CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
f7607000 f7615100 usbhub usbhub.sys Wed Aug 04 02:08:40 2004 (41107D68)
f7647000 f764f700 netbios netbios.sys Wed Aug 04 02:03:19 2004 (41107C27)
f7667000 f766f880 Fips Fips.SYS Fri Aug 17 21:31:49 2001 (3B7DC585)
f7677000 f767f700 wanarp wanarp.sys Wed Aug 04 02:04:57 2004 (41107C89)
f7687000 f7695d80 arp1394 arp1394.sys Wed Aug 04 01:58:28 2004 (41107B04)
f76d7000 f76dfd00 intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)
f76f7000 f7701f80 bcm4sbxp bcm4sbxp.sys Wed May 26 18:18:17 2004 (40B517A9)
f7707000 f7716180 nic1394 nic1394.sys Wed Aug 04 01:58:28 2004 (41107B04)
f7717000 f7725b80 drmk drmk.sys Wed Aug 04 02:07:54 2004 (41107D3A)
f7727000 f7733e00 i8042prt i8042prt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
f7737000 f7746d80 serial serial.sys Wed Aug 04 02:15:51 2004 (41107F17)
f7747000 f7751380 imapi imapi.sys Wed Aug 04 02:00:12 2004 (41107B6C)
f7757000 f7763180 cdrom cdrom.sys Wed Aug 04 01:59:52 2004 (41107B58)
f7767000 f7775080 redbook redbook.sys Wed Aug 04 01:59:34 2004 (41107B46)
f7777000 f7783880 rasl2tp rasl2tp.sys Wed Aug 04 02:14:21 2004 (41107EBD)
f7787000 f7791200 raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
f7797000 f77a2d00 raspptp raspptp.sys Wed Aug 04 02:14:26 2004 (41107EC2)
f77a7000 f77af900 msgpc msgpc.sys Wed Aug 04 02:04:11 2004 (41107C5B)
f77c7000 f77d0f00 termdd termdd.sys Wed Aug 04 01:58:52 2004 (41107B1C)
f77e7000 f77f0480 NDProxy NDProxy.SYS Fri Aug 17 16:55:30 2001 (3B7D84C2)
f7807000 f780d200 PCIIDEX PCIIDEX.SYS Wed Aug 04 01:59:40 2004 (41107B4C)
f780f000 f7813900 PartMgr PartMgr.sys Fri Aug 17 21:32:23 2001 (3B7DC5A7)
f786f000 f7874000 usbuhci usbuhci.sys Wed Aug 04 02:08:34 2004 (41107D62)
f7877000 f787d800 usbehci usbehci.sys Wed Aug 04 02:08:34 2004 (41107D62)
f787f000 f7886580 Modem Modem.SYS Wed Aug 04 02:08:04 2004 (41107D44)
f7887000 f788ca00 mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f788f000 f7895000 kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f7897000 f789b880 TDI TDI.SYS Wed Aug 04 02:07:47 2004 (41107D33)
f789f000 f78a3580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
f78a7000 f78ab080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
f78cf000 f78d4200 vga vga.sys Wed Aug 04 02:07:06 2004 (41107D0A)
f78d7000 f78dba00 BTHUSB BTHUSB.sys Wed Aug 04 02:10:33 2004 (41107DD9)
f78e7000 f78eba80 Msfs Msfs.SYS Wed Aug 04 02:00:37 2004 (41107B85)
f78ef000 f78f6880 Npfs Npfs.SYS Wed Aug 04 02:00:38 2004 (41107B86)
f790f000 f7913280 BthEnum BthEnum.sys Wed Aug 04 02:10:38 2004 (41107DDE)
f7917000 f791c500 TDTCP TDTCP.SYS Wed Aug 04 01:58:52 2004 (41107B1C)
f792f000 f7933500 watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)
f7987000 f798bba0 AegisP AegisP.sys Thu Sep 28 11:44:52 2006 (451BEDF4)
f7997000 f799a000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
f799b000 f799d480 compbatt compbatt.sys Fri Aug 17 16:57:58 2001 (3B7D8556)
f799f000 f79a2700 BATTC BATTC.SYS Fri Aug 17 16:57:52 2001 (3B7D8550)
f7a47000 f7a4a700 CmBatt CmBatt.sys Wed Aug 04 02:07:39 2004 (41107D2B)
f7a4f000 f7a52c80 serenum serenum.sys Wed Aug 04 01:59:06 2004 (41107B2A)
f7a57000 f7a59580 ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
f7a77000 f7a7ac80 mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
f7a87000 f7a88b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
f7a89000 f7a8a100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f7a8b000 f7a8c580 intelide intelide.sys Wed Aug 04 01:59:40 2004 (41107B4C)
f7a95000 f7a96a80 ParVdm ParVdm.SYS Fri Aug 17 16:49:49 2001 (3B7D836D)
f7ab3000 f7ab4100 swenum swenum.sys Wed Aug 04 01:58:41 2004 (41107B11)
f7ab9000 f7aba280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
f7abd000 f7abef00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
f7abf000 f7ac0080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
f7acd000 f7ace080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
f7acf000 f7ad0080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
f7b0d000 f7b0e100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f7b4f000 f7b4fd00 pciide pciide.sys Fri Aug 17 16:51:49 2001 (3B7D83E5)
f7bff000 f7bffc00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
f7c34000 f7c34d00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
f7c51000 f7c51b80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
f7cbe000 f7cbeb80 drmkaud drmkaud.sys Wed Aug 04 02:07:56 2004 (41107D3C)

Unloaded modules:
a9d8e000 a9db1000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7b2d000 f7b2f000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f78bf000 f78c4000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7a2f000 f7a32000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f78b7000 f78bc000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f78af000 f78b6000 Fdc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

Cube · 19th September 2007

Another dump two days earlier...

