1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

DUMP DATA - BSOD claims another hapless victim...

Discussion in 'Windows XP' started by perps, 2004/12/15.

Thread Status:
Not open for further replies.
  1. 2004/12/15
    perps

    perps Inactive Thread Starter

    Joined:
    2004/12/11
    Messages:
    13
    Likes Received:
    0
    Hey all,

    I've been experiencing numerous BSODs and random restarts. I suspect that ther e may be some sort of corruption within the pool of drivers on my machine, but i'm not sure.

    Can anyone make anything of this dump data??

    AMD XP 3000+
    1.5 gb ddr 333 RAM
    RADEON 9600 video

    ********************************************************
    Opened log file 'c:\debuglog.txt'
    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

    Microsoft (R) Windows Debugger Version 6.3.0017.0
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini121504-11.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_rtm.040803-2158
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055ab20
    Debug session time: Wed Dec 15 21:16:15 2004
    System Uptime: 0 days 0:09:41.218
    Loading Kernel Symbols
    .................................................................................................................................
    Loading unloaded module list
    .........
    Loading User Symbols
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000000A, {0, 2, 0, 805457d0}

    Probably caused by : Npfs.SYS ( Npfs!NpRemoveDataQueueEntry+81 )

    Followup: MachineOwner
    ---------

    kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    IRQL_NOT_LESS_OR_EQUAL (a)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high. This is usually
    caused by drivers using improper addresses.
    If a kernel debugger is available get the stack backtrace.
    Arguments:
    Arg1: 00000000, memory referenced
    Arg2: 00000002, IRQL
    Arg3: 00000000, value 0 = read operation, 1 = write operation
    Arg4: 805457d0, address which referenced memory

    Debugging Details:
    ------------------


    READ_ADDRESS: 00000000

    CURRENT_IRQL: 2

    FAULTING_IP:
    nt!ExpCheckForResource+48
    805457d0 8b36 mov esi,[esi]

    CUSTOMER_CRASH_COUNT: 11

    DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT

    BUGCHECK_STR: 0xA

    LAST_CONTROL_TRANSFER: from 8067713f to 805457d0

    STACK_TEXT:
    a33fbb00 8067713f 00eb6fa0 00000000 9fb84fd0 nt!ExpCheckForResource+0x48
    a33fbb18 8066b237 a0eb6fa0 a33fbb40 b9dffdf7 nt!ExFreePoolSanityChecks+0x4d
    a33fbb24 b9dffdf7 a0eb6fa0 00000000 9fb84fd0 nt!VerifierFreePoolWithTag+0x1c
    a33fbb40 b9e029ce 00b84fd0 00000001 a33fbc40 Npfs!NpRemoveDataQueueEntry+0x81
    a33fbb98 b9e0270c 9fb84fd0 00000000 00000000 Npfs!NpReadDataQueue+0x12a
    a33fbc0c b9e027c0 86360460 001b6330 00000400 Npfs!NpCommonRead+0x13a
    a33fbc48 804e3d77 87092668 86a2cb68 806ee2e8 Npfs!NpFsdRead+0x48
    a33fbc58 8066a2c5 86a27ac8 806ee2d0 86a2cb68 nt!IopfCallDriver+0x31
    a33fbc7c 8056a9ab 86a2cbd8 86a2cb68 86360460 nt!IovCallDriver+0xa0
    a33fbc90 80571dc2 87092668 86a2cb68 86360460 nt!IopSynchronousServiceTail+0x60
    a33fbd38 804df06b 000002fc 000002c5 00000000 nt!NtReadFile+0x580
    a33fbd38 7c90eb94 000002fc 000002c5 00000000 nt!KiFastCallEntry+0xf8
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    03afc0d4 00000000 00000000 00000000 00000000 0x7c90eb94


    FOLLOWUP_IP:
    Npfs!NpRemoveDataQueueEntry+81
    b9dffdf7 807d0c00 cmp byte ptr [ebp+0xc],0x0

