1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Win2k Server bugcheck

Discussion in 'Windows Server System' started by SJDannen, 2005/09/22.

  1. 2005/09/22
    SJDannen

    SJDannen Inactive Thread Starter

    Joined:
    2005/09/22
    Messages:
    7
    Likes Received:
    0
    I am having no luck figuring our issue from the memory.dmp file. Can someone please help. Below is some of the information pulled using windbg It almost seems as if ntfs.sys is corrupt, or getting loaded to a bad area of RAM. But I am not entirely sure. Thanks in advance

    Opened log file 'c:\debuglog.txt'
    0: kd> !analyze -v
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    UNEXPECTED_KERNEL_MODE_TRAP (7f)
    This means a trap occurred in kernel mode, and it's a trap of a kind
    that the kernel isn't allowed to have/catch (bound trap) or that
    is always instant death (double fault). The first number in the
    bugcheck params is the number of the trap (8 = double fault, etc)
    Consult an Intel x86 family manual to learn more about what these
    traps are. Here is a *portion* of those codes:
    If kv shows a taskGate
    use .tss on the part before the colon, then kv.
    Else if kv shows a trapframe
    use .trap on that value
    Else
    .trap on the appropriate frame will show where the trap was taken
    (on x86, this will be the ebp that goes with the procedure KiTrap)
    Endif
    kb will then show the corrected stack.
    Arguments:
    Arg1: 00000008, EXCEPTION_DOUBLE_FAULT
    Arg2: 00000000
    Arg3: 00000000
    Arg4: 00000000

    Debugging Details:
    ------------------


    BUGCHECK_STR: 0x7f_8

    DEFAULT_BUCKET_ID: INTEL_CPU_MICROCODE_ZERO

    LAST_CONTROL_TRANSFER: from 00000000 to bfd63fc7

    STACK_TEXT:
    bdacd028 00000000 00000000 00000000 00000000 Ntfs!NtfsLockUserBuffer+0x23