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [E:\Chesane Dump Files\Mini091307-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
Debug session time: Thu Sep 13 16:54:20.921 2007 (GMT-4)
System Uptime: 0 days 0:00:57.484
Loading Kernel Symbols
........................................................................... ..........................................................
Loading User Symbols
Loading unloaded module list
....
Unable to load image windev-53cd-7c81.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for windev-53cd-7c81.sys
*** ERROR: Module load completed but symbols could not be loaded for windev-53cd-7c81.sys
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

Use !analyze -v to get detailed debugging information.

BugCheck 10000050, {e2d03000, 0, 80536eff, 1}

Could not read faulting driver name
Probably caused by : windev-53cd-7c81.sys ( windev_53cd_7c81+9b3 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: e2d03000, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 80536eff, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000001, (reserved)

Debugging Details:
------------------

Could not read faulting driver name

READ_ADDRESS: e2d03000

FAULTING_IP:
nt!wcsncpy+16
80536eff 668b02 mov ax,word ptr [edx]

MM_INTERNAL_CODE: 1

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: winlogon.exe

LAST_CONTROL_TRANSFER: from aa3f79b3 to 80536eff

STACK_TEXT:
aa2be758 aa3f79b3 aa2be77c e2d02e10 000000ff nt!wcsncpy+0x16
WARNING: Stack unwind information not available. Following frames may be wrong.
aa2be980 8053c808 80000f88 00000000 00000000 windev_53cd_7c81+0x9b3
aa2be980 804fd811 80000f88 00000000 00000000 nt!KiFastCallEntry+0xf8
aa2bea10 8057bf73 80000f88 00000000 00000000 nt!ZwEnumerateKey+0x11
aa2beab8 8057c09d 00000086 00000000 00000000 nt!IopGetDeviceInterfaces+0x5bb
aa2bead8 aa115844 aa124a60 00000000 00000000 nt!IoGetDeviceInterfaces+0x39
aa2beb04 aa117c9a aa2beb54 aa2beb88 00000001 wdmaud!OpenSysAudio+0x20
aa2bebc0 aa118447 8418e000 00000001 e2a29e08 wdmaud!InitializeGetNumDevs+0x13e
aa2bebe4 aa118387 8418e000 e2bcdab0 00000001 wdmaud!ProcessDevNodeListItem+0x38
aa2bec0c aa116bfa 8418e000 86581c38 00000001 wdmaud!AddDevNode+0x10c
aa2bec34 804eddf9 00000000 8418e000 806d02d0 wdmaud!SoundDispatch+0x142
aa2bec44 80573b3a 862d709c 842e0178 862d7008 nt!IopfCallDriver+0x31
aa2bec58 805749c9 86581660 862d7008 842e0178 nt!IopSynchronousServiceTail+0x60
aa2bed00 8056d326 00000728 00000740 00000000 nt!IopXxxControlFile+0x5e7
aa2bed34 8053c808 00000728 00000740 00000000 nt!NtDeviceIoControlFile+0x2a
aa2bed34 7c90eb94 00000728 00000740 00000000 nt!KiFastCallEntry+0xf8
0137fdb4 00000000 00000000 00000000 00000000 0x7c90eb94

STACK_COMMAND: kb

FOLLOWUP_IP:
windev_53cd_7c81+9b3
aa3f79b3 ?? ???

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: windev_53cd_7c81+9b3

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: windev_53cd_7c81

IMAGE_NAME: windev-53cd-7c81.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 465c267c