    SYMBOL_STACK_INDEX: 3

    FOLLOWUP_NAME: MachineOwner

    SYMBOL_NAME: Npfs!NpRemoveDataQueueEntry+81

    MODULE_NAME: Npfs

    IMAGE_NAME: Npfs.SYS

    DEBUG_FLR_IMAGE_TIMESTAMP: 41107b86

    STACK_COMMAND: kb

    BUCKET_ID: 0xA_Npfs!NpRemoveDataQueueEntry+81

    Followup: MachineOwner
    ---------

    eax=80563108 ebx=00000060 ecx=00000000 edx=00000000 esi=00000000 edi=a0eb6fa0
    eip=805457d0 esp=a33fbaf4 ebp=a33fbb00 iopl=0 nv up ei pl nz na po cy
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010207
    nt!ExpCheckForResource+0x48:
    805457d0 8b36 mov esi,[esi] ds:0023:00000000=????????
    ChildEBP RetAddr Args to Child
    a33fbb00 8067713f 00eb6fa0 00000000 9fb84fd0 nt!ExpCheckForResource+0x48 (FPO: [Non-Fpo])
    a33fbb18 8066b237 a0eb6fa0 a33fbb40 b9dffdf7 nt!ExFreePoolSanityChecks+0x4d (FPO: [Non-Fpo])
    a33fbb24 b9dffdf7 a0eb6fa0 00000000 9fb84fd0 nt!VerifierFreePoolWithTag+0x1c (FPO: [Non-Fpo])
    a33fbb40 b9e029ce 00b84fd0 00000001 a33fbc40 Npfs!NpRemoveDataQueueEntry+0x81 (FPO: [Non-Fpo])
    a33fbb98 b9e0270c 9fb84fd0 00000000 00000000 Npfs!NpReadDataQueue+0x12a (FPO: [Non-Fpo])
    a33fbc0c b9e027c0 86360460 001b6330 00000400 Npfs!NpCommonRead+0x13a (FPO: [Non-Fpo])
    a33fbc48 804e3d77 87092668 86a2cb68 806ee2e8 Npfs!NpFsdRead+0x48 (FPO: [Non-Fpo])
    a33fbc58 8066a2c5 86a27ac8 806ee2d0 86a2cb68 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
    a33fbc7c 8056a9ab 86a2cbd8 86a2cb68 86360460 nt!IovCallDriver+0xa0 (FPO: [Non-Fpo])
    a33fbc90 80571dc2 87092668 86a2cb68 86360460 nt!IopSynchronousServiceTail+0x60 (FPO: [Non-Fpo])
    a33fbd38 804df06b 000002fc 000002c5 00000000 nt!NtReadFile+0x580 (FPO: [Non-Fpo])
    a33fbd38 7c90eb94 000002fc 000002c5 00000000 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ a33fbd64)
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    03afc0d4 00000000 00000000 00000000 00000000 0x7c90eb94
    start end module name
    804d7000 806eb780 nt ntoskrnl.exe Wed Aug 04 14:19:48 2004 (41108004)
    806ec000 8070c380 hal halaacpi.dll Wed Aug 04 13:59:05 2004 (41107B29)
    a3760000 a376f900 Cdfs Cdfs.SYS Wed Aug 04 14:14:09 2004 (41107EB1)
    a37c0000 a3800380 HTTP HTTP.sys Wed Aug 04 14:00:09 2004 (41107B69)
    a3876000 a388a400 wdmaud wdmaud.sys Wed Aug 04 14:15:03 2004 (41107EE7)
    a3923000 a3931d80 sysaudio sysaudio.sys Wed Aug 04 14:15:54 2004 (41107F1A)
    a3bfb000 a3c4d180 srv srv.sys Wed Aug 04 14:14:44 2004 (41107ED4)
    a3cc6000 a3cf2400 mrxdav mrxdav.sys Wed Aug 04 14:00:49 2004 (41107B91)
    a3d37000 a3d3ada0 PfModNT PfModNT.sys Wed Mar 05 12:19:28 2003 (3E657AD0)
    a3dc7000 a3dca280 ndisuio ndisuio.sys Wed Aug 04 14:03:10 2004 (41107C1E)
    a66e4000 a66fb480 dump_atapi dump_atapi.sys Wed Aug 04 13:59:41 2004 (41107B4D)
    a6724000 a6747000 Fastfat Fastfat.SYS Wed Aug 04 14:14:15 2004 (41107EB7)
    a6747000 a6767f00 ipnat ipnat.sys Wed Aug 04 14:04:48 2004 (41107C80)
    a6768000 a67e1d60 avg7core avg7core.sys Wed Nov 24 22:56:04 2004 (41A4A104)
    a67e2000 a6850380 mrxsmb mrxsmb.sys Wed Aug 04 14:15:14 2004 (41107EF2)
    a6879000 a68a4180 rdbss rdbss.sys Wed Aug 04 14:20:05 2004 (41108015)
    a68a5000 a68c6d00 afd afd.sys Wed Aug 04 14:14:13 2004 (41107EB5)
    a68c7000 a6909a80 vsdatant vsdatant.sys Wed Nov 03 00:25:00 2004 (4187B4DC)
    a690a000 a6931c00 netbt netbt.sys Wed Aug 04 14:14:36 2004 (41107ECC)
    a6932000 a6989a80 tcpip tcpip.sys Wed Aug 04 14:14:39 2004 (41107ECF)
    a698a000 a699c400 ipsec ipsec.sys Wed Aug 04 14:14:27 2004 (41107EC3)
    a6a2f000 a6a31900 Dxapi Dxapi.sys Sat Aug 18 04:53:19 2001 (3B7D843F)
    aeadf000 aeae1280 rasacd rasacd.sys Sat Aug 18 04:55:39 2001 (3B7D84CB)
    aebb7000 aebd5960 ctsfm2k ctsfm2k.sys Fri Jul 19 10:48:21 2002 (3D377DF5)
    aebd6000 aebee1a0 emupia2k emupia2k.sys Fri Jul 19 10:48:31 2002 (3D377DFF)
    aebef000 aec03ee0 ctac32k ctac32k.sys Fri Jul 19 10:46:27 2002 (3D377D83)
