Here's my DUMP DATA report.

This is my debug log for my compter. I get this blue screen error, 0x1000008e everyonce in a while. This is on a computer that I am building for a customer but I can't finish it untill this problem is solved.

The specs are:

Soyo KT-600 Dragon Ultra Platinum
AMD Athlon XP 3000+
160GB Samsung SATA hard drive
512 mb pc3200 ram
Abit Radeon 9550 using cat 4.10's
Floppy
Samsung DVD/CD-RW
400w psu
Windows XP SP1

I made sure I was using the latest drivers I could find.
I have changed the ram and the video card and mobo(I had two of them) and I still have the problem.

Here is the report:
Opened log file 'c:\debuglog.txt'
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Mini101504-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp2_gdr.040517-1325
Kernel base = 0x804d4000 PsLoadedModuleList = 0x8054d4b0
Debug session time: Fri Oct 15 13:00:43 2004
System Uptime: 0 days 0:15:59.507
Loading Kernel Symbols
..................................................................................................................
Loading unloaded module list
.............
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, 8053dd91, b09b3ba0, 0}

Probably caused by : ntoskrnl.exe ( nt!ExFreePoolWithTag+3d8 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
An exception code of 0x80000002 (STATUS_DATATYPE_MISALIGNMENT) indicates
that an unaligned data reference was encountered. The trap frame will
supply additional information.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8053dd91, The address that the exception occurred at
Arg3: b09b3ba0, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
nt!ExFreePoolWithTag+3d8
8053dd91 668b5104 mov dx,[ecx+0x4]

TRAP_FRAME: b09b3ba0 -- (.trap ffffffffb09b3ba0)
.trap ffffffffb09b3ba0
ErrCode = 00000000
eax=ffdff120 ebx=00000000 ecx=00000000 edx=3e050002 esi=818c41f0 edi=80550920
eip=8053dd91 esp=b09b3c14 ebp=b09b3c40 iopl=0 nv up ei pl zr na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!ExFreePoolWithTag+0x3d8:
8053dd91 668b5104 mov dx,[ecx+0x4] ds:0023:00000004=????
.trap
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

LAST_CONTROL_TRANSFER: from 80584a93 to 8053dd91

STACK_TEXT:
b09b3c40 80584a93 818c41f8 00000000 b09b3d64 nt!ExFreePoolWithTag+0x3d8
b09b3ca8 80584afe 01e7f22c 80100080 01e7f1cc nt!IopCreateFile+0x53b
b09b3cf0 8058cad2 01e7f22c 80100080 01e7f1cc nt!IoCreateFile+0x36
b09b3d30 804da1dd 01e7f22c 80100080 01e7f1cc nt!NtCreateFile+0x2e
b09b3d30 7ffe0304 01e7f22c 80100080 01e7f1cc nt!KiSystemService+0xc4
01e7f224 00000000 00000000 00000000 00000000 SharedUserData!SystemCallStub+0x4


FOLLOWUP_IP:
nt!ExFreePoolWithTag+3d8
8053dd91 668b5104 mov dx,[ecx+0x4]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!ExFreePoolWithTag+3d8