FAILURE_BUCKET_ID: 0x50_windev_53cd_7c81+9b3

BUCKET_ID: 0x50_windev_53cd_7c81+9b3

Followup: MachineOwner
---------

eax=aa2b1714 ebx=aa2beac0 ecx=00000007 edx=e2d03000 esi=aa2be77c edi=aa2be96c
eip=80536eff esp=aa2be750 ebp=aa2be758 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
nt!wcsncpy+0x16:
80536eff 668b02 mov ax,word ptr [edx] ds:0023:e2d03000=????
ChildEBP RetAddr Args to Child
aa2be758 aa3f79b3 aa2be77c e2d02e10 000000ff nt!wcsncpy+0x16 (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
aa2be980 8053c808 80000f88 00000000 00000000 windev_53cd_7c81+0x9b3
aa2be980 804fd811 80000f88 00000000 00000000 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ aa2be9a0)
aa2bea10 8057bf73 80000f88 00000000 00000000 nt!ZwEnumerateKey+0x11 (FPO: [6,0,0])
aa2beab8 8057c09d 00000086 00000000 00000000 nt!IopGetDeviceInterfaces+0x5bb (FPO: [Non-Fpo])
aa2bead8 aa115844 aa124a60 00000000 00000000 nt!IoGetDeviceInterfaces+0x39 (FPO: [Non-Fpo])
aa2beb04 aa117c9a aa2beb54 aa2beb88 00000001 wdmaud!OpenSysAudio+0x20 (FPO: [Non-Fpo])
aa2bebc0 aa118447 8418e000 00000001 e2a29e08 wdmaud!InitializeGetNumDevs+0x13e (FPO: [Non-Fpo])
aa2bebe4 aa118387 8418e000 e2bcdab0 00000001 wdmaud!ProcessDevNodeListItem+0x38 (FPO: [Non-Fpo])
aa2bec0c aa116bfa 8418e000 86581c38 00000001 wdmaud!AddDevNode+0x10c (FPO: [Non-Fpo])
aa2bec34 804eddf9 00000000 8418e000 806d02d0 wdmaud!SoundDispatch+0x142 (FPO: [Non-Fpo])
aa2bec44 80573b3a 862d709c 842e0178 862d7008 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
aa2bec58 805749c9 86581660 862d7008 842e0178 nt!IopSynchronousServiceTail+0x60 (FPO: [Non-Fpo])
aa2bed00 8056d326 00000728 00000740 00000000 nt!IopXxxControlFile+0x5e7 (FPO: [Non-Fpo])
aa2bed34 8053c808 00000728 00000740 00000000 nt!NtDeviceIoControlFile+0x2a (FPO: [Non-Fpo])
aa2bed34 7c90eb94 00000728 00000740 00000000 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ aa2bed64)
0137fdb4 00000000 00000000 00000000 00000000 0x7c90eb94
start end module name
804d7000 806cd280 nt ntkrnlpa.exe Tue Mar 01 19:34:37 2005 (42250A1D)
806ce000 806ee380 hal halaacpi.dll Wed Aug 04 01:59:05 2004 (41107B29)
aa0c5000 aa0eef00 kmixer kmixer.sys Wed Aug 04 02:07:46 2004 (41107D32)
aa0ef000 aa111c80 aec aec.sys Fri Oct 01 13:00:21 2004 (415D8D25)
aa112000 aa126400 wdmaud wdmaud.sys Wed Aug 04 02:15:03 2004 (41107EE7)
aa1ef000 aa1fc400 swmidi swmidi.sys Fri Aug 17 17:00:42 2001 (3B7D85FA)
aa23f000 aa24dd80 sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)
aa387000 aa393e80 DMusic DMusic.sys Wed Aug 04 02:07:37 2004 (41107D29)
aa3f7000 aa41c880 windev_53cd_7c81 windev-53cd-7c81.sys Tue May 29 09:11:24 2007 (465C267C)
aa41d000 aa46e400 srv srv.sys Fri Apr 21 02:12:25 2006 (444877C9)
aa5af000 aa5db400 mrxdav mrxdav.sys Wed Aug 04 02:00:49 2004 (41107B91)
aa690000 aa692e40 mdmxsdk mdmxsdk.sys Wed Mar 17 15:04:10 2004 (4058A12A)
aa990000 aa993280 ndisuio ndisuio.sys Wed Aug 04 02:03:10 2004 (41107C1E)
aaa78000 aaa7b080 s24trans s24trans.sys Wed Feb 21 14:16:11 2007 (45DC9A7B)
aaadc000 aaaf3480 dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
aabbc000 aac1e000 eeCtrl eeCtrl.sys Tue Nov 28 17:41:47 2006 (456CBB2B)
aac1e000 aac8ca00 mrxsmb mrxsmb.sys Fri May 05 05:41:42 2006 (445B1DD6)
aac8d000 aacb7a00 rdbss rdbss.sys Fri May 05 05:47:55 2006 (445B1F4B)
aacb8000 aacd9d00 afd afd.sys Wed Aug 04 02:14:13 2004 (41107EB5)
aacda000 aad01c00 netbt netbt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
aad02000 aad22f00 ipnat ipnat.sys Wed Sep 29 18:28:36 2004 (415B3714)
aad23000 aad62ce0 SYMTDI SYMTDI.SYS Tue Apr 05 14:10:52 2005 (4252D4AC)
aad63000 aadbad80 tcpip tcpip.sys Thu Apr 20 07:51:47 2006 (444775D3)
aadbb000 aadcd400 ipsec ipsec.sys Wed Aug 04 02:14:27 2004 (41107EC3)
aadee000 aae30f80 bthport bthport.sys Wed Aug 04 02:10:34 2004 (41107DDA)
aae59000 aae6af20 naveng naveng.sys Thu Dec 21 19:05:25 2006 (458B2145)
aae6b000 aaf39600 navex15 navex15.sys Thu Dec 21 19:42:48 2006 (458B2A08)
aaf3a000 aaf4e000 Savrtpel Savrtpel.sys Fri Feb 04 23:03:26 2005 (4204458E)
aaf4e000 aaf6aac0 SYMEVENT SYMEVENT.SYS Mon Mar 21 23:19:36 2005 (423F8EC8)
aaf6b000 aafc0000 savrt savrt.sys Fri Feb 04 23:03:24 2005 (4204458C)
bf800000 bf9c1180 win32k win32k.sys Wed Oct 05 20:05:44 2005 (43446A58)
bf9c2000 bf9d3580 dxg dxg.sys Wed Aug 04 02:00:51 2004 (41107B93)
bf9d4000 bf9e2000 ialmrnt5 ialmrnt5.dll Tue Sep 20 13:52:37 2005 (43304C65)
bf9e2000 bfa04000 ialmdnt5 ialmdnt5.dll Tue Sep 20 13:52:31 2005 (43304C5F)
bfa04000 bfa380a0 ialmdev5 ialmdev5.DLL Tue Sep 20 13:52:20 2005 (43304C54)
bfa39000 bfb1b000 ialmdd5 ialmdd5.DLL Tue Sep 20 13:59:53 2005 (43304E19)
f604a000 f604d240 OMCI OMCI.SYS Wed Aug 22 12:42:57 2001 (3B83E111)
f605a000 f605c900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
f605e000 f6091200 update update.sys Wed Aug 04 01:58:32 2004 (41107B08)
f6092000 f60c2100 rdpdr rdpdr.sys Wed Aug 04 02:01:10 2004 (41107BA6)
f6497000 f6499280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
f64ab000 f64bbe00 psched psched.sys Wed Aug 04 02:04:16 2004 (41107C60)
f650c000 f651b900 Cdfs Cdfs.SYS Wed Aug 04 02:14:09 2004 (41107EB1)
f655c000 f6572680 ndiswan ndiswan.sys Wed Aug 04 02:14:30 2004 (41107EC6)
f6573000 f6586900 parport parport.sys Wed Aug 04 01:59:04 2004 (41107B28)
f6587000 f662e400 HSF_CNXT HSF_CNXT.sys Thu Jun 17 18:55:36 2004 (40D22168)
f666f000 f676d480 HSF_DP HSF_DP.sys Thu Jun 17 18:55:00 2004 (40D22144)
f676e000 f679ed80 HSFHWICH HSFHWICH.sys Thu Jun 17 18:57:01 2004 (40D221BD)
f679f000 f67c1680 ks ks.sys Wed Aug 04 02:15:20 2004 (41107EF8)
f67c2000 f67e5980 portcls portcls.sys Wed Aug 04 02:15:47 2004 (41107F13)
f67e6000 f6828a00 STAC97 STAC97.sys Thu Mar 10 17:56:01 2005 (4230D081)
f6829000 f6a44680 w29n51 w29n51.sys Thu Feb 08 16:51:14 2007 (45CB9B52)
f70d5000 f70f7e80 USBPORT USBPORT.SYS Wed Aug 04 02:08:34 2004 (41107D62)
