Random Reboots II (Dump Data)

markf · 2005/03/25

Hi, I posted some debug logs previously when my I was having trouble with my PC randomly rebooting (17 March 05). There was nothing obvious in the debug log file then to suggest the cause of the problem, and as I needed the PC for work I thought I'd fix it by upgrading. I replaced the motherboard, CPU, RAM and powersupply. All looked ok until today... I got a blue screen again without warning. Actually it's done it twice in the last few hours. Looking at the first debug log file I thought it may have been the graphics card, which is the same one used in the previous system. I found that there were newer drivers, so I installed those. However it still crashed a second time. Here are the debug logs from the two crashes. If anyone can throw some light on a cause of my problems, I'd be very grateful!

Mark

(I've run into the character limit. I'll post the debug logs separately.)

markf · 2005/03/25

Crash 1:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINNT\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

************************************************************************
WARNING: Dump file has inconsistent set-bit count. Data may be missing.
************************************************************************
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
Product: WinNt
Kernel base = 0x80400000 PsLoadedModuleList = 0x80480780
Debug session time: Fri Mar 25 17:17:44.000 2005 (GMT+12)
System Uptime: 0 days 21:29:29.684
Loading Kernel Symbols
....................................................................................................
Loading unloaded module list
..................................
Loading User Symbols
......................................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck DE, {2, e4151be4, e4151bec, 4e0498c2}

*** ERROR: Symbol file could not be found. Defaulted to export symbols for SYMEVENT.SYS -
*** WARNING: Unable to verify checksum for ANSYS.EXE
*** ERROR: Module load completed but symbols could not be loaded for ANSYS.EXE
Probably caused by : SYMEVENT.SYS ( SYMEVENT+6353 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

POOL_CORRUPTION_IN_FILE_AREA (de)
A driver corrupted pool memory used for holding pages destined for disk.
This was discovered by the memory manager when dereferencing the file.
Arguments:
Arg1: 00000002
Arg2: e4151be4
Arg3: e4151bec
Arg4: 4e0498c2