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 40d1d336

STACK_COMMAND: .trap ffffffffb09b3ba0 ; kb

BUCKET_ID: 0x8E_nt!ExFreePoolWithTag+3d8

Followup: MachineOwner
---------

eax=ffdff120 ebx=00000000 ecx=00000000 edx=3e050002 esi=818c41f0 edi=80550920
eip=8053dd91 esp=b09b3c14 ebp=b09b3c40 iopl=0 nv up ei pl zr na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!ExFreePoolWithTag+0x3d8:
8053dd91 668b5104 mov dx,[ecx+0x4] ds:0023:00000004=????
ChildEBP RetAddr Args to Child
b09b3c40 80584a93 818c41f8 00000000 b09b3d64 nt!ExFreePoolWithTag+0x3d8 (FPO: [Non-Fpo])
b09b3ca8 80584afe 01e7f22c 80100080 01e7f1cc nt!IopCreateFile+0x53b (FPO: [Non-Fpo])
b09b3cf0 8058cad2 01e7f22c 80100080 01e7f1cc nt!IoCreateFile+0x36 (FPO: [Non-Fpo])
b09b3d30 804da1dd 01e7f22c 80100080 01e7f1cc nt!NtCreateFile+0x2e (FPO: [Non-Fpo])
b09b3d30 7ffe0304 01e7f22c 80100080 01e7f1cc nt!KiSystemService+0xc4 (FPO: [0,0] TrapFrame @ b09b3d64)
01e7f224 00000000 00000000 00000000 00000000 SharedUserData!SystemCallStub+0x4 (FPO: [0,0,0])
start end module name
804d4000 806c8e00 nt ntoskrnl.exe Thu Jun 17 13:21:58 2004 (40D1D336)
806c9000 806e8380 hal halaacpi.dll Thu Aug 29 04:05:02 2002 (3D6DD5AE)
b0582000 b05a8e80 kmixer kmixer.sys Thu Aug 29 04:32:28 2002 (3D6DDC1C)
b07d9000 b086e6a0 NAVEX15 NAVEX15.sys Fri Jul 23 13:50:12 2004 (41014FD4)
b090f000 b094c000 NAVAP NAVAP.sys Wed Jun 19 20:57:11 2002 (3D112867)
b0a04000 b0a135a0 NAVENG NAVENG.sys Fri Jul 23 13:50:57 2004 (41015001)
b0a14000 b0a24780 SYMEVENT SYMEVENT.SYS Tue Jul 16 00:04:17 2002 (3D339B41)
b0b8d000 b0b9e000 NAVAPEL NAVAPEL.SYS Wed Jun 19 20:57:14 2002 (3D11286A)
b0b9e000 b0beea80 srv srv.sys Fri Aug 17 21:32:06 2001 (3B7DC596)
b0c3f000 b0c69280 mrxdav mrxdav.sys Fri Aug 17 16:50:20 2001 (3B7D838C)
b0d54000 b0d66e80 wdmaud wdmaud.sys Thu Aug 29 05:00:46 2002 (3D6DE2BE)
b0e7f000 b0e9f380 afd afd.sys Thu Aug 29 05:01:13 2002 (3D6DE2D9)
b2ec8000 b2edae00 dump_viasraid dump_viasraid.sys Thu Oct 30 04:38:31 2003 (3FA0DC17)
b2edb000 b2f3e800 mrxsmb mrxsmb.sys Thu Aug 29 04:59:51 2002 (3D6DE287)
b2f3f000 b2f66e00 rdbss rdbss.sys Thu Aug 29 04:58:48 2002 (3D6DE248)
b2f67000 b2f8d580 netbt netbt.sys Thu Aug 29 05:01:56 2002 (3D6DE304)
b2f8e000 b2fdf480 tcpip tcpip.sys Thu Aug 29 04:58:10 2002 (3D6DE222)
bf800000 bf9c2a80 win32k win32k.sys Thu Aug 05 14:14:31 2004 (41127907)
bf9c3000 bf9fc000 ati2dvag ati2dvag.dll Wed Sep 29 08:22:40 2004 (415AA910)
bf9fc000 bfa38000 ati2cqag ati2cqag.dll Wed Sep 29 07:28:58 2004 (415A9C7A)
bfa38000 bfc5e6e0 ati3duag ati3duag.dll Wed Sep 29 08:05:08 2004 (415AA4F4)
bfc5f000 bfcd4260 ativvaxx ativvaxx.dll Wed Sep 29 07:45:14 2004 (415AA04A)
bff80000 bff90d80 dxg dxg.sys Thu Aug 29 06:40:42 2002 (3D6DFA2A)
f2ff3000 f3014780 update update.sys Fri Aug 17 23:53:56 2001 (3B7DE6D4)
f3015000 f3041880 rdpdr rdpdr.sys Thu Aug 29 04:06:34 2002 (3D6DD60A)
f3042000 f3052200 psched psched.sys Thu Aug 29 04:35:54 2002 (3D6DDCEA)
f3053000 f3068600 ndiswan ndiswan.sys Thu Aug 29 04:58:38 2002 (3D6DE23E)
f3069000 f307b900 parport parport.sys Thu Aug 29 04:27:29 2002 (3D6DDAF1)
f307c000 f309d180 USBPORT USBPORT.SYS Thu Aug 29 04:32:49 2002 (3D6DDC31)
f309e000 f30be280 ks ks.sys Thu Aug 29 05:13:40 2002 (3D6DE5C4)
f30bf000 f30dfc80 portcls portcls.sys Thu Aug 29 05:00:58 2002 (3D6DE2CA)
f30e0000 f313cb00 cmaudio cmaudio.sys Mon Jul 15 22:58:09 2002 (3D338BC1)
f313d000 f316b780 b57xp32 b57xp32.sys Sat Jun 19 19:30:28 2004 (40D4CC94)
f316c000 f317d500 VIDEOPRT VIDEOPRT.SYS Thu Aug 29 04:32:03 2002 (3D6DDC03)
f319c000 f319e280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
f3243000 f3243d00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
f331e000 f3320680 gameenum gameenum.sys Thu Aug 29 04:32:42 2002 (3D6DDC2A)
f3b35000 f3b38f80 TDI TDI.SYS Fri Aug 17 16:57:25 2001 (3B7D8535)
f3b39000 f3b3b580 ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
f3b3d000 f3b40a80 serenum serenum.sys Fri Aug 17 16:50:13 2001 (3B7D8385)
f479c000 f479cb80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
f493d000 f494b280 ipsec ipsec.sys Thu Aug 29 05:07:19 2002 (3D6DE447)
f495d000 f4969b00 usbhub usbhub.sys Thu Aug 29 04:32:49 2002 (3D6DDC31)
f496d000 f497b900 Cdfs Cdfs.SYS Thu Aug 29 04:58:50 2002 (3D6DE24A)
f497d000 f4985180 netbios netbios.sys Thu Aug 29 04:35:45 2002 (3D6DDCE1)
f4bbc000 f4bc4400 msgpc msgpc.sys Fri Aug 17 16:54:19 2001 (3B7D847B)
f4bcc000 f4bd7500 raspptp raspptp.sys Thu Aug 29 05:12:46 2002 (3D6DE58E)
f4bfc000 f4c05480 NDProxy NDProxy.SYS Fri Aug 17 16:55:30 2001 (3B7D84C2)
f4c0c000 f4c15400 termdd termdd.sys Thu Aug 29 04:40:32 2002 (3D6DDE00)
f4c1c000 f4c2a000 arp1394 arp1394.sys Thu Aug 29 04:33:29 2002 (3D6DDC59)