f70f8000 f710b780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)
f710c000 f7249ec0 ialmnt5 ialmnt5.sys Tue Sep 20 14:00:52 2005 (43304E54)
f72d5000 f72ef580 Mup Mup.sys Wed Aug 04 02:15:20 2004 (41107EF8)
f72f0000 f731ca80 NDIS NDIS.sys Wed Aug 04 02:14:27 2004 (41107EC3)
f731d000 f73a9480 Ntfs Ntfs.sys Wed Aug 04 02:15:06 2004 (41107EEA)
f73aa000 f73c0780 KSecDD KSecDD.sys Wed Aug 04 01:59:45 2004 (41107B51)
f73c1000 f73d2f00 sr sr.sys Wed Aug 04 02:06:22 2004 (41107CDE)
f73d3000 f73f1780 fltMgr fltMgr.sys Wed Aug 04 02:01:17 2004 (41107BAD)
f73f2000 f7409480 atapi atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
f740a000 f7428880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
f7429000 f7446480 pcmcia pcmcia.sys Wed Aug 04 02:07:45 2004 (41107D31)
f7447000 f7457a80 pci pci.sys Wed Aug 04 02:07:45 2004 (41107D31)
f7458000 f7485d80 ACPI ACPI.sys Wed Aug 04 02:07:35 2004 (41107D27)
f7587000 f758fc00 isapnp isapnp.sys Fri Aug 17 16:58:01 2001 (3B7D8559)
f7597000 f75a5e80 ohci1394 ohci1394.sys Wed Aug 04 02:10:05 2004 (41107DBD)
f75a7000 f75b4000 1394BUS 1394BUS.SYS Wed Aug 04 02:10:03 2004 (41107DBB)
f75b7000 f75c1500 MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
f75c7000 f75d3c80 VolSnap VolSnap.sys Wed Aug 04 02:00:14 2004 (41107B6E)
f75d7000 f75dfe00 disk disk.sys Wed Aug 04 01:59:53 2004 (41107B59)
f75e7000 f75f3200 CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
f7607000 f7610f00 termdd termdd.sys Wed Aug 04 01:58:52 2004 (41107B1C)
f7617000 f7620480 NDProxy NDProxy.SYS Fri Aug 17 16:55:30 2001 (3B7D84C2)
f7637000 f7645100 usbhub usbhub.sys Wed Aug 04 02:08:40 2004 (41107D68)
f7667000 f766f700 wanarp wanarp.sys Wed Aug 04 02:04:57 2004 (41107C89)
f7677000 f7685d80 arp1394 arp1394.sys Wed Aug 04 01:58:28 2004 (41107B04)
f7687000 f768f700 netbios netbios.sys Wed Aug 04 02:03:19 2004 (41107C27)
f76a7000 f76af880 Fips Fips.SYS Fri Aug 17 21:31:49 2001 (3B7DC585)
f76f7000 f76ffd00 intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)
f7717000 f7721f80 bcm4sbxp bcm4sbxp.sys Wed May 26 18:18:17 2004 (40B517A9)
f7737000 f7746180 nic1394 nic1394.sys Wed Aug 04 01:58:28 2004 (41107B04)
f7757000 f7765b80 drmk drmk.sys Wed Aug 04 02:07:54 2004 (41107D3A)
f7767000 f7773e00 i8042prt i8042prt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
f7777000 f7786d80 serial serial.sys Wed Aug 04 02:15:51 2004 (41107F17)
f7787000 f7791380 imapi imapi.sys Wed Aug 04 02:00:12 2004 (41107B6C)
f7797000 f77a3180 cdrom cdrom.sys Wed Aug 04 01:59:52 2004 (41107B58)
f77a7000 f77b5080 redbook redbook.sys Wed Aug 04 01:59:34 2004 (41107B46)
f77b7000 f77c3880 rasl2tp rasl2tp.sys Wed Aug 04 02:14:21 2004 (41107EBD)
f77c7000 f77d1200 raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
f77d7000 f77e2d00 raspptp raspptp.sys Wed Aug 04 02:14:26 2004 (41107EC2)
f77e7000 f77ef900 msgpc msgpc.sys Wed Aug 04 02:04:11 2004 (41107C5B)
f7807000 f780d200 PCIIDEX PCIIDEX.SYS Wed Aug 04 01:59:40 2004 (41107B4C)
f780f000 f7813900 PartMgr PartMgr.sys Fri Aug 17 21:32:23 2001 (3B7DC5A7)
f7857000 f785c000 usbuhci usbuhci.sys Wed Aug 04 02:08:34 2004 (41107D62)
f785f000 f7865800 usbehci usbehci.sys Wed Aug 04 02:08:34 2004 (41107D62)
f786f000 f7873ba0 AegisP AegisP.sys Thu Sep 28 11:44:52 2006 (451BEDF4)
f7877000 f787e580 Modem Modem.SYS Wed Aug 04 02:08:04 2004 (41107D44)
f787f000 f7884a00 mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f7887000 f788d000 kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f788f000 f7893880 TDI TDI.SYS Wed Aug 04 02:07:47 2004 (41107D33)
f7897000 f789b580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
f789f000 f78a3080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
f78c7000 f78cba00 BTHUSB BTHUSB.sys Wed Aug 04 02:10:33 2004 (41107DD9)
f78cf000 f78d4200 vga vga.sys Wed Aug 04 02:07:06 2004 (41107D0A)
f78d7000 f78dba80 Msfs Msfs.SYS Wed Aug 04 02:00:37 2004 (41107B85)
f78df000 f78e6880 Npfs Npfs.SYS Wed Aug 04 02:00:38 2004 (41107B86)
f7917000 f791b280 BthEnum BthEnum.sys Wed Aug 04 02:10:38 2004 (41107DDE)
f796f000 f7973500 watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)
f7997000 f799a000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
f799b000 f799d480 compbatt compbatt.sys Fri Aug 17 16:57:58 2001 (3B7D8556)
f799f000 f79a2700 BATTC BATTC.SYS Fri Aug 17 16:57:52 2001 (3B7D8550)
f7a3f000 f7a42700 CmBatt CmBatt.sys Wed Aug 04 02:07:39 2004 (41107D2B)
f7a4f000 f7a52c80 serenum serenum.sys Wed Aug 04 01:59:06 2004 (41107B2A)
f7a57000 f7a59580 ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
f7a7b000 f7a7ec80 mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
f7a87000 f7a88b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
f7a89000 f7a8a100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f7a8b000 f7a8c580 intelide intelide.sys Wed Aug 04 01:59:40 2004 (41107B4C)
f7ab5000 f7ab6100 swenum swenum.sys Wed Aug 04 01:58:41 2004 (41107B11)
f7abb000 f7abc280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
f7abf000 f7ac0f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
f7ac3000 f7ac4080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
f7ac5000 f7ac6a80 ParVdm ParVdm.SYS Fri Aug 17 16:49:49 2001 (3B7D836D)
f7ad9000 f7ada080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
f7add000 f7ade080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
f7aed000 f7aee900 splitter splitter.sys Wed Aug 04 02:07:46 2004 (41107D32)
f7b23000 f7b24100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f7b4f000 f7b4fd00 pciide pciide.sys Fri Aug 17 16:51:49 2001 (3B7D83E5)
f7c12000 f7c12b80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
f7c4b000 f7c4bb80 drmkaud drmkaud.sys Wed Aug 04 02:07:56 2004 (41107D3C)
f7c9b000 f7c9bd00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
f7cc4000 f7cc4c00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)