    aec04000 aeca9020 ha10kx2k ha10kx2k.sys Wed Jul 24 13:52:25 2002 (3D3E4099)
    aedb2000 aedb5f00 MODEMCSA MODEMCSA.sys Sat Aug 18 04:57:37 2001 (3B7D8541)
    af161000 af194200 update update.sys Wed Aug 04 13:58:32 2004 (41107B08)
    af195000 af1c5100 rdpdr rdpdr.sys Wed Aug 04 14:01:10 2004 (41107BA6)
    af1c6000 af1d6e00 psched psched.sys Wed Aug 04 14:04:16 2004 (41107C60)
    af1d7000 af1ed680 ndiswan ndiswan.sys Wed Aug 04 14:14:30 2004 (41107EC6)
    af1ee000 af201900 parport parport.sys Wed Aug 04 13:59:04 2004 (41107B28)
    af202000 af215780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 14:07:04 2004 (41107D08)
    af287000 af289580 ndistapi ndistapi.sys Sat Aug 18 04:55:29 2001 (3B7D84C1)
    af28b000 af28ec80 serenum serenum.sys Wed Aug 04 13:59:06 2004 (41107B2A)
    af2d8000 af2d8c00 audstub audstub.sys Sat Aug 18 04:59:40 2001 (3B7D85BC)
    b2bae000 b2bb6880 Fips Fips.SYS Sat Aug 18 09:31:49 2001 (3B7DC585)
    b2bee000 b2bfc100 usbhub usbhub.sys Wed Aug 04 14:08:40 2004 (41107D68)
    b36b8000 b36b9000 Fs_Rec Fs_Rec.SYS unavailable (00000000)
    b36f4000 b36f4d00 dxgthk dxgthk.sys Sat Aug 18 04:53:12 2001 (3B7D8438)
    b36f7000 b36f7b80 msmpu401 msmpu401.sys Sat Aug 18 04:59:59 2001 (3B7D85CF)
    b3be1000 b3bede00 i8042prt i8042prt.sys Wed Aug 04 14:14:36 2004 (41107ECC)
    b446d000 b4476f00 termdd termdd.sys Wed Aug 04 13:58:52 2004 (41107B1C)
    b447d000 b448cd80 serial serial.sys Wed Aug 04 14:15:51 2004 (41107F17)
    b44bb000 b44bc000 Null Null.SYS unavailable (00000000)
    b4a64000 b4a6a000 kbdclass kbdclass.sys Wed Aug 04 13:58:32 2004 (41107B08)
    b4a7c000 b4a80500 watchdog watchdog.sys Wed Aug 04 14:07:32 2004 (41107D24)
    b4a8c000 b4a90880 TDI TDI.SYS Wed Aug 04 14:07:47 2004 (41107D33)
    b4a94000 b4a95000 fdc fdc.sys unavailable (00000000)
    b4a9c000 b4aa0080 raspti raspti.sys Sat Aug 18 04:55:32 2001 (3B7D84C4)
    b4aac000 b4ab0580 ptilink ptilink.sys Sat Aug 18 04:49:53 2001 (3B7D8371)
    b4eb9000 b4ec3200 raspppoe raspppoe.sys Wed Aug 04 14:05:06 2004 (41107C92)
    b4ed9000 b4ee1700 wanarp wanarp.sys Wed Aug 04 14:04:57 2004 (41107C89)
    b4ee9000 b4ef5880 rasl2tp rasl2tp.sys Wed Aug 04 14:14:21 2004 (41107EBD)
    b4f29000 b4f32480 NDProxy NDProxy.SYS Sat Aug 18 04:55:30 2001 (3B7D84C2)
    b52d2000 b52d7a00 mouclass mouclass.sys Wed Aug 04 13:58:32 2004 (41107B08)
    b5412000 b5413100 dump_WMILIB dump_WMILIB.SYS Sat Aug 18 05:07:23 2001 (3B7D878B)
    b561c000 b5624900 msgpc msgpc.sys Wed Aug 04 14:04:11 2004 (41107C5B)
    b6301000 b6302280 USBD USBD.SYS Sat Aug 18 05:02:58 2001 (3B7D8682)
    b697e000 b697f000 flpydisk flpydisk.sys unavailable (00000000)
    b732c000 b732d0e0 avg7rsw avg7rsw.sys Wed Oct 27 23:46:47 2004 (417FC2E7)
    b93b6000 b948a000 ati2mtag ati2mtag.sys Wed Oct 27 09:35:37 2004 (417EFB69)
    b94e3000 b94fbda0 ctoss2k ctoss2k.sys Fri Jul 19 10:48:03 2002 (3D377DE3)
    b94fc000 b951e680 ks ks.sys Wed Aug 04 14:15:20 2004 (41107EF8)
    b951f000 b9542980 portcls portcls.sys Wed Aug 04 14:15:47 2004 (41107F13)
    b9543000 b95ba460 ctaud2k ctaud2k.sys Fri Jul 19 10:47:51 2002 (3D377DD7)
    b95bb000 b965be60 es56hpi es56hpi.sys Fri Oct 26 07:22:47 2001 (3BD89EC7)
    b965c000 b966fc00 NVENET NVENET.sys Thu Nov 28 12:11:13 2002 (3DE59761)
    b9670000 b9692e80 USBPORT USBPORT.SYS Wed Aug 04 14:08:34 2004 (41107D62)
    b96b3000 b96bed00 raspptp raspptp.sys Wed Aug 04 14:14:26 2004 (41107EC2)
    b9d1d000 b9d20c80 mssmbios mssmbios.sys Wed Aug 04 14:07:47 2004 (41107D33)
    b9dd6000 b9dde000 Asapi Asapi.SYS Thu Apr 18 02:27:01 2002 (3CBDBE75)
    b9dde000 b9de5580 Modem Modem.SYS Wed Aug 04 14:08:04 2004 (41107D44)
    b9de6000 b9dec800 usbehci usbehci.sys Wed Aug 04 14:08:34 2004 (41107D62)
    b9dee000 b9df2280 usbohci usbohci.sys Wed Aug 04 14:08:34 2004 (41107D62)
    b9dfe000 b9e05880 Npfs Npfs.SYS Wed Aug 04 14:00:38 2004 (41107B86)