f4c2c000 f4c34200 wanarp wanarp.sys Fri Aug 17 16:55:23 2001 (3B7D84BB)
f4c4c000 f4c54880 Fips Fips.SYS Fri Aug 17 21:31:49 2001 (3B7DC585)
f5514000 f5517380 dump_scsiport dump_scsiport.sys Thu Aug 29 04:27:54 2002 (3D6DDB0A)
f5528000 f552a900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
f5613000 f5617d00 vga vga.sys Thu Aug 29 04:32:03 2002 (3D6DDC03)
f561b000 f561fd00 flpydisk flpydisk.sys Thu Aug 29 04:27:43 2002 (3D6DDAFF)
f5623000 f5627680 Msfs Msfs.SYS Fri Aug 17 16:50:02 2001 (3B7D837A)
f58e4000 f58f3400 serial serial.sys Thu Aug 29 05:08:27 2002 (3D6DE48B)
f58f4000 f58ff980 cdrom cdrom.sys Thu Aug 29 04:27:55 2002 (3D6DDB0B)
f5904000 f590fd00 rasl2tp rasl2tp.sys Thu Aug 29 05:06:36 2002 (3D6DE41C)
f5924000 f5930780 i8042prt i8042prt.sys Thu Aug 29 05:06:37 2002 (3D6DE41D)
f5934000 f5941d00 redbook redbook.sys Thu Aug 29 04:27:45 2002 (3D6DDB01)
f5944000 f594db80 imapi imapi.sys Thu Aug 29 04:28:05 2002 (3D6DDB15)
f6654000 f6662200 drmk drmk.sys Thu Aug 29 04:32:30 2002 (3D6DDC1E)
f66b4000 f66bd800 raspppoe raspppoe.sys Fri Aug 17 16:55:33 2001 (3B7D84C5)
f676d000 f6774380 Npfs Npfs.SYS Fri Aug 17 16:50:03 2001 (3B7D837B)
f6785000 f6789080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
f678d000 f6791580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
f6795000 f679ab80 kbdclass kbdclass.sys Thu Aug 29 04:26:59 2002 (3D6DDAD3)
f679d000 f67a2600 mouclass mouclass.sys Thu Aug 29 04:27:00 2002 (3D6DDAD4)
f67a5000 f67a9b80 usbuhci usbuhci.sys Thu Aug 29 04:32:48 2002 (3D6DDC30)
f67ad000 f67ae000 fdc fdc.sys unavailable (00000000)
f67b5000 f67b9b80 usbehci usbehci.sys Thu Aug 29 04:32:47 2002 (3D6DDC2F)
f7c68000 f7d46000 ati2mtag ati2mtag.sys Wed Sep 29 08:22:20 2004 (415AA8FC)
f8374000 f838d680 Mup Mup.sys Thu Aug 29 05:12:53 2002 (3D6DE595)
f838e000 f83b6e80 NDIS NDIS.sys Thu Aug 29 05:09:23 2002 (3D6DE4C3)
f83b7000 f8440300 Ntfs Ntfs.sys Thu Aug 29 05:13:37 2002 (3D6DE5C1)
f8441000 f8454780 KSecDD KSecDD.sys Fri Aug 17 16:50:01 2001 (3B7D8379)
f8455000 f8465e80 sr sr.sys Thu Aug 29 04:17:56 2002 (3D6DD8B4)
f8466000 f847c080 SCSIPORT SCSIPORT.SYS Thu Aug 29 04:27:47 2002 (3D6DDB03)
f847d000 f848fe00 viasraid viasraid.sys Thu Oct 30 04:38:31 2003 (3FA0DC17)
f8490000 f84a5380 atapi atapi.sys Thu Aug 29 04:27:48 2002 (3D6DDB04)
f84a6000 f84c9b80 dmio dmio.sys Fri Aug 17 16:58:27 2001 (3B7D8573)
f84ca000 f84e8880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
f84e9000 f8514c80 ACPI ACPI.sys Thu Aug 29 04:09:03 2002 (3D6DD69F)
f8536000 f8545600 pci pci.sys Thu Aug 29 04:09:10 2002 (3D6DD6A6)
f8546000 f854ec00 isapnp isapnp.sys Fri Aug 17 16:58:01 2001 (3B7D8559)
f8556000 f855f280 MountMgr MountMgr.sys Fri Aug 17 16:47:36 2001 (3B7D82E8)
f8566000 f8572000 VolSnap VolSnap.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
f8576000 f857e400 disk disk.sys Thu Aug 29 04:27:56 2002 (3D6DDB0C)
f8586000 f8591500 CLASSPNP CLASSPNP.SYS Thu Aug 29 05:08:42 2002 (3D6DE49A)
f8596000 f85a3980 ohci1394 ohci1394.sys Thu Aug 29 04:33:19 2002 (3D6DDC4F)
f85a6000 f85b2580 1394BUS 1394BUS.SYS Thu Aug 29 04:33:19 2002 (3D6DDC4F)
f8706000 f8714280 nic1394 nic1394.sys Thu Aug 29 04:33:29 2002 (3D6DDC59)
f8736000 f8743e00 sysaudio sysaudio.sys Thu Aug 29 05:01:17 2002 (3D6DE2DD)
f87b6000 f87bbc80 PCIIDEX PCIIDEX.SYS Thu Aug 29 04:27:47 2002 (3D6DDB03)
f87be000 f87c2900 PartMgr PartMgr.sys Fri Aug 17 21:32:23 2001 (3B7DC5A7)
f87c6000 f87ccd00 viaagp1 viaagp1.sys Wed Jul 02 06:08:01 2003 (3F02AF01)
f88fe000 f8903500 USBSTOR USBSTOR.SYS Thu Aug 29 04:32:50 2002 (3D6DDC32)
f8936000 f893df00 amdk7 amdk7.sys Tue Dec 17 21:16:16 2002 (3DFFDA70)
f8946000 f8949000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
f8a2a000 f8a2e000 watchdog watchdog.sys Thu Aug 29 04:32:20 2002 (3D6DDC14)
f8a32000 f8a35000 ndisuio ndisuio.sys Thu Aug 29 04:35:40 2002 (3D6DDCDC)
f8a36000 f8a37b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
f8a38000 f8a39100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f8a3a000 f8a3b300 viaide viaide.sys Thu Aug 29 04:27:48 2002 (3D6DDB04)
f8a3c000 f8a3d700 dmload dmload.sys Fri Aug 17 16:58:15 2001 (3B7D8567)
f8a5c000 f8a5d280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
f8a5e000 f8a5ff00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
f8a60000 f8a61080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
f8a62000 f8a63080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
f8a64000 f8a65080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
f8aee000 f8aefa80 ParVdm ParVdm.SYS Fri Aug 17 16:49:49 2001 (3B7D836D)
f8bb2000 f8bb2c00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
f8bb7000 f8bb7f00 swenum swenum.sys Fri Aug 17 16:48:47 2001 (3B7D832F)