Unloaded modules:
f78b7000 f78bc000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7a27000 f7a2a000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f78af000 f78b4000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f78a7000 f78ae000 Fdc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

Cube · 19th September 2007

Another one...

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [E:\Chesane Dump Files\Mini091307-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
Debug session time: Thu Sep 13 12:19:09.011 2007 (GMT-4)
System Uptime: 0 days 18:02:37.493
Loading Kernel Symbols
........................................................................... ................................................................
Loading User Symbols
Loading unloaded module list
...................
Unable to load image windev-53cd-7c81.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for windev-53cd-7c81.sys
*** ERROR: Module load completed but symbols could not be loaded for windev-53cd-7c81.sys
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

Use !analyze -v to get detailed debugging information.

BugCheck 10000050, {e3fe8000, 0, 80536eff, 1}

Could not read faulting driver name
Probably caused by : windev-53cd-7c81.sys ( windev_53cd_7c81+9b3 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: e3fe8000, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 80536eff, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000001, (reserved)

Debugging Details:
------------------

Could not read faulting driver name

READ_ADDRESS: e3fe8000

FAULTING_IP:
nt!wcsncpy+16
80536eff 668b02 mov ax,word ptr [edx]

MM_INTERNAL_CODE: 1

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: iexplore.exe

LAST_CONTROL_TRANSFER: from aa4719b3 to 80536eff

STACK_TEXT:
a97e07cc aa4719b3 a97e07f0 e3fe7e10 000000ff nt!wcsncpy+0x16
WARNING: Stack unwind information not available. Following frames may be wrong.
a97e09f4 8053c808 800008e0 00000000 00000000 windev_53cd_7c81+0x9b3
a97e09f4 804fd811 800008e0 00000000 00000000 nt!KiFastCallEntry+0xf8
a97e0a84 8057bf73 800008e0 00000000 00000000 nt!ZwEnumerateKey+0x11
a97e0b2c 8057c09d 00000086 00000000 00000000 nt!IopGetDeviceInterfaces+0x5bb
a97e0b4c aa07a844 aa089a60 00000000 00000000 nt!IoGetDeviceInterfaces+0x39
a97e0b78 aa07b3e6 a97e0b98 a97e0b9c 840b1340 wdmaud!OpenSysAudio+0x20
a97e0ba4 aa07b882 00000000 00000007 00000001 wdmaud!OpenSysAudioPin+0x23
a97e0be0 aa07ab01 00000092 00000007 84169120 wdmaud!OpenWavePin+0x3e2
a97e0c0c aa07a3a4 840b9b88 84169120 00000000 wdmaud!Dispatch_OpenPin+0xb7
a97e0c34 804eddf9 00000010 83e57000 806d02d0 wdmaud!SoundDispatch+0x430
a97e0c44 80573b3a 840b9c1c 8631c8a0 840b9b88 nt!IopfCallDriver+0x31
a97e0c58 805749c9 84272f10 840b9b88 8631c8a0 nt!IopSynchronousServiceTail+0x60
a97e0d00 8056d326 00000720 000009b4 00000000 nt!IopXxxControlFile+0x5e7
a97e0d34 8053c808 00000720 000009b4 00000000 nt!NtDeviceIoControlFile+0x2a
a97e0d34 7c90eb94 00000720 000009b4 00000000 nt!KiFastCallEntry+0xf8
064efbbc 00000000 00000000 00000000 00000000 0x7c90eb94

STACK_COMMAND: kb

FOLLOWUP_IP:
windev_53cd_7c81+9b3
aa4719b3 ?? ???