    b9ef6000 b9f04d80 arp1394 arp1394.sys Wed Aug 04 13:58:28 2004 (41107B04)
    baa3b000 baa3d980 gameenum gameenum.sys Wed Aug 04 14:08:20 2004 (41107D54)
    bacbe000 bacc8380 Imapi Imapi.SYS Wed Aug 04 14:00:12 2004 (41107B6C)
    bacee000 bacfd180 nic1394 nic1394.sys Wed Aug 04 13:58:28 2004 (41107B04)
    bad1e000 bad2cb80 drmk drmk.sys Wed Aug 04 14:07:54 2004 (41107D3A)
    bad86000 bada0580 Mup Mup.sys Wed Aug 04 14:15:20 2004 (41107EF8)
    bada1000 badcda80 NDIS NDIS.sys Wed Aug 04 14:14:27 2004 (41107EC3)
    badce000 bae5a480 Ntfs Ntfs.sys Wed Aug 04 14:15:06 2004 (41107EEA)
    bae5b000 bae71780 KSecDD KSecDD.sys Wed Aug 04 13:59:45 2004 (41107B51)
    bae72000 bae83f00 sr sr.sys Wed Aug 04 14:06:22 2004 (41107CDE)
    bae84000 bae85000 fltmgr fltmgr.sys unavailable (00000000)
    baea3000 baeba480 atapi atapi.sys Wed Aug 04 13:59:41 2004 (41107B4D)
    baebb000 baee0700 dmio dmio.sys Wed Aug 04 14:07:13 2004 (41107D11)
    baee1000 baeff880 ftdisk ftdisk.sys Sat Aug 18 04:52:41 2001 (3B7D8419)
    baf10000 baf19200 amdk7 amdk7.sys Wed Aug 04 13:59:19 2004 (41107B37)
    bafa0000 bafb0a80 pci pci.sys Wed Aug 04 14:07:45 2004 (41107D31)
    bafb1000 bafded80 ACPI ACPI.sys Wed Aug 04 14:07:35 2004 (41107D27)
    bf800000 bf9c0380 win32k win32k.sys Wed Aug 04 14:17:30 2004 (41107F7A)
    bf9c1000 bf9d2580 dxg dxg.sys Wed Aug 04 14:00:51 2004 (41107B93)
    bf9d3000 bfa0c000 ati2dvag ati2dvag.dll Wed Oct 27 09:35:57 2004 (417EFB7D)
    bfa0c000 bfa49000 ati2cqag ati2cqag.dll Wed Oct 27 09:22:44 2004 (417EF864)
    bfa49000 bfc76fa0 ati3duag ati3duag.dll Wed Oct 27 09:32:46 2004 (417EFABE)
    bfc77000 bfce4600 ativvaxx ativvaxx.dll Wed Oct 27 09:27:30 2004 (417EF982)
    f75f7000 f75ffc00 isapnp isapnp.sys Sat Aug 18 04:58:01 2001 (3B7D8559)
    f7607000 f7615e80 ohci1394 ohci1394.sys Wed Aug 04 14:10:05 2004 (41107DBD)
    f7617000 f7624000 1394BUS 1394BUS.SYS Wed Aug 04 14:10:03 2004 (41107DBB)
    f7627000 f7631500 MountMgr MountMgr.sys Wed Aug 04 13:58:29 2004 (41107B05)
    f7637000 f7643c80 VolSnap VolSnap.sys Wed Aug 04 14:00:14 2004 (41107B6E)
    f7647000 f764fe00 disk disk.sys Wed Aug 04 13:59:53 2004 (41107B59)
    f7657000 f7663200 CLASSPNP CLASSPNP.SYS Wed Aug 04 14:14:26 2004 (41107EC2)
    f7687000 f7693180 cdrom cdrom.sys Wed Aug 04 13:59:52 2004 (41107B58)
    f76b7000 f76c5080 redbook redbook.sys Wed Aug 04 13:59:34 2004 (41107B46)
    f76f7000 f76ff700 netbios netbios.sys Wed Aug 04 14:03:19 2004 (41107C27)
    f7707000 f770d200 PCIIDEX PCIIDEX.SYS Wed Aug 04 13:59:40 2004 (41107B4C)
    f770f000 f7713900 PartMgr PartMgr.sys Sat Aug 18 09:32:23 2001 (3B7DC5A7)
    f7717000 f771bbc0 PxHelp20 PxHelp20.sys Wed Oct 29 02:25:49 2003 (3F9EB4AD)
    f773f000 f7744280 avg7rsxp avg7rsxp.sys Wed Oct 27 23:51:57 2004 (417FC41D)
    f7767000 f776c200 vga vga.sys Wed Aug 04 14:07:06 2004 (41107D0A)
    f77af000 f77b0000 Msfs Msfs.SYS unavailable (00000000)
    f7897000 f789a000 BOOTVID BOOTVID.dll Sat Aug 18 04:49:09 2001 (3B7D8345)
    f789b000 f789e500 nv_agp nv_agp.sys Sat Sep 07 03:37:05 2002 (3D7903E1)
    f7987000 f7988b80 kdcom kdcom.dll Sat Aug 18 04:49:10 2001 (3B7D8346)
    f7989000 f798a100 WMILIB WMILIB.SYS Sat Aug 18 05:07:23 2001 (3B7D878B)
    f798b000 f798c000 dmload dmload.sys unavailable (00000000)
    f7991000 f7992100 swenum swenum.sys Wed Aug 04 13:58:41 2004 (41107B11)
    f79ab000 f79ac0e0 avgtdi avgtdi.sys Wed Oct 27 23:51:13 2004 (417FC3F1)
    f79e5000 f79e6000 ParVdm ParVdm.SYS unavailable (00000000)
    f79f1000 f79f2080 Beep Beep.SYS Sat Aug 18 04:47:33 2001 (3B7D82E5)
    f79f7000 f79f8600 ctprxy2k ctprxy2k.sys Fri Jul 19 10:48:06 2002 (3D377DE6)
    f79f9000 f79fa080 mnmdd mnmdd.SYS Sat Aug 18 04:57:28 2001 (3B7D8538)
    f7a09000 f7a0a080 RDPCDD RDPCDD.sys Sat Aug 18 04:46:56 2001 (3B7D82C0)
    f7a4f000 f7a4fd00 pciide pciide.sys Sat Aug 18 04:51:49 2001 (3B7D83E5)
    f7a50000 f7a50680 giveio giveio.sys Thu Apr 04 10:33:25 1996 (316334F5)