    FOLLOWUP_IP:
    Ntfs!NtfsLockUserBuffer+23
    bfd63fc7 56 push esi

    SYMBOL_STACK_INDEX: 0

    FOLLOWUP_NAME: MachineOwner

    SYMBOL_NAME: Ntfs!NtfsLockUserBuffer+23

    MODULE_NAME: Ntfs

    IMAGE_NAME: Ntfs.sys

    DEBUG_FLR_IMAGE_TIMESTAMP: 42807cdd

    STACK_COMMAND: kb

    FAILURE_BUCKET_ID: 0x7f_8_Ntfs!NtfsLockUserBuffer+23

    BUCKET_ID: 0x7f_8_Ntfs!NtfsLockUserBuffer+23

    Followup: MachineOwner
    ---------

    0: kd> r
    eax=ffdff13c ebx=0000007f ecx=80036000 edx=00000000 esi=00000000 edi=00000000
    eip=8046a10f esp=80473138 ebp=00000000 iopl=0 nv up di ng nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000086
    nt!KiTrap08+0x41:
    8046a10f ebef jmp nt!KiTrap08+0x32 (8046a100)
    0: kd> kv
    ChildEBP RetAddr Args to Child
    00000000 bfd63fc7 00000000 00000000 00000000 nt!KiTrap08+0x41 (FPO: TaskGate 28:0)
    bdacd028 00000000 00000000 00000000 00000000 Ntfs!NtfsLockUserBuffer+0x23 (FPO: [Non-Fpo])
    0: kd> lmnt
    start end module name
    80062000 80076f80 hal halmacpi.dll Thu Dec 02 20:29:15 2004 (41AFDD8B)
    80400000 805a2840 nt ntkrnlmp.exe Fri May 06 05:44:59 2005 (427B58BB)
    a0000000 a018f000 win32k win32k.sys unavailable (FFFFFFFE)
    a018f000 a01f5000 ati2drad ati2drad.dll unavailable (FFFFFFFE)
    a07e0000 a07ed000 RDPDD RDPDD.dll unavailable (FFFFFFFE)
    bdae8000 bdafdf20 Unknown_Module_bdae8000 Unknown_Module_bdae8000 Fri Jun 17 00:41:40 2005 (42B270A4)
    bdf68000 bdf71000 termdd termdd.sys unavailable (FFFFFFFE)
    bdfe0000 be003000 Fastfat Fastfat.SYS unavailable (FFFFFFFE)
    be07b000 be0b5440 srv srv.sys Tue May 03 02:10:42 2005 (42773202)
    be13e000 be14da20 ipsec ipsec.sys Tue Apr 29 17:04:59 2003 (3EAF051B)
    be21a000 be21ca00 lm78nt lm78nt.sys Sun Oct 26 15:14:37 2003 (3F9C474D)
    be28e000 be29e000 Cdfs Cdfs.SYS unavailable (FFFFFFFE)
    be396000 be3a1680 Defrag32 Defrag32.SYS Wed Apr 16 06:21:40 2003 (3E9D4AD4)
    be3fe000 be4724c0 caienf500 caienf500.sys Thu Jul 10 09:28:16 2003 (3F0D8610)
    be4bb000 be4bd520 caienf caienf.sys Thu Jul 10 09:26:58 2003 (3F0D85C2)
    be5b3000 be5d2140 afd afd.sys Mon Apr 11 15:31:21 2005 (425AECA9)
    be5fb000 be620700 ino_fltr ino_fltr.sys Sat Apr 10 08:10:10 2004 (40780042)
    be689000 be68bdc0 ndisuio ndisuio.sys Wed Jan 15 12:55:21 2003 (3E25BCA9)
    be721000 be729240 Fips Fips.SYS Tue May 09 09:28:29 2000 (39182E9D)
    bef89000 beff2a40 mrxsmb mrxsmb.sys Fri Apr 01 18:23:32 2005 (424DF414)
    bf005000 bf031ac0 rdbss rdbss.sys Mon Apr 11 15:31:22 2005 (425AECAA)
    bf032000 bf05cd00 netbt netbt.sys Fri Apr 01 18:23:24 2005 (424DF40C)
    bf05d000 bf071fa0 csatdi_2k csatdi_2k.sys Wed Aug 04 09:57:36 2004 (41110770)
    bf08e000 bf0916c0 dump_diskdump dump_diskdump.sys Tue Feb 25 12:18:04 2003 (3E5BC16C)
    bf09a000 bf0e81a0 tcpip tcpip.sys Thu May 12 04:24:58 2005 (42832EFA)
    bf9c3000 bf9ed3a0 update update.sys Tue Apr 15 22:22:01 2003 (3E9CDA69)
    bf9ee000 bfa09b40 ks ks.sys Tue Apr 15 22:02:11 2003 (3E9CD5C3)
    bfa44000 bfa67060 rdpdr rdpdr.sys Fri Mar 21 14:43:14 2003 (3E7B8772)
    bfb08000 bfb1eba0 ndiswan ndiswan.sys Tue Apr 29 17:05:01 2003 (3EAF051D)
    bfb1f000 bfb48440 csanet_2k csanet_2k.sys Wed Aug 04 09:57:24 2004 (41110764)
    bfb49000 bfb5aa00 csafile_2k csafile_2k.sys Wed Aug 04 09:57:04 2004 (41110750)
    bfb5b000 bfb83ee0 csacenter_2k csacenter_2k.sys Wed Aug 04 09:57:00 2004 (4111074C)