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: windev_53cd_7c81+9b3

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: windev_53cd_7c81

IMAGE_NAME: windev-53cd-7c81.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 465c267c

FAILURE_BUCKET_ID: 0x50_windev_53cd_7c81+9b3

BUCKET_ID: 0x50_windev_53cd_7c81+9b3

Followup: MachineOwner
---------

eax=a97e00ff ebx=a97e0b34 ecx=00000007 edx=e3fe8000 esi=a97e07f0 edi=a97e09e0
eip=80536eff esp=a97e07c4 ebp=a97e07cc iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
nt!wcsncpy+0x16:
80536eff 668b02 mov ax,word ptr [edx] ds:0023:e3fe8000=????
ChildEBP RetAddr Args to Child
a97e07cc aa4719b3 a97e07f0 e3fe7e10 000000ff nt!wcsncpy+0x16 (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
a97e09f4 8053c808 800008e0 00000000 00000000 windev_53cd_7c81+0x9b3
a97e09f4 804fd811 800008e0 00000000 00000000 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ a97e0a14)
a97e0a84 8057bf73 800008e0 00000000 00000000 nt!ZwEnumerateKey+0x11 (FPO: [6,0,0])
a97e0b2c 8057c09d 00000086 00000000 00000000 nt!IopGetDeviceInterfaces+0x5bb (FPO: [Non-Fpo])
a97e0b4c aa07a844 aa089a60 00000000 00000000 nt!IoGetDeviceInterfaces+0x39 (FPO: [Non-Fpo])
a97e0b78 aa07b3e6 a97e0b98 a97e0b9c 840b1340 wdmaud!OpenSysAudio+0x20 (FPO: [Non-Fpo])
a97e0ba4 aa07b882 00000000 00000007 00000001 wdmaud!OpenSysAudioPin+0x23 (FPO: [Non-Fpo])
a97e0be0 aa07ab01 00000092 00000007 84169120 wdmaud!OpenWavePin+0x3e2 (FPO: [Non-Fpo])
a97e0c0c aa07a3a4 840b9b88 84169120 00000000 wdmaud!Dispatch_OpenPin+0xb7 (FPO: [Non-Fpo])
a97e0c34 804eddf9 00000010 83e57000 806d02d0 wdmaud!SoundDispatch+0x430 (FPO: [Non-Fpo])
a97e0c44 80573b3a 840b9c1c 8631c8a0 840b9b88 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
a97e0c58 805749c9 84272f10 840b9b88 8631c8a0 nt!IopSynchronousServiceTail+0x60 (FPO: [Non-Fpo])
a97e0d00 8056d326 00000720 000009b4 00000000 nt!IopXxxControlFile+0x5e7 (FPO: [Non-Fpo])
a97e0d34 8053c808 00000720 000009b4 00000000 nt!NtDeviceIoControlFile+0x2a (FPO: [Non-Fpo])
a97e0d34 7c90eb94 00000720 000009b4 00000000 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ a97e0d64)
064efbbc 00000000 00000000 00000000 00000000 0x7c90eb94
start end module name
804d7000 806cd280 nt ntkrnlpa.exe Tue Mar 01 19:34:37 2005 (42250A1D)
806ce000 806ee380 hal halaacpi.dll Wed Aug 04 01:59:05 2004 (41107B29)
a916c000 a9195f00 kmixer kmixer.sys Wed Aug 04 02:07:46 2004 (41107D32)
a950c000 a953ea00 Dot4 Dot4.sys Wed Aug 04 01:58:28 2004 (41107B04)
a95b7000 a95c5900 rfcomm rfcomm.sys Wed Aug 04 02:10:38 2004 (41107DDE)
a97b5000 a97b7580 hidusb hidusb.sys Fri Aug 17 17:02:16 2001 (3B7D8658)
a9d11000 a9d51280 HTTP HTTP.sys Thu Mar 16 20:33:09 2006 (441A03C5)
aa077000 aa08b400 wdmaud wdmaud.sys Wed Aug 04 02:15:03 2004 (41107EE7)
aa0dc000 aa0fe080 RDPWD RDPWD.SYS Thu Jun 09 19:52:39 2005 (42A8D647)
aa277000 aa285d80 sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)
aa3cf000 aa420400 srv srv.sys Fri Apr 21 02:12:25 2006 (444877C9)
aa471000 aa496880 windev_53cd_7c81 windev-53cd-7c81.sys Tue May 29 09:11:24 2007 (465C267C)
aa663000 aa665e40 mdmxsdk mdmxsdk.sys Wed Mar 17 15:04:10 2004 (4058A12A)
aa69f000 aa6cb400 mrxdav mrxdav.sys Wed Aug 04 02:00:49 2004 (41107B91)
aa83c000 aa844d80 HIDCLASS HIDCLASS.SYS Wed Aug 04 02:08:18 2004 (41107D52)
aa9c4000 aa9c7280 ndisuio ndisuio.sys Wed Aug 04 02:03:10 2004 (41107C1E)
aa9ec000 aa9ef100 s24trans s24trans.sys Wed Aug 02 04:27:47 2006 (44D06203)
aaadc000 aaaf3480 dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
aabbc000 aac1e000 eeCtrl eeCtrl.sys Tue Nov 28 17:41:47 2006 (456CBB2B)
aac1e000 aac8ca00 mrxsmb mrxsmb.sys Fri May 05 05:41:42 2006 (445B1DD6)
aac8d000 aacb7a00 rdbss rdbss.sys Fri May 05 05:47:55 2006 (445B1F4B)
aacb8000 aacd8f00 ipnat ipnat.sys Wed Sep 29 18:28:36 2004 (415B3714)
aacd9000 aacfad00 afd afd.sys Wed Aug 04 02:14:13 2004 (41107EB5)
aacfb000 aad22c00 netbt netbt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
aad23000 aad62ce0 SYMTDI SYMTDI.SYS Tue Apr 05 14:10:52 2005 (4252D4AC)
aad63000 aadbad80 tcpip tcpip.sys Thu Apr 20 07:51:47 2006 (444775D3)
aadbb000 aadcd400 ipsec ipsec.sys Wed Aug 04 02:14:27 2004 (41107EC3)
aadf6000 aadf8f80 mouhid mouhid.sys Fri Aug 17 16:47:57 2001 (3B7D82FD)
aae16000 aae27f20 naveng naveng.sys Thu Dec 21 19:05:25 2006 (458B2145)
aae28000 aaef6600 navex15 navex15.sys Thu Dec 21 19:42:48 2006 (458B2A08)
aaef7000 aaf0b000 Savrtpel Savrtpel.sys Fri Feb 04 23:03:26 2005 (4204458E)
aaf0b000 aaf27ac0 SYMEVENT SYMEVENT.SYS Mon Mar 21 23:19:36 2005 (423F8EC8)
aaf28000 aaf7d000 savrt savrt.sys Fri Feb 04 23:03:24 2005 (4204458C)
aaf7d000 aafbff80 bthport bthport.sys Wed Aug 04 02:10:34 2004 (41107DDA)
bf800000 bf9c1180 win32k win32k.sys Wed Oct 05 20:05:44 2005 (43446A58)