    Unloaded modules:
    a3829000 a3853000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba394000 ba395000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    a3853000 a3876000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    baf50000 baf5d000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    a39eb000 a39f9000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7a01000 f7a03000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bacfe000 bad07000 processr.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7807000 f780c000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    aeae3000 aeae6000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt

    Thanks all, any help appreciated...
     
    perps,
    #1
  2. 2004/12/15
    JoeHobart

    JoeHobart Inactive Alumni

    Joined:
    2004/05/19
    Messages:
    919
    Likes Received:
    1
    f7a50000 f7a50680 giveio giveio.sys Thu Apr 04 10:33:25 1996 (316334F5)
    I dont know what it is, but its older than I am. Any software written on stone tablets would certainly be the first ones to look at with suspicion.


    You'll need to enable special pool to catch the offending driver.
    http://www.windowsbbs.com/showpost.php?p=205764&postcount=14

    Once you turn that on, youll get a different kind of crash, which should show us a driver with his hand in the cookie jar.
     
    JoeHobart,
    #2


  3. to hide this advert.

  4. 2004/12/15
    perps

    perps Inactive Thread Starter

    Joined:
    2004/12/11
    Messages:
    13
    Likes Received:
    0
    Nice one!

    I'll give that a try. Should only be a matter of time before my machine crashes again...
     
    perps,
    #3
  5. 2004/12/15
    perps

    perps Inactive Thread Starter

    Joined:
    2004/12/11
    Messages:
    13
    Likes Received:
    0
    Ok, i made the registry changes reccommended and when my machine crashed again i got a BSOD with the following info....

    DRIVER_IRQL_NOT_LESS_OR_EQUAL

    afd.sys

    STOP 0X000000D1 (0X0000000F, 0X00000002, 0X00000000, 0XB1F6F5A0)

    I ran the dump through the debugger and this is what came out...



    Opened log file 'c:\debuglog.txt'
    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

    Microsoft (R) Windows Debugger Version 6.3.0017.0
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini121604-02.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_rtm.040803-2158
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055ab20
    Debug session time: Thu Dec 16 12:38:36 2004
    System Uptime: 0 days 0:10:46.140
    Loading Kernel Symbols
    ................................................................................................................................
    Loading unloaded module list
    ..........
    Loading User Symbols
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 100000D1, {f, 2, 0, b1f6f5a0}

    Probably caused by : afd.sys ( afd!AfdIndicatePollEventReal+3a )

    Followup: MachineOwner
    ---------

    kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high. This is usually
    caused by drivers using improper addresses.
    If kernel debugger is available get stack backtrace.
    Arguments:
    Arg1: 0000000f, memory referenced
    Arg2: 00000002, IRQL
    Arg3: 00000000, value 0 = read operation, 1 = write operation
    Arg4: b1f6f5a0, address which referenced memory

    Debugging Details:
    ------------------


    READ_ADDRESS: 0000000f

    CURRENT_IRQL: 2

    FAULTING_IP:
    afd!AfdIndicatePollEventReal+3a
    b1f6f5a0 8b420c mov eax,[edx+0xc]

    CUSTOMER_CRASH_COUNT: 2

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0xD1

    LAST_CONTROL_TRANSFER: from b1f7a62d to b1f6f5a0

    STACK_TEXT:
    f78a6d9c b1f7a62d 88438668 00000004 00000000 afd!AfdIndicatePollEventReal+0x3a
    8858e20c 00000000 00000000 0a050005 7346744e afd!AfdRestartFastDatagramSend+0x8b


    FOLLOWUP_IP:
    afd!AfdIndicatePollEventReal+3a
    b1f6f5a0 8b420c mov eax,[edx+0xc]