    bfb84000 bfba2e00 e1000nt5 e1000nt5.sys Fri Mar 12 11:44:28 2004 (4052050C)
    bfba3000 bfbeb900 ati2mpad ati2mpad.sys Fri Jul 06 13:53:36 2001 (3B461740)
    bfc0c000 bfc0f580 vga vga.sys Sat Sep 25 12:37:40 1999 (37ED1674)
    bfc58000 bfc5a2e0 ndistapi ndistapi.sys Wed Jan 15 12:54:15 2003 (3E25BC67)
    bfc74000 bfc77640 serenum serenum.sys Wed Jan 15 12:47:01 2003 (3E25BAB5)
    bfd4c000 bfd61be0 Mup Mup.sys Thu Dec 02 20:37:23 2004 (41AFDF73)
    bfd62000 bfddf480 Ntfs Ntfs.sys Tue May 10 03:20:29 2005 (42807CDD)
    bfde0000 bfdf17c0 KSecDD KSecDD.sys Sat Sep 20 18:32:19 2003 (3F6CF193)
    bfdf2000 bfe041c0 Dfs Dfs.sys Tue Feb 11 19:19:06 2003 (3E49AF1A)
    bfe73000 bfe85500 drvmcdb drvmcdb.sys Fri Dec 21 23:33:52 2001 (3C242950)
    bfe86000 bfea75a0 fltmgr fltmgr.sys Thu Apr 14 00:59:00 2005 (425E14B4)
    bfea8000 bfeedb00 elxsli2 elxsli2.sys Tue Sep 23 17:30:08 2003 (3F70D780)
    bfeee000 bff084c0 lpxnds lpxnds.sys Mon Aug 04 12:04:06 2003 (3F2EA016)
    bff09000 bff1b180 SCSIPORT SCSIPORT.SYS Wed Dec 29 22:53:36 2004 (41D397E0)
    bff1c000 bff31180 atapi atapi.sys Tue Apr 01 11:08:25 2003 (3E89D599)
    bff32000 bff5baa0 NDIS NDIS.SYS Tue Apr 29 17:05:01 2003 (3EAF051D)
    bff5c000 bffbac80 VXio VXio.sys Fri May 07 00:40:55 2004 (409B2F77)
    bffbb000 bffd75a0 ftdisk ftdisk.sys Thu Dec 02 20:29:58 2004 (41AFDDB6)
    bffd8000 bffffc20 ACPI ACPI.sys Wed Jan 15 12:44:22 2003 (3E25BA16)
    f5800000 f580e6a0 pci pci.sys Wed Jan 15 12:44:07 2003 (3E25BA07)
    f5810000 f581b680 isapnp isapnp.sys Wed Jan 15 12:43:47 2003 (3E25B9F3)
    f5820000 f582af80 vxcache vxcache.sys Thu May 06 18:31:22 2004 (409AD8DA)
    f5830000 f58394a0 symmpi symmpi.sys Fri May 23 11:47:31 2003 (3ECE5EB3)
    f5840000 f5848700 CLASSPNP CLASSPNP.SYS Wed Jan 15 12:42:51 2003 (3E25B9BB)
    f5850000 f585b1a0 vsp vsp.sys Tue Jun 22 11:28:21 2004 (40D86C35)
    f5860000 f586b680 Defrag32b Defrag32b.sys Wed Apr 16 06:21:40 2003 (3E9D4AD4)
    f58c0000 f58cc4c0 VIDEOPRT VIDEOPRT.SYS Wed Jan 15 12:47:20 2003 (3E25BAC8)
    f58d0000 f58db680 i8042prt i8042prt.sys Tue Apr 15 22:00:59 2003 (3E9CD57B)
    f58e0000 f58ef400 serial serial.sys Tue Apr 15 22:19:39 2003 (3E9CD9DB)
    f58f0000 f58f8c60 csareg_2k csareg_2k.sys Wed Aug 04 09:57:08 2004 (41110754)
    f5900000 f590ca80 rasl2tp rasl2tp.sys Tue Apr 29 17:05:06 2003 (3EAF0522)
    f5910000 f591bc40 raspptp raspptp.sys Wed May 14 17:47:00 2003 (3EC2D574)
    f5920000 f5928f40 smbushc smbushc.sys Sun Oct 26 15:13:29 2003 (3F9C4709)
    f5940000 f5949be0 usbhub usbhub.sys Tue Mar 18 16:30:41 2003 (3E77AC21)
    f5950000 f5959ce0 NDProxy NDProxy.SYS Thu Sep 30 17:25:35 1999 (37F3F16F)
    f5960000 f5968fa0 Npfs Npfs.SYS Sat Oct 09 17:58:07 1999 (37FFD68F)
    f5970000 f5978680 msgpc msgpc.sys Wed Jan 15 12:54:25 2003 (3E25BC71)
    f5980000 f59881a0 netbios netbios.sys Tue Oct 12 13:34:19 1999 (38038D3B)
    f59d0000 f59d94a0 dump_symmpi dump_symmpi.sys Fri May 23 11:47:31 2003 (3ECE5EB3)
    f5a80000 f5a85520 PCIIDEX PCIIDEX.SYS Tue Feb 25 11:31:08 2003 (3E5BB66C)
    f5a88000 f5a8f5a0 MountMgr MountMgr.sys Thu Dec 02 20:33:01 2004 (41AFDE6D)
    f5a90000 f5a97720 disk disk.sys Wed Jan 15 12:43:05 2003 (3E25B9C9)
    f5a98000 f5a9cd00 ino_flpy ino_flpy.sys Thu Jun 19 11:17:12 2003 (3EF1F018)
    f5ac0000 f5ac5240 Msfs Msfs.SYS Tue Oct 26 17:21:32 1999 (3816377C)
    f5ad0000 f5ad5ec0 kbdclass kbdclass.sys Thu Feb 20 09:37:30 2003 (3E55044A)