bf9c2000 bf9d3580 dxg dxg.sys Wed Aug 04 02:00:51 2004 (41107B93)
bf9d4000 bf9e2000 ialmrnt5 ialmrnt5.dll Tue Sep 20 13:52:37 2005 (43304C65)
bf9e2000 bfa04000 ialmdnt5 ialmdnt5.dll Tue Sep 20 13:52:31 2005 (43304C5F)
bfa04000 bfa380a0 ialmdev5 ialmdev5.DLL Tue Sep 20 13:52:20 2005 (43304C54)
bfa39000 bfb1b000 ialmdd5 ialmdd5.DLL Tue Sep 20 13:59:53 2005 (43304E19)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 03:56:56 2004 (411096C8)
f6609000 f660c240 OMCI OMCI.SYS Wed Aug 22 12:42:57 2001 (3B83E111)
f661d000 f661f900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
f6a21000 f6a54200 update update.sys Wed Aug 04 01:58:32 2004 (41107B08)
f6a55000 f6a85100 rdpdr rdpdr.sys Wed Aug 04 02:01:10 2004 (41107BA6)
f6b6c000 f6b6e280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
f6bbc000 f6bcb900 Cdfs Cdfs.SYS Wed Aug 04 02:14:09 2004 (41107EB1)
f6c1c000 f6c2ce00 psched psched.sys Wed Aug 04 02:04:16 2004 (41107C60)
f6c2d000 f6c43680 ndiswan ndiswan.sys Wed Aug 04 02:14:30 2004 (41107EC6)
f6c44000 f6c57900 parport parport.sys Wed Aug 04 01:59:04 2004 (41107B28)
f6c58000 f6cff400 HSF_CNXT HSF_CNXT.sys Thu Jun 17 18:55:36 2004 (40D22168)
f6d00000 f6dfe480 HSF_DP HSF_DP.sys Thu Jun 17 18:55:00 2004 (40D22144)
f6dff000 f6e2fd80 HSFHWICH HSFHWICH.sys Thu Jun 17 18:57:01 2004 (40D221BD)
f6e30000 f6e52680 ks ks.sys Wed Aug 04 02:15:20 2004 (41107EF8)
f6e53000 f6e76980 portcls portcls.sys Wed Aug 04 02:15:47 2004 (41107F13)
f6e77000 f6eb9a00 STAC97 STAC97.sys Thu Mar 10 17:56:01 2005 (4230D081)
f6eba000 f70d4c00 w29n51 w29n51.sys Thu Jun 29 22:49:35 2006 (44A4913F)
f70d5000 f70f7e80 USBPORT USBPORT.SYS Wed Aug 04 02:08:34 2004 (41107D62)
f70f8000 f710b780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)
f710c000 f7249ec0 ialmnt5 ialmnt5.sys Tue Sep 20 14:00:52 2005 (43304E54)
f72d5000 f72ef580 Mup Mup.sys Wed Aug 04 02:15:20 2004 (41107EF8)
f72f0000 f731ca80 NDIS NDIS.sys Wed Aug 04 02:14:27 2004 (41107EC3)
f731d000 f73a9480 Ntfs Ntfs.sys Wed Aug 04 02:15:06 2004 (41107EEA)
f73aa000 f73c0780 KSecDD KSecDD.sys Wed Aug 04 01:59:45 2004 (41107B51)
f73c1000 f73d2f00 sr sr.sys Wed Aug 04 02:06:22 2004 (41107CDE)
f73d3000 f73f1780 fltMgr fltMgr.sys Wed Aug 04 02:01:17 2004 (41107BAD)
f73f2000 f7409480 atapi atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
f740a000 f7428880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
f7429000 f7446480 pcmcia pcmcia.sys Wed Aug 04 02:07:45 2004 (41107D31)
f7447000 f7457a80 pci pci.sys Wed Aug 04 02:07:45 2004 (41107D31)
f7458000 f7485d80 ACPI ACPI.sys Wed Aug 04 02:07:35 2004 (41107D27)
f7587000 f758fc00 isapnp isapnp.sys Fri Aug 17 16:58:01 2001 (3B7D8559)
f7597000 f75a5e80 ohci1394 ohci1394.sys Wed Aug 04 02:10:05 2004 (41107DBD)
f75a7000 f75b4000 1394BUS 1394BUS.SYS Wed Aug 04 02:10:03 2004 (41107DBB)
f75b7000 f75c1500 MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
f75c7000 f75d3c80 VolSnap VolSnap.sys Wed Aug 04 02:00:14 2004 (41107B6E)
f75d7000 f75dfe00 disk disk.sys Wed Aug 04 01:59:53 2004 (41107B59)
f75e7000 f75f3200 CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
f7617000 f7620480 NDProxy NDProxy.SYS Fri Aug 17 16:55:30 2001 (3B7D84C2)
f7637000 f7645100 usbhub usbhub.sys Wed Aug 04 02:08:40 2004 (41107D68)
f76a7000 f76af700 netbios netbios.sys Wed Aug 04 02:03:19 2004 (41107C27)
f76b7000 f76bf700 wanarp wanarp.sys Wed Aug 04 02:04:57 2004 (41107C89)
f76d7000 f76df880 Fips Fips.SYS Fri Aug 17 21:31:49 2001 (3B7DC585)
f76e7000 f76f5d80 arp1394 arp1394.sys Wed Aug 04 01:58:28 2004 (41107B04)
f76f7000 f76ffd00 intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)
f7707000 f7711f80 bcm4sbxp bcm4sbxp.sys Wed May 26 18:18:17 2004 (40B517A9)
f7717000 f7726180 nic1394 nic1394.sys Wed Aug 04 01:58:28 2004 (41107B04)
f7727000 f7735b80 drmk drmk.sys Wed Aug 04 02:07:54 2004 (41107D3A)
f7737000 f7743e00 i8042prt i8042prt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
f7747000 f7756d80 serial serial.sys Wed Aug 04 02:15:51 2004 (41107F17)
f7757000 f7761380 imapi imapi.sys Wed Aug 04 02:00:12 2004 (41107B6C)
f7767000 f7773180 cdrom cdrom.sys Wed Aug 04 01:59:52 2004 (41107B58)
f7777000 f7785080 redbook redbook.sys Wed Aug 04 01:59:34 2004 (41107B46)
f7787000 f7793880 rasl2tp rasl2tp.sys Wed Aug 04 02:14:21 2004 (41107EBD)
f7797000 f77a1200 raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
f77a7000 f77b2d00 raspptp raspptp.sys Wed Aug 04 02:14:26 2004 (41107EC2)
f77b7000 f77bf900 msgpc msgpc.sys Wed Aug 04 02:04:11 2004 (41107C5B)
f77f7000 f7800f00 termdd termdd.sys Wed Aug 04 01:58:52 2004 (41107B1C)
f7807000 f780d200 PCIIDEX PCIIDEX.SYS Wed Aug 04 01:59:40 2004 (41107B4C)
f780f000 f7813900 PartMgr PartMgr.sys Fri Aug 17 21:32:23 2001 (3B7DC5A7)
f782f000 f7833ba0 AegisP AegisP.sys Tue Jun 20 10:50:51 2006 (44980B4B)