    SYMBOL_STACK_INDEX: 0

    FOLLOWUP_NAME: MachineOwner

    SYMBOL_NAME: afd!AfdIndicatePollEventReal+3a

    MODULE_NAME: afd

    IMAGE_NAME: afd.sys

    DEBUG_FLR_IMAGE_TIMESTAMP: 41107eb5

    STACK_COMMAND: kb

    BUCKET_ID: 0xD1_afd!AfdIndicatePollEventReal+3a

    Followup: MachineOwner
    ---------

    eax=8858e1f8 ebx=8858e20c ecx=00000001 edx=00000003 esi=88910578 edi=888018dc
    eip=b1f6f5a0 esp=f78a6d6c ebp=f78a6d9c iopl=0 nv up ei ng nz na pe cy
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010283
    afd!AfdIndicatePollEventReal+0x3a:
    b1f6f5a0 8b420c mov eax,[edx+0xc] ds:0023:0000000f=????????
    ChildEBP RetAddr Args to Child
    f78a6d9c b1f7a62d 88438668 00000004 00000000 afd!AfdIndicatePollEventReal+0x3a (FPO: [Non-Fpo])
    8858e20c 00000000 00000000 0a050005 7346744e afd!AfdRestartFastDatagramSend+0x8b (FPO: [Non-Fpo])
    start end module name
    804d7000 806eb780 nt ntoskrnl.exe Wed Aug 04 14:19:48 2004 (41108004)
    806ec000 8070c380 hal halaacpi.dll Wed Aug 04 13:59:05 2004 (41107B29)
    af2a1000 af2e1380 HTTP HTTP.sys Wed Aug 04 14:00:09 2004 (41107B69)
    af58a000 af5dc180 srv srv.sys Wed Aug 04 14:14:44 2004 (41107ED4)
    af6e1000 af70d400 mrxdav mrxdav.sys Wed Aug 04 14:00:49 2004 (41107B91)
    af72e000 af731da0 PfModNT PfModNT.sys Wed Mar 05 12:19:28 2003 (3E657AD0)
    af980000 af98f900 Cdfs Cdfs.SYS Wed Aug 04 14:14:09 2004 (41107EB1)
    af9b3000 af9c7400 wdmaud wdmaud.sys Wed Aug 04 14:15:03 2004 (41107EE7)
    afc44000 afc47280 ndisuio ndisuio.sys Wed Aug 04 14:03:10 2004 (41107C1E)
    afc80000 afc8ed80 sysaudio sysaudio.sys Wed Aug 04 14:15:54 2004 (41107F1A)
    b1d38000 b1d4f480 dump_atapi dump_atapi.sys Wed Aug 04 13:59:41 2004 (41107B4D)
    b1d78000 b1d9b000 Fastfat Fastfat.SYS Wed Aug 04 14:14:15 2004 (41107EB7)
    b1d9b000 b1e14d60 avg7core avg7core.sys Wed Nov 24 22:56:04 2004 (41A4A104)
    b1e15000 b1e82680 mrxsmb mrxsmb.sys Thu Oct 28 09:14:16 2004 (418047E8)
    b1e83000 b1ea3f00 ipnat ipnat.sys Thu Sep 30 06:28:36 2004 (415B3714)
    b1ea4000 b1ecea00 rdbss rdbss.sys Thu Oct 28 09:13:57 2004 (418047D5)
    b1f6f000 b1f90d00 afd afd.sys Wed Aug 04 14:14:13 2004 (41107EB5)
    b1fb9000 b1ffba80 vsdatant vsdatant.sys Wed Nov 03 00:25:00 2004 (4187B4DC)
    b1ffc000 b2023c00 netbt netbt.sys Wed Aug 04 14:14:36 2004 (41107ECC)
    b2024000 b207ba80 tcpip tcpip.sys Wed Aug 04 14:14:39 2004 (41107ECF)
    b207c000 b208e400 ipsec ipsec.sys Wed Aug 04 14:14:27 2004 (41107EC3)
    ba13f000 ba15d960 ctsfm2k ctsfm2k.sys Fri Jul 19 10:48:21 2002 (3D377DF5)
    ba15e000 ba1761a0 emupia2k emupia2k.sys Fri Jul 19 10:48:31 2002 (3D377DFF)
    ba177000 ba18bee0 ctac32k ctac32k.sys Fri Jul 19 10:46:27 2002 (3D377D83)
    ba18c000 ba231020 ha10kx2k ha10kx2k.sys Wed Jul 24 13:52:25 2002 (3D3E4099)
    ba24a000 ba24c900 Dxapi Dxapi.sys Sat Aug 18 04:53:19 2001 (3B7D843F)
    ba25a000 ba28d200 update update.sys Wed Aug 04 13:58:32 2004 (41107B08)
    ba28e000 ba2be100 rdpdr rdpdr.sys Wed Aug 04 14:01:10 2004 (41107BA6)
    ba2bf000 ba2cfe00 psched psched.sys Wed Aug 04 14:04:16 2004 (41107C60)
    ba2d0000 ba2e6680 ndiswan ndiswan.sys Wed Aug 04 14:14:30 2004 (41107EC6)
    ba3af000 ba3c2900 parport parport.sys Wed Aug 04 13:59:04 2004 (41107B28)
    ba3c3000 ba3d6780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 14:07:04 2004 (41107D08)
    ba3dc000 ba3dcd00 dxgthk dxgthk.sys Sat Aug 18 04:53:12 2001 (3B7D8438)
    ba3f8000 ba3f8b80 Null Null.SYS Sat Aug 18 04:47:39 2001 (3B7D82EB)
    ba417000 ba4eb000 ati2mtag ati2mtag.sys Wed Oct 27 09:35:37 2004 (417EFB69)
    ba4eb000 ba503da0 ctoss2k ctoss2k.sys Fri Jul 19 10:48:03 2002 (3D377DE3)
    ba504000 ba526680 ks ks.sys Wed Aug 04 14:15:20 2004 (41107EF8)
    ba527000 ba54a980 portcls portcls.sys Wed Aug 04 14:15:47 2004 (41107F13)
    ba54b000 ba5c2460 ctaud2k ctaud2k.sys Fri Jul 19 10:47:51 2002 (3D377DD7)
    ba5c3000 ba663e60 es56hpi es56hpi.sys Fri Oct 26 07:22:47 2001 (3BD89EC7)
    ba664000 ba677c00 NVENET NVENET.sys Thu Nov 28 12:11:13 2002 (3DE59761)
    ba678000 ba69ae80 USBPORT USBPORT.SYS Wed Aug 04 14:08:34 2004 (41107D62)
    bac82000 bac84280 rasacd rasacd.sys Sat Aug 18 04:55:39 2001 (3B7D84CB)
    bac8e000 bac91f00 MODEMCSA MODEMCSA.sys Sat Aug 18 04:57:37 2001 (3B7D8541)
    bacae000 bacb6700 netbios netbios.sys Wed Aug 04 14:03:19 2004 (41107C27)
    bacee000 bacf7480 NDProxy NDProxy.SYS Sat Aug 18 04:55:30 2001 (3B7D84C2)
    bacfe000 bad0c100 usbhub usbhub.sys Wed Aug 04 14:08:40 2004 (41107D68)
    bad0e000 bad17f00 termdd termdd.sys Wed Aug 04 13:58:52 2004 (41107B1C)
    bad1e000 bad26900 msgpc msgpc.sys Wed Aug 04 14:04:11 2004 (41107C5B)
    bad2e000 bad39d00 raspptp raspptp.sys Wed Aug 04 14:14:26 2004 (41107EC2)
    bad52000 bad55c80 mssmbios mssmbios.sys Wed Aug 04 14:07:47 2004 (41107D33)
    bad86000 bada0580 Mup Mup.sys Wed Aug 04 14:15:20 2004 (41107EF8)
    bada1000 badcda80 NDIS NDIS.sys Wed Aug 04 14:14:27 2004 (41107EC3)
    badce000 bae5a480 Ntfs Ntfs.sys Wed Aug 04 14:15:06 2004 (41107EEA)
    bae5b000 bae71780 KSecDD KSecDD.sys Wed Aug 04 13:59:45 2004 (41107B51)
    bae72000 bae83f00 sr sr.sys Wed Aug 04 14:06:22 2004 (41107CDE)
    bae84000 baea2780 fltmgr fltmgr.sys Wed Aug 04 14:01:17 2004 (41107BAD)
    baea3000 baeba480 atapi atapi.sys Wed Aug 04 13:59:41 2004 (41107B4D)
    baebb000 baee0700 dmio dmio.sys Wed Aug 04 14:07:13 2004 (41107D11)