    f5ae0000 f5ae5400 mouclass mouclass.sys Thu Feb 20 09:37:45 2003 (3E550459)
    f5af0000 f5af6580 fdc fdc.sys Wed Jan 15 12:42:51 2003 (3E25B9BB)
    f5af8000 f5affd00 wanarp wanarp.sys Fri Aug 16 06:25:01 2002 (3D5CEF1D)
    f5b08000 f5b0ec40 cdrom cdrom.sys Wed Jan 15 12:43:04 2003 (3E25B9C8)
    f5b18000 f5b1dfc0 openhci openhci.sys Fri Feb 28 17:28:59 2003 (3E5FFECB)
    f5b30000 f5b34fc0 USBD USBD.SYS Wed Jan 22 10:05:33 2003 (3E2ECF5D)
    f5b38000 f5b40000 RCSpyMP RCSpyMP.sys Tue Jun 08 08:31:13 2004 (40C5CDB1)
    f5b58000 f5b5c400 ptilink ptilink.sys Wed Jan 15 12:47:15 2003 (3E25BAC3)
    f5b68000 f5b6c0e0 raspti raspti.sys Fri Oct 08 14:45:10 1999 (37FE57D6)
    f5b70000 f5b748c0 TDTCP TDTCP.SYS Fri Mar 21 14:43:08 2003 (3E7B876C)
    f5b88000 f5b8ca60 flpydisk flpydisk.sys Wed Jan 15 12:42:52 2003 (3E25B9BC)
    f5b98000 f5b9ea20 EFS EFS.SYS Wed Jan 15 12:46:55 2003 (3E25BAAF)
    f5c10000 f5c12a20 BOOTVID BOOTVID.dll Wed Nov 03 18:24:33 1999 (3820E051)
    f5c14000 f5c16d00 PartMgr PartMgr.sys Wed Jan 15 12:43:07 2003 (3E25B9CB)
    f5c18000 f5c1be60 TDI TDI.SYS Wed Jan 15 12:56:26 2003 (3E25BCEA)
    f5c1c000 f5c1f360 smbusdh smbusdh.sys Sun Oct 26 15:13:33 2003 (3F9C470D)
    f5c20000 f5c229a0 smbgen smbgen.sys Sun Oct 26 15:13:36 2003 (3F9C4710)
    f5c24000 f5c26e40 lpxftr lpxftr.sys Wed May 14 17:12:05 2003 (3EC2CD45)
    f5d00000 f5d01d20 Diskperf Diskperf.sys Wed Feb 12 14:34:38 2003 (3E4ABDEE)
    f5d10000 f5d11ca0 Fs_Rec Fs_Rec.SYS Wed Jan 15 12:53:30 2003 (3E25BC3A)
    f5d18000 f5d19e40 rasacd rasacd.sys Sat Sep 25 12:41:23 1999 (37ED1753)
    f5dc8000 f5dc8f80 WMILIB WMILIB.SYS Sat Sep 25 12:36:47 1999 (37ED163F)
    f5dc9000 f5dc9b00 pciide pciide.sys Wed Jan 15 12:43:03 2003 (3E25B9C7)
    f5dfa000 f5dfaa40 audstub audstub.sys Sat Sep 25 12:35:33 1999 (37ED15F5)
    f5e04000 f5e04d80 swenum swenum.sys Sat Sep 25 12:36:31 1999 (37ED162F)
    f5e12000 f5e129e0 Null Null.SYS Sat Sep 25 12:34:58 1999 (37ED15D2)
    f5e14000 f5e14ee0 Beep Beep.SYS Wed Oct 20 16:18:59 1999 (380E3FD3)
    f5e17000 f5e17f80 mnmdd mnmdd.SYS Sat Sep 25 12:37:40 1999 (37ED1674)

    Unloaded modules:
    bfe05000 bfe73000 vxboot.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f5b70000 f5b77000 Parport.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f5990000 f5999000 redbook.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f5ab0000 f5ab5000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bfc14000 bfc17000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f5870000 f5879000 smbushc.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    0: kd> .logclose
    Closing open log file c:\debuglog.txt
     
  2. 2005/09/23
    oshwyn5

    oshwyn5 Inactive

    Joined:
    2005/08/25
    Messages:
    736
    Likes Received:
    0
    http://aumha.org/win5/kbestop.php

    Scroll down to 0x0000007f


    http://www.microsoft.com/technet/prodtechnol/winxppro/reskit/prmd_stp_ukdq.asp
    0x00000008, or Double Fault, indicates an exception while trying to call the handler for a prior exception. Normally, two exceptions can be handled serially, but there are certain exceptions (almost always caused by hardware problems) that cause the processor to signal a double fault.

    http://support.microsoft.com/?kbid=137539&sd=RMVP


     

  3. to hide this advert.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.