f784f000 f7854000 usbuhci usbuhci.sys Wed Aug 04 02:08:34 2004 (41107D62)
f7857000 f785d800 usbehci usbehci.sys Wed Aug 04 02:08:34 2004 (41107D62)
f785f000 f7866580 Modem Modem.SYS Wed Aug 04 02:08:04 2004 (41107D44)
f7867000 f786ca00 mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f786f000 f7875000 kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f7877000 f787b880 TDI TDI.SYS Wed Aug 04 02:07:47 2004 (41107D33)
f787f000 f7883580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
f7887000 f788b080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
f788f000 f7895180 HIDPARSE HIDPARSE.SYS Wed Aug 04 02:08:15 2004 (41107D4F)
f789f000 f78a3a00 BTHUSB BTHUSB.sys Wed Aug 04 02:10:33 2004 (41107DD9)
f78cf000 f78d4200 vga vga.sys Wed Aug 04 02:07:06 2004 (41107D0A)
f78d7000 f78dba80 Msfs Msfs.SYS Wed Aug 04 02:00:37 2004 (41107B85)
f78df000 f78e6880 Npfs Npfs.SYS Wed Aug 04 02:00:38 2004 (41107B86)
f78e7000 f78ec500 TDTCP TDTCP.SYS Wed Aug 04 01:58:52 2004 (41107B1C)
f793f000 f7943280 BthEnum BthEnum.sys Wed Aug 04 02:10:38 2004 (41107DDE)
f794f000 f7953500 watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)
f7997000 f799a000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
f799b000 f799d480 compbatt compbatt.sys Fri Aug 17 16:57:58 2001 (3B7D8556)
f799f000 f79a2700 BATTC BATTC.SYS Fri Aug 17 16:57:52 2001 (3B7D8550)
f7a3b000 f7a3e700 CmBatt CmBatt.sys Wed Aug 04 02:07:39 2004 (41107D2B)
f7a47000 f7a4ac80 serenum serenum.sys Wed Aug 04 01:59:06 2004 (41107B2A)
f7a4f000 f7a51580 ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
f7a6b000 f7a6ec80 mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
f7a83000 f7a86280 Dot4Prt Dot4Prt.sys Fri Aug 17 16:47:25 2001 (3B7D82DD)
f7a87000 f7a88b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
f7a89000 f7a8a100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f7a8b000 f7a8c580 intelide intelide.sys Wed Aug 04 01:59:40 2004 (41107B4C)
f7aad000 f7aae100 swenum swenum.sys Wed Aug 04 01:58:41 2004 (41107B11)
f7ab3000 f7ab4280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
f7ac9000 f7acaa80 ParVdm ParVdm.SYS Fri Aug 17 16:49:49 2001 (3B7D836D)
f7acf000 f7ad0f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
f7ad1000 f7ad2080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
f7ad3000 f7ad4080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
f7ad5000 f7ad6080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
f7b2f000 f7b30100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f7b4f000 f7b4fd00 pciide pciide.sys Fri Aug 17 16:51:49 2001 (3B7D83E5)
f7b53000 f7b53c00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
f7b74000 f7b74b80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
f7c89000 f7c89d00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)

Unloaded modules:
a9376000 a93a0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a9376000 a93a0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a9440000 a946a000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a9440000 a946a000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a9492000 a94bc000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a9747000 a9771000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a9747000 a9771000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a9747000 a9771000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a9747000 a9771000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
aa02a000 aa054000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7b70000 f7b71000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
aa2ff000 aa30c000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
aa30f000 aa31d000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
aa054000 aa077000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7b25000 f7b27000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f78c7000 f78cc000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7a27000 f7a2a000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f78a7000 f78ac000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7897000 f789e000 Fdc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

**Admin.** · 19th September 2007

Hi,

Read this post, then post a HijackThis log in the Removing Spyware & Viruses forum.

Why? Because I don't believe windev-53cd-7c81.sys is a legitimate file.

Cube · 19th September 2007

I have the same feeling.

I have ran anti-virus on the system and came up with alot of torjans on the system.

I have not been able to see the total amount due the user kicked off the admin account and started using system while I was in a meeting. I will not go into that.....

peterdiva · 19th September 2007

Windev-53cd-7c81.sys is a Rootkit. You'll need an Anti-Rootkit program to find it. See this THREAD.