Unloaded modules:
b0582000 b05a9000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b0582000 b05a9000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b0582000 b05a9000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b0d0a000 b0d31000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f3237000 f3238000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f66a4000 f66b1000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b0d31000 b0d54000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6694000 f66a2000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8a52000 f8a54000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6775000 f677d000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f560b000 f5610000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f31a0000 f31a3000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f677d000 f6782000 itsernum.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt


If you have questions just ask.
Also I want to say hey to everyone since I just registered.

 

ill look at this tomorrow. real quick, this is pool corruption, maybe a double free. Setup for a FULL KERNEL dump, we are going to need to go spelunking into the system memory.

This is almost certainly caused by a bad driver, not hardware. Make sure you updated everything you could to current.

 

Ok, we need two more passes of dumps to make progress on this.

1) We need to enable pool tags, and get a full memory dump to isolate which tag is overrunning
-----------
The easiest way to enable GFlags options is to start GFlags from the command line and then use the dialog box as follows:
To enable pool tagging, select "Enable pool tagging."


2) once you have that, we will need to determine which tags are around the corrupted memory, and run those drivers under the Special Pool.

The second pass should allow us to catch the offending driver in the act.

----
Please note that all this is just to isolate which driver is malfunctioning. You could perform similar isolation work by updating ALL your drivers, and removing select ones until the crashes stop.

 

Ok, I'll try that and report back. Thanks for the help so far.

 

Well I enabled pool tags in Gflags but I don't know what to do next. How do I get a full memory dump?

 

Ok well right after I posted the post before this I got a stop error: the same 0x8e one. Do you want me to put that data on here or was that not a full memory dump?

The debug log says that it was probably caused be ntoskrnl.exe. The same result was the one I posted yesterday.

 

no need to post it.

configure your dump as my screen shot indicates. this is under properties of My computer->advanced_startup and recovery

 

Ok I changed the propeties. I'll tell ya when I get the next dump.

 

Ok I just got one when I was running Ad-Aware SE.

This time was 0x0000000a

Here's the report:

Opened log file 'c:\debuglog.txt'
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp2_gdr.040517-1325
Kernel base = 0x804d4000 PsLoadedModuleList = 0x8054d4b0
Debug session time: Wed Oct 20 21:12:37 2004
System Uptime: 0 days 0:36:01.750
Loading Kernel Symbols
.....................................................................................................................
Loading unloaded module list
...............
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {490004, 2, 0, 804ff0f0}

Probably caused by : ntoskrnl.exe ( nt!ExpScanGeneralLookasideList+19 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00490004, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 804ff0f0, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: 00490004

CURRENT_IRQL: 2

FAULTING_IP:
nt!ExpScanGeneralLookasideList+19
804ff0f0 8b56e0 mov edx,[esi-0x20]

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 804ee6d7 to 804ff0f0

TRAP_FRAME: f899dca8 -- (.trap fffffffff899dca8)
.trap fffffffff899dca8
ErrCode = 00000000
eax=00000000 ebx=00000048 ecx=00000033 edx=00000000 esi=00490024 edi=f9080030
eip=804ff0f0 esp=f899dd1c ebp=f899dd2c iopl=0 nv up ei pl nz na po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010207
nt!ExpScanGeneralLookasideList+0x19:
804ff0f0 8b56e0 mov edx,[esi-0x20] ds:0023:00490004=????????
.trap
Resetting default scope

STACK_TEXT:
f899dd2c 804ee6d7 80550850 80550848 804ee65d nt!ExpScanGeneralLookasideList+0x19
f899dd38 804ee65d 00000000 81fb3da8 00000000 nt!ExAdjustLookasideDepth+0x32
f899ddac 8057dfe1 00000000 00000000 00000000 nt!KeBalanceSetManager+0x86
f899dddc 80512c12 804ee5dd 00000000 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_IP:
nt!ExpScanGeneralLookasideList+19
804ff0f0 8b56e0 mov edx,[esi-0x20]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!ExpScanGeneralLookasideList+19