    baee1000 baeff880 ftdisk ftdisk.sys Sat Aug 18 04:52:41 2001 (3B7D8419)
    baf00000 baf0a200 raspppoe raspppoe.sys Wed Aug 04 14:05:06 2004 (41107C92)
    baf10000 baf1c880 rasl2tp rasl2tp.sys Wed Aug 04 14:14:21 2004 (41107EBD)
    baf20000 baf2ce00 i8042prt i8042prt.sys Wed Aug 04 14:14:36 2004 (41107ECC)
    baf30000 baf3fd80 serial serial.sys Wed Aug 04 14:15:51 2004 (41107F17)
    baf40000 baf4e080 redbook redbook.sys Wed Aug 04 13:59:34 2004 (41107B46)
    baf50000 baf5c180 cdrom cdrom.sys Wed Aug 04 13:59:52 2004 (41107B58)
    baf60000 baf6a380 Imapi Imapi.SYS Wed Aug 04 14:00:12 2004 (41107B6C)
    baf70000 baf7f180 nic1394 nic1394.sys Wed Aug 04 13:58:28 2004 (41107B04)
    baf80000 baf8eb80 drmk drmk.sys Wed Aug 04 14:07:54 2004 (41107D3A)
    baf90000 baf99200 amdk7 amdk7.sys Wed Aug 04 13:59:19 2004 (41107B37)
    bafa0000 bafb0a80 pci pci.sys Wed Aug 04 14:07:45 2004 (41107D31)
    bafb1000 bafded80 ACPI ACPI.sys Wed Aug 04 14:07:35 2004 (41107D27)
    bf800000 bf9c0380 win32k win32k.sys Wed Aug 04 14:17:30 2004 (41107F7A)
    bf9c1000 bf9d2580 dxg dxg.sys Wed Aug 04 14:00:51 2004 (41107B93)
    bf9d3000 bfa0c000 ati2dvag ati2dvag.dll Wed Oct 27 09:35:57 2004 (417EFB7D)
    bfa0c000 bfa49000 ati2cqag ati2cqag.dll Wed Oct 27 09:22:44 2004 (417EF864)
    bfa49000 bfc76fa0 ati3duag ati3duag.dll Wed Oct 27 09:32:46 2004 (417EFABE)
    bfc77000 bfce4600 ativvaxx ativvaxx.dll Wed Oct 27 09:27:30 2004 (417EF982)
    f75f7000 f75ffc00 isapnp isapnp.sys Sat Aug 18 04:58:01 2001 (3B7D8559)
    f7607000 f7615e80 ohci1394 ohci1394.sys Wed Aug 04 14:10:05 2004 (41107DBD)
    f7617000 f7624000 1394BUS 1394BUS.SYS Wed Aug 04 14:10:03 2004 (41107DBB)
    f7627000 f7631500 MountMgr MountMgr.sys Wed Aug 04 13:58:29 2004 (41107B05)
    f7637000 f7643c80 VolSnap VolSnap.sys Wed Aug 04 14:00:14 2004 (41107B6E)
    f7647000 f764fe00 disk disk.sys Wed Aug 04 13:59:53 2004 (41107B59)
    f7657000 f7663200 CLASSPNP CLASSPNP.SYS Wed Aug 04 14:14:26 2004 (41107EC2)
    f7687000 f768f700 wanarp wanarp.sys Wed Aug 04 14:04:57 2004 (41107C89)
    f7697000 f76a5d80 arp1394 arp1394.sys Wed Aug 04 13:58:28 2004 (41107B04)
    f76a7000 f76af880 Fips Fips.SYS Sat Aug 18 09:31:49 2001 (3B7DC585)
    f7707000 f770d200 PCIIDEX PCIIDEX.SYS Wed Aug 04 13:59:40 2004 (41107B4C)
    f770f000 f7713900 PartMgr PartMgr.sys Sat Aug 18 09:32:23 2001 (3B7DC5A7)
    f7717000 f771bbc0 PxHelp20 PxHelp20.sys Wed Oct 29 02:25:49 2003 (3F9EB4AD)
    f7787000 f778b280 usbohci usbohci.sys Wed Aug 04 14:08:34 2004 (41107D62)
    f778f000 f7795800 usbehci usbehci.sys Wed Aug 04 14:08:34 2004 (41107D62)
    f7797000 f779e580 Modem Modem.SYS Wed Aug 04 14:08:04 2004 (41107D44)
    f779f000 f77a7000 Asapi Asapi.SYS Thu Apr 18 02:27:01 2002 (3CBDBE75)
    f77a7000 f77a8000 fdc fdc.sys unavailable (00000000)
    f77af000 f77b4a00 mouclass mouclass.sys Wed Aug 04 13:58:32 2004 (41107B08)
    f77b7000 f77bd000 kbdclass kbdclass.sys Wed Aug 04 13:58:32 2004 (41107B08)
    f77bf000 f77c3880 TDI TDI.SYS Wed Aug 04 14:07:47 2004 (41107D33)
    f77c7000 f77cb580 ptilink ptilink.sys Sat Aug 18 04:49:53 2001 (3B7D8371)
    f77cf000 f77d3080 raspti raspti.sys Sat Aug 18 04:55:32 2001 (3B7D84C4)
    f77d7000 f77dc000 flpydisk flpydisk.sys Wed Aug 04 13:59:24 2004 (41107B3C)
    f77e7000 f77ec200 vga vga.sys Wed Aug 04 14:07:06 2004 (41107D0A)
    f77ef000 f77f3a80 Msfs Msfs.SYS Wed Aug 04 14:00:37 2004 (41107B85)
    f77f7000 f77fe880 Npfs Npfs.SYS Wed Aug 04 14:00:38 2004 (41107B86)
    f780f000 f7814280 avg7rsxp avg7rsxp.sys Wed Oct 27 23:51:57 2004 (417FC41D)
    f7817000 f781b500 watchdog watchdog.sys Wed Aug 04 14:07:32 2004 (41107D24)
    f7897000 f789a000 BOOTVID BOOTVID.dll Sat Aug 18 04:49:09 2001 (3B7D8345)
    f789b000 f789e500 nv_agp nv_agp.sys Sat Sep 07 03:37:05 2002 (3D7903E1)
    f792f000 f7931980 gameenum gameenum.sys Wed Aug 04 14:08:20 2004 (41107D54)
    f7937000 f793ac80 serenum serenum.sys Wed Aug 04 13:59:06 2004 (41107B2A)
    f793b000 f793d580 ndistapi ndistapi.sys Sat Aug 18 04:55:29 2001 (3B7D84C1)
    f7987000 f7988b80 kdcom kdcom.dll Sat Aug 18 04:49:10 2001 (3B7D8346)
    f7989000 f798a100 WMILIB WMILIB.SYS Sat Aug 18 05:07:23 2001 (3B7D878B)
    f798b000 f798c700 dmload dmload.sys Sat Aug 18 04:58:15 2001 (3B7D8567)
    f7993000 f7994600 ctprxy2k ctprxy2k.sys Fri Jul 19 10:48:06 2002 (3D377DE6)
    f799b000 f799c100 swenum swenum.sys Wed Aug 04 13:58:41 2004 (41107B11)
    f799d000 f799e280 USBD USBD.SYS Sat Aug 18 05:02:58 2001 (3B7D8682)
    f799f000 f79a0f00 Fs_Rec Fs_Rec.SYS Sat Aug 18 04:49:37 2001 (3B7D8361)
    f79a1000 f79a2080 Beep Beep.SYS Sat Aug 18 04:47:33 2001 (3B7D82E5)
    f79a3000 f79a4080 mnmdd mnmdd.SYS Sat Aug 18 04:57:28 2001 (3B7D8538)
    f79a5000 f79a6080 RDPCDD RDPCDD.sys Sat Aug 18 04:46:56 2001 (3B7D82C0)
    f79a7000 f79a80e0 avg7rsw avg7rsw.sys Wed Oct 27 23:46:47 2004 (417FC2E7)
    f79ad000 f79ae100 dump_WMILIB dump_WMILIB.SYS Sat Aug 18 05:07:23 2001 (3B7D878B)
    f79c9000 f79caa80 ParVdm ParVdm.SYS Sat Aug 18 04:49:49 2001 (3B7D836D)
    f79cb000 f79cc0e0 avgtdi avgtdi.sys Wed Oct 27 23:51:13 2004 (417FC3F1)
    f7a4f000 f7a4fd00 pciide pciide.sys Sat Aug 18 04:51:49 2001 (3B7D83E5)
    f7a8a000 f7a8ab80 msmpu401 msmpu401.sys Sat Aug 18 04:59:59 2001 (3B7D85CF)
    f7a8b000 f7a8bc00 audstub audstub.sys Sat Aug 18 04:59:40 2001 (3B7D85BC)