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 40d1d336

STACK_COMMAND: .trap fffffffff899dca8 ; kb

BUCKET_ID: 0xA_nt!ExpScanGeneralLookasideList+19

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000000a ecx=00000000 edx=40000000 esi=804ff0f0 edi=00490004
eip=8052702b esp=f899dc74 ebp=f899dc8c iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x19:
8052702b 5d pop ebp
ChildEBP RetAddr Args to Child
f899dc8c 804dd072 0000000a 00490004 00000002 nt!KeBugCheckEx+0x19 (FPO: [Non-Fpo])
f899dc8c 804ff0f0 0000000a 00490004 00000002 nt!KiTrap0E+0x219 (FPO: [0,0] TrapFrame @ f899dca8)
f899dd2c 804ee6d7 80550850 80550848 804ee65d nt!ExpScanGeneralLookasideList+0x19 (FPO: [Non-Fpo])
f899dd38 804ee65d 00000000 81fb3da8 00000000 nt!ExAdjustLookasideDepth+0x32 (FPO: [0,0,0])
f899ddac 8057dfe1 00000000 00000000 00000000 nt!KeBalanceSetManager+0x86 (FPO: [Non-Fpo])
f899dddc 80512c12 804ee5dd 00000000 00000000 nt!PspSystemThreadStartup+0x34 (FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
804d4000 806c8e00 nt ntoskrnl.exe Thu Jun 17 13:21:58 2004 (40D1D336)
806c9000 806e8380 hal halaacpi.dll Thu Aug 29 04:05:02 2002 (3D6DD5AE)
affe4000 b000ae80 kmixer kmixer.sys Thu Aug 29 04:32:28 2002 (3D6DDC1C)
b000b000 b00a06a0 NAVEX15 NAVEX15.sys Fri Jul 23 13:50:12 2004 (41014FD4)
b060d000 b064a000 NAVAP NAVAP.sys Wed Jun 19 20:57:11 2002 (3D112867)
b064a000 b065a780 SYMEVENT SYMEVENT.SYS Tue Jul 16 00:04:17 2002 (3D339B41)
b08b3000 b08c4000 NAVAPEL NAVAPEL.SYS Wed Jun 19 20:57:14 2002 (3D11286A)
b08c4000 b0914a80 srv srv.sys Fri Aug 17 21:32:06 2001 (3B7DC596)
b093d000 b0967280 mrxdav mrxdav.sys Fri Aug 17 16:50:20 2001 (3B7D838C)
b0aee000 b0afd5a0 NAVENG NAVENG.sys Fri Jul 23 13:50:57 2004 (41015001)
b0bc8000 b0bdae80 wdmaud wdmaud.sys Thu Aug 29 05:00:46 2002 (3D6DE2BE)
b0ca3000 b0cc6700 Fastfat Fastfat.SYS Thu Aug 29 05:12:45 2002 (3D6DE58D)
b0e7f000 b0e9f380 afd afd.sys Thu Aug 29 05:01:13 2002 (3D6DE2D9)
b2ec8000 b2edae00 dump_viasraid dump_viasraid.sys Thu Oct 30 04:38:31 2003 (3FA0DC17)
b2edb000 b2f3e800 mrxsmb mrxsmb.sys Thu Aug 29 04:59:51 2002 (3D6DE287)
b2f3f000 b2f66e00 rdbss rdbss.sys Thu Aug 29 04:58:48 2002 (3D6DE248)
b2f67000 b2f8d580 netbt netbt.sys Thu Aug 29 05:01:56 2002 (3D6DE304)
b2f8e000 b2fdf480 tcpip tcpip.sys Thu Aug 29 04:58:10 2002 (3D6DE222)
bf800000 bf9c2a80 win32k win32k.sys Thu Aug 05 14:14:31 2004 (41127907)
bf9c3000 bf9fc000 ati2dvag ati2dvag.dll Wed Sep 29 08:22:40 2004 (415AA910)
bf9fc000 bfa38000 ati2cqag ati2cqag.dll Wed Sep 29 07:28:58 2004 (415A9C7A)
bfa38000 bfc5e6e0 ati3duag ati3duag.dll Wed Sep 29 08:05:08 2004 (415AA4F4)
bfc5f000 bfcd4260 ativvaxx ativvaxx.dll Wed Sep 29 07:45:14 2004 (415AA04A)
bff80000 bff90d80 dxg dxg.sys Thu Aug 29 06:40:42 2002 (3D6DFA2A)
f3195000 f31b6780 update update.sys Fri Aug 17 23:53:56 2001 (3B7DE6D4)
f31b7000 f31e3880 rdpdr rdpdr.sys Thu Aug 29 04:06:34 2002 (3D6DD60A)
f31e4000 f31f4200 psched psched.sys Thu Aug 29 04:35:54 2002 (3D6DDCEA)
f31f5000 f320a600 ndiswan ndiswan.sys Thu Aug 29 04:58:38 2002 (3D6DE23E)
f320b000 f321d900 parport parport.sys Thu Aug 29 04:27:29 2002 (3D6DDAF1)
f321e000 f323f180 USBPORT USBPORT.SYS Thu Aug 29 04:32:49 2002 (3D6DDC31)
f3240000 f325fd00 ks ks.sys Wed Dec 04 12:09:38 2002 (3DEE36D2)
f3260000 f3280c80 portcls portcls.sys Thu Aug 29 05:00:58 2002 (3D6DE2CA)
f3281000 f32ddb00 cmaudio cmaudio.sys Mon Jul 15 22:58:09 2002 (3D338BC1)
f32de000 f330c780 b57xp32 b57xp32.sys Sat Jun 19 19:30:28 2004 (40D4CC94)
f330d000 f331e500 VIDEOPRT VIDEOPRT.SYS Thu Aug 29 04:32:03 2002 (3D6DDC03)
f332b000 f332d680 gameenum gameenum.sys Thu Aug 29 04:32:42 2002 (3D6DDC2A)
f33a9000 f33b1180 netbios netbios.sys Thu Aug 29 04:35:45 2002 (3D6DDCE1)
f33b9000 f33c7280 ipsec ipsec.sys Thu Aug 29 05:07:19 2002 (3D6DE447)
f33f9000 f3405b00 usbhub usbhub.sys Thu Aug 29 04:32:49 2002 (3D6DDC31)
f354c000 f3553000 fdc fdc.sys unavailable (FFFFFFFE)
f3554000 f3558b80 usbehci usbehci.sys Thu Aug 29 04:32:47 2002 (3D6DDC2F)
f355c000 f3560b80 usbuhci usbuhci.sys Thu Aug 29 04:32:48 2002 (3D6DDC30)
f3564000 f356a340 MxlW2k MxlW2k.SYS Thu Mar 28 17:13:15 2002 (3CA3957B)
f368e000 f368eb80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
f3a1d000 f3a1e000 swenum swenum.sys Wed Dec 04 12:10:07 2002 (3DEE36EF)
f3a20000 f3a29480 NDProxy NDProxy.SYS Fri Aug 17 16:55:30 2001 (3B7D84C2)
f3a50000 f3a59400 termdd termdd.sys Thu Aug 29 04:40:32 2002 (3D6DDE00)
f3a60000 f3a68400 msgpc msgpc.sys Fri Aug 17 16:54:19 2001 (3B7D847B)
f3a70000 f3a7b500 raspptp raspptp.sys Thu Aug 29 05:12:46 2002 (3D6DE58E)
f3a80000 f3a89800 raspppoe raspppoe.sys Fri Aug 17 16:55:33 2001 (3B7D84C5)
f3a90000 f3a9bd00 rasl2tp rasl2tp.sys Thu Aug 29 05:06:36 2002 (3D6DE41C)
f3aa0000 f3aac780 i8042prt i8042prt.sys Thu Aug 29 05:06:37 2002 (3D6DE41D)