    Unloaded modules:
    f7a50000 f7a51000 giveio.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    af8c6000 af8f0000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    af990000 af9b3000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba3e5000 ba3e6000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b1f0f000 b1f1c000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b1f1f000 b1f2d000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f79d9000 f79db000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bac9e000 baca7000 processr.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f77df000 f77e4000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bac86000 bac89000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt


    Is afd.sys the culprit?? What is that file responsible for?? What should i do to sort this out??

    Thanks for your time,

    Mike.
     
    perps,
    #4
  6. 2004/12/16
    JoeHobart

    JoeHobart Inactive Alumni

    Joined:
    2004/05/19
    Messages:
    919
    Likes Received:
    1
    Mike, This latest crash doesn't give us good info. Sometimes it takes a couple of passes of crashes to catch a driver violating the special pool. Its not uncommon to take a few rounds.

    Keep posting new dumps, you can trim off all that driver spew at the bottom next time. You can snip everything below start end module name
     
    JoeHobart,
    #5
  7. 2005/01/05
    SiNuS

    SiNuS Inactive

    Joined:
    2005/01/05
    Messages:
    1
    Likes Received:
    0
    Do You have WinXP with Service Pack 2?
    Replace file windows/system32/drivers/afd.sys
    with afd.sys from WinXP with Service Pack 1.
    If You updated Windows from SP1 to SP2 You
    should have old file in directory
    windows/$NtServicePackUninstall$

    p.s. sorry for my english ;-|
     
    SiNuS,
    #6
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...