f3ab0000 f3abf400 serial serial.sys Thu Aug 29 05:08:27 2002 (3D6DE48B)
f3ad4000 f3ad4c00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
f3f94000 f3f97f80 TDI TDI.SYS Fri Aug 17 16:57:25 2001 (3B7D8535)
f3f98000 f3f9a580 ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
f3f9c000 f3f9edc0 itchfltr itchfltr.sys Wed Mar 10 16:42:24 2004 (404F8BC0)
f3fa0000 f3fa3a80 serenum serenum.sys Fri Aug 17 16:50:13 2001 (3B7D8385)
f56b3000 f56b5280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
f56d5000 f56d9080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
f56dd000 f56e1580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
f56e5000 f56eab80 kbdclass kbdclass.sys Thu Aug 29 04:26:59 2002 (3D6DDAD3)
f5bf2000 f5bf7600 mouclass mouclass.sys Thu Aug 29 04:27:00 2002 (3D6DDAD4)
f6c72000 f6c7fe00 sysaudio sysaudio.sys Thu Aug 29 05:01:17 2002 (3D6DE2DD)
f6c92000 f6ca0900 Cdfs Cdfs.SYS Thu Aug 29 04:58:50 2002 (3D6DE24A)
f6ca2000 f6cb0000 arp1394 arp1394.sys Thu Aug 29 04:33:29 2002 (3D6DDC59)
f6cb2000 f6cba880 Fips Fips.SYS Fri Aug 17 21:31:49 2001 (3B7DC585)
f6cc2000 f6ccfd00 redbook redbook.sys Thu Aug 29 04:27:45 2002 (3D6DDB01)
f6cd2000 f6cda200 wanarp wanarp.sys Fri Aug 17 16:55:23 2001 (3B7D84BB)
f6ce2000 f6ced980 cdrom cdrom.sys Thu Aug 29 04:27:55 2002 (3D6DDB0B)
f6cf2000 f6cfbb80 imapi imapi.sys Thu Aug 29 04:28:05 2002 (3D6DDB15)
f7134000 f7142200 drmk drmk.sys Thu Aug 29 04:32:30 2002 (3D6DDC1E)
f7cf6000 f7dd4000 ati2mtag ati2mtag.sys Wed Sep 29 08:22:20 2004 (415AA8FC)
f8374000 f838d680 Mup Mup.sys Thu Aug 29 05:12:53 2002 (3D6DE595)
f838e000 f83b6e80 NDIS NDIS.sys Thu Aug 29 05:09:23 2002 (3D6DE4C3)
f83b7000 f8440300 Ntfs Ntfs.sys Thu Aug 29 05:13:37 2002 (3D6DE5C1)
f8441000 f8454780 KSecDD KSecDD.sys Fri Aug 17 16:50:01 2001 (3B7D8379)
f8455000 f8465e80 sr sr.sys Thu Aug 29 04:17:56 2002 (3D6DD8B4)
f8466000 f847c080 SCSIPORT SCSIPORT.SYS Thu Aug 29 04:27:47 2002 (3D6DDB03)
f847d000 f848fe00 viasraid viasraid.sys Thu Oct 30 04:38:31 2003 (3FA0DC17)
f8490000 f84a5380 atapi atapi.sys Thu Aug 29 04:27:48 2002 (3D6DDB04)
f84a6000 f84c9b80 dmio dmio.sys Fri Aug 17 16:58:27 2001 (3B7D8573)
f84ca000 f84e8880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
f84e9000 f8514c80 ACPI ACPI.sys Thu Aug 29 04:09:03 2002 (3D6DD69F)
f8536000 f8545600 pci pci.sys Thu Aug 29 04:09:10 2002 (3D6DD6A6)
f8546000 f854ec00 isapnp isapnp.sys Fri Aug 17 16:58:01 2001 (3B7D8559)
f8556000 f855f280 MountMgr MountMgr.sys Fri Aug 17 16:47:36 2001 (3B7D82E8)
f8566000 f8572000 VolSnap VolSnap.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
f8576000 f857e400 disk disk.sys Thu Aug 29 04:27:56 2002 (3D6DDB0C)
f8586000 f8591500 CLASSPNP CLASSPNP.SYS Thu Aug 29 05:08:42 2002 (3D6DE49A)
f8596000 f85a3980 ohci1394 ohci1394.sys Thu Aug 29 04:33:19 2002 (3D6DDC4F)
f85a6000 f85b2580 1394BUS 1394BUS.SYS Thu Aug 29 04:33:19 2002 (3D6DDC4F)
f8746000 f8754280 nic1394 nic1394.sys Thu Aug 29 04:33:29 2002 (3D6DDC59)
f87b6000 f87bbc80 PCIIDEX PCIIDEX.SYS Thu Aug 29 04:27:47 2002 (3D6DDB03)
f87be000 f87c2900 PartMgr PartMgr.sys Fri Aug 17 21:32:23 2001 (3B7DC5A7)
f87c6000 f87ccd00 viaagp1 viaagp1.sys Wed Jul 02 06:08:01 2003 (3F02AF01)
f87ee000 f87f2d00 flpydisk flpydisk.sys Thu Aug 29 04:27:43 2002 (3D6DDAFF)
f87f6000 f87fd380 Npfs Npfs.SYS Fri Aug 17 16:50:03 2001 (3B7D837B)
f880e000 f8812680 Msfs Msfs.SYS Fri Aug 17 16:50:02 2001 (3B7D837A)
f8816000 f881df00 amdk7 amdk7.sys Tue Dec 17 21:16:16 2002 (3DFFDA70)
f883e000 f8842d00 vga vga.sys Thu Aug 29 04:32:03 2002 (3D6DDC03)
f8886000 f888b500 USBSTOR USBSTOR.SYS Thu Aug 29 04:32:50 2002 (3D6DDC32)
f8946000 f8949000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
f89d2000 f89d5380 dump_diskdump dump_diskdump.sys Thu Aug 29 04:27:54 2002 (3D6DDB0A)
f89de000 f89e0900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
f89f2000 f89f6000 watchdog watchdog.sys Thu Aug 29 04:32:20 2002 (3D6DDC14)
f8a1a000 f8a1d000 ndisuio ndisuio.sys Thu Aug 29 04:35:40 2002 (3D6DDCDC)
f8a36000 f8a37b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
f8a38000 f8a39100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f8a3a000 f8a3b300 viaide viaide.sys Thu Aug 29 04:27:48 2002 (3D6DDB04)
f8a3c000 f8a3d700 dmload dmload.sys Fri Aug 17 16:58:15 2001 (3B7D8567)
f8a9e000 f8a9f280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
f8ac2000 f8ac3f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
f8ac4000 f8ac5080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
f8ac6000 f8ac7080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
f8ac8000 f8ac9080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
f8aec000 f8aeda80 ParVdm ParVdm.SYS Fri Aug 17 16:49:49 2001 (3B7D836D)
f8b8f000 f8b8fd00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)

Unloaded modules:
f3c30000 f3c32000 atiicdxx.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
affe4000 b000b000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b00a1000 b00c8000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b054f000 b05e5000 NAVEX15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b0c63000 b0c73000 NAVENG.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b0410000 b0437000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b0b7e000 b0ba5000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b0ba5000 b0bc8000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8c15000 f8c16000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8626000 f8633000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8656000 f8664000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8a80000 f8a82000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8846000 f884e000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f87fe000 f8803000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f56b7000 f56ba000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

The next step you wrote was: "2) once you have that, we will need to determine which tags are around the corrupted memory, and run those drivers under the Special Pool. "

What do I have to do to find these tags?

 

This dump is a corrupt lookaside list, and not a good canidate for analysis. Can you get another one? Hopefully we can get a pure pool corruption so we dont have to go fishing.

No need to post the information about the drivers anymore nuke this stuff and lower on your next posting.

start end module name
804d4000 806c8e00 nt ntoskrnl.exe Thu Jun 17 13:21:58 2004 (40D1D336)
806c9000 806e8380 hal halaacpi.dll Thu Aug 29 04:05:02 2002 (3D6DD5AE)
affe4000 b000ae80 kmixer kmixer.sys Thu Aug 29 04:32:28 2002 (3D6DDC1C)
b000b000 b00a06a0 NAVEX15 NAVEX15.sys Fri Jul 23 13:50:12 2004 (41014FD4)
b060d000 b064a000 NAVAP NAVAP.sys Wed Jun 19 20:57:11 2002 (3D112867)

 

Ok I got the 0x8e error again.

Opened log file 'c:\debuglog.txt'
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp2_gdr.040517-1325
Kernel base = 0x804d4000 PsLoadedModuleList = 0x8054d4b0
Debug session time: Fri Oct 22 22:29:51 2004
System Uptime: 0 days 0:17:00.555
Loading Kernel Symbols
.......................................................................................................................
Loading unloaded module list
............
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 8E, {c0000005, b07128d4, 81770734, 0}

*** ERROR: Module load completed but symbols could not be loaded for NAVAP.sys
Probably caused by : NAVAP.sys ( NAVAP+158d4 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED (8e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
An exception code of 0x80000002 (STATUS_DATATYPE_MISALIGNMENT) indicates
that an unaligned data reference was encountered. The trap frame will
supply additional information.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: b07128d4, The address that the exception occurred at
Arg3: 81770734, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
NAVAP+158d4
b07128d4 8a440e03 mov al,[esi+ecx+0x3]

TRAP_FRAME: 81770734 -- (.trap ffffffff81770734)
.trap ffffffff81770734
ErrCode = 00000000
eax=00000002 ebx=e223b244 ecx=81770894 edx=e223b244 esi=e228a17c edi=00000019
eip=b07128d4 esp=817707a8 ebp=6354a884 iopl=0 nv up ei pl nz na pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010203
NAVAP+0x158d4:
b07128d4 8a440e03 mov al,[esi+ecx+0x3] ds:0023:639faa13=??
.trap
Resetting default scope

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

LAST_CONTROL_TRANSFER: from 00000000 to b07128d4

STACK_TEXT:
6354a884 00000000 00000000 00000000 00000000 NAVAP+0x158d4


FOLLOWUP_IP:
NAVAP+158d4
b07128d4 8a440e03 mov al,[esi+ecx+0x3]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: NAVAP+158d4

MODULE_NAME: NAVAP

IMAGE_NAME: NAVAP.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 3d112867

STACK_COMMAND: .trap ffffffff81770734 ; kb

BUCKET_ID: 0x8E_NAVAP+158d4

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000008e ecx=00000000 edx=00010002 esi=817706e0 edi=639faa13
eip=8052702b esp=817702f0 ebp=81770308 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x19:
8052702b 5d pop ebp
ChildEBP RetAddr Args to Child
81770308 80517b64 0000008e c0000005 b07128d4 nt!KeBugCheckEx+0x19 (FPO: [Non-Fpo])
817706c4 804dabd3 817706e0 00000000 81770734 nt!KiDispatchException+0x307 (FPO: [Non-Fpo])
8177072c 804dab84 817708a4 e223a718 00000200 nt!CommonDispatchException+0x4d (FPO: [0,20,0])
81770750 b07123a1 00000200 e223a712 e223a010 nt!Kei386EoiHelper+0x18a
WARNING: Stack unwind information not available. Following frames may be wrong.
0000000a 00000000 00000000 00000000 00000000 NAVAP+0x153a1

 

In the error message it lists a lot of stuff on Navap.sys. Is that something the symantec antivirus 8 that is installed on the computer?

 

Can anyone else help, cause I was really trying to finish this computer by tomorrow. This is the first time I've had to deal with this type of problem with building a computer, so I'm really depending on anyone to help. I have all the software installed and just waiting to fix this so I can install Service Pack 2 and deliver this computer.

 

I also tried Prime 95 and when I run the torture test, it uses up the memory alloted to it right away and then after a couple seconds, the computer will freeze or say 'Illegal summout: possible hardware failure' 100 times untill it fails the test.

In the readme Prime 95 says that on 2000, XP machines the illegal sumout usually means there is a software problem somewhere.

Is this caused by the same thing making the stop errors?

 

i will not be able to help you on the timeline you need. Your best bet is to call microsoft for assistance in debugging this machine.

99$ for an online incident submission: http://support.microsoft.com/?LN=en-us&scid=gp;en-us;offerprophone&x=7&y=8

You should be able to recycle the majority of this thread to get rolling rather quickly.

If thats out of your price range, then your stuck with me and my free time

 

I think I have figured out the problem. The cpu is overheating. When we knock the fsb down to 133 from 166, It has no problems. It has passed over 10 prime 95 tests in the torture tests. I get no more blue screens/ stop errors. But what is going on? When set at the normal 166fsb (2167 mhz) the bios says the on die temp is 52C at idle. The fan also only spins at ~2310 rpm's. Should it be faster? But once I turn it down to 133fsb (1733 mhz) I get no problems. Is the cpu or the hsf the problem.

I have ddr400 memory in the machine.
The cpu is an Athlon XP 3000+ 333fsb
The mobo is a Soyo Kt-600 Dragon Ultra Plat.
The hsf is a Thermaltake TR2-M1.

 

I reinstalled the cpu hsf on the cpu and put the thermal compound on the cpu again. It was still stable at 133fsb but once again at 166fsb I got blue screens and failed Prime 95 tests. It was also stable at 140fsb and 150fsb. It was still around 51C at 166fsb and the fan spun at a max of 2343 rpm's and it didn't change when I used the 4 pin molex on the psu. The hsf is rated at a max of 2500 rpm's and up to a Athlon XP 3400+.

Is there something wrong with the cpu?

 

this is outside of my area of expertise. Perhaps it would be wise to spin up a new thread in the hardware forum summarizing your findings to date.

 

Some other people told me to order a new and better cpu cooler, so thats what I did. We'll have to wait and see what happens when it comes in.