Debugging Details:
------------------

OVERLAPPED_MODULE: nv4_disp

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xDE

LAST_CONTROL_TRANSFER: from 80410d87 to 8043d148

STACK_TEXT:
bd04773c 80410d87 88e48c68 bd047800 00000001 nt!MmPurgeSection+0x2c4
bd0477a4 80410c8a 88e4d174 bd047844 00000000 nt!CcPurgeCacheSection+0xeb
bd047800 80410a38 88b33428 bd047844 ffffffff nt!CcPurgeAndClearCacheSection+0x112
bd04788c bfef31cf 88a0cab8 e410b808 ffffffff nt!CcSetFileSizes+0x20e
bd0478c0 bff13ea8 88a0cab8 e410b808 e410b7f8 Ntfs!NtfsSetBothCacheSizes+0x67
bd04793c bff3092e 88a93648 88a0cab8 00000005 Ntfs!NtfsDeleteAllocation+0x3c1
bd047a3c bff30e0d 88a93648 88a22374 e410b728 Ntfs!NtfsReplaceAttribute+0x3f5
bd047aec bff209cb 88a93648 88a22208 88a22374 Ntfs!NtfsOverwriteAttr+0x41d
bd047bf8 bff0f9fb 88a93648 88a22208 88a22374 Ntfs!NtfsOpenAttributeInExistingFile+0x362
bd047d04 bff0f375 88a93648 88a22208 88a22374 Ntfs!NtfsOpenExistingPrefixFcb+0x339
bd048024 bff0c5a2 88a93648 88a22208 bd048098 Ntfs!NtfsCommonCreate+0x786
bd0480d8 8041d1af 88dc97c0 88a22208 00000000 Ntfs!NtfsFsdCreate+0x1fe
bd0480ec be8d8353 bd04813c bd048100 00000000 nt!IopfCallDriver+0x35
WARNING: Stack unwind information not available. Following frames may be wrong.
bd0482fc 804be204 88dc6580 00000000 bd0483ec SYMEVENT+0x6353
bd048334 8044f397 88b3c188 00000000 bd0483ec nt!IopParseFile+0x44
bd0483ac 804d3add 00000018 bd0484a8 00000042 nt!ObpLookupObjectName+0xf1
bd0484bc 8049def1 00000000 00000000 00000001 nt!ObOpenObjectByName+0xc5
bd048598 8049da96 059d5780 c0100080 059d571c nt!IopCreateFile+0x407
bd0485e0 804a5424 059d5780 c0100080 059d571c nt!IoCreateFile+0x36
bd048620 80463f64 059d5780 c0100080 059d571c nt!NtCreateFile+0x2e
bd048620 77f87cb7 059d5780 c0100080 059d571c nt!KiSystemService+0xc4
059d56dc 7c58c520 059d5780 c0100080 059d571c ntdll!NtCreateFile+0xb
059d5778 7c58c1d9 00000000 c0000000 00000003 KERNEL32!CreateFileW+0x343
059d579c 7801b8ef 03e2b7c0 c0000000 00000003 KERNEL32!CreateFileA+0x2e
059d57e4 7801b6a1 059d5818 059d581c 03e2b7c0 msvcrt!_open+0x23b
059d583c 00482888 03e2b7c0 00008302 00000180 msvcrt!_open+0x43
059d597c 004a806e 0492e60c 059d5dd0 00000104 ANSYS+0x82888
059d5c0c 01caaf09 0492e608 0492e60c 03071fe0 ANSYS+0xa806e
059d5fd4 00fd00e6 03da6d10 03da6d08 00000000 ANSYS+0x18aaf09
059d60b4 00d73237 00000000 ffffffff 059d7390 ANSYS+0xbd00e6
059d6b94 00b145a5 03da69d8 00b143b7 059d7390 ANSYS+0x973237
059d6cac 0096bc03 03da4b00 059d8774 059d7390 ANSYS+0x7145a5
059d7544 0045dbe6 03da4b00 059d8774 059d8734 ANSYS+0x56bc03
059d7584 00410b9e 059d8734 00000008 03da4b00 ANSYS+0x5dbe6
059d88ec 00414307 059daa44 059d9f90 00000280 ANSYS+0x10b9e
059daa8c 00af28b3 059daaac 059dabd0 00000000 ANSYS+0x14307
059db02c 00934492 00000011 00000000 00000001 ANSYS+0x6f28b3
059db044 00933cf7 00000045 000000c4 00000000 ANSYS+0x534492
059db31c 77e3a420 003f0228 00000111 000101db ANSYS+0x533cf7
059db33c 77e16b41 00933c09 003f0228 00000111 USER32!UserCallWinProc+0x18
059db360 77e16b64 00933c09 003f0228 00000111 USER32!CallWindowProcAorW+0x94
059db380 00933821 00933c09 003f0228 00000111 USER32!CallWindowProcA+0x19
059dc3f0 77e3a420 000f02a0 00000111 000101db ANSYS+0x533821
059dc410 77e14750 009330d0 000f02a0 00000111 USER32!UserCallWinProc+0x18
059dc42c 77e155b0 05e183b8 00000111 000101db USER32!DispatchClientMessage+0x4b
059dc454 77f9ff57 059dc464 00000018 05e183b8 USER32!__fnDWORD+0x22
059dc478 77e2d640 000f02a0 00e302d3 059dcea8 ntdll!KiUserCallbackDispatcher+0x13
bd048914 8042e5d4 bd0489d4 bd0489cc 00000000 nt!KiCallUserMode+0x4
bd048978 a0005bf4 00000002 bd0489a8 00000018 nt!KeUserModeCallback+0xa6
bd048c08 a0002ae2 a03b83b8 00000111 000101db win32k!SfnDWORD+0xc2

FOLLOWUP_IP:
SYMEVENT+6353
be8d8353 6a00 push 0x0

SYMBOL_STACK_INDEX: d

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: SYMEVENT+6353

MODULE_NAME: SYMEVENT

IMAGE_NAME: SYMEVENT.SYS

DEBUG_FLR_IMAGE_TIMESTAMP: 3ec1d807

STACK_COMMAND: kb

FAILURE_BUCKET_ID: 0xDE_SYMEVENT+6353

BUCKET_ID: 0xDE_SYMEVENT+6353

Followup: MachineOwner
---------

eax=ffdff13c ebx=000000de ecx=fbba1cca edx=00000400 esi=88c541a8 edi=897ea6d8
eip=8043d148 esp=bd0476fc ebp=bd04773c iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00200286
nt!MmPurgeSection+0x2c4:
8043d148 8b470c mov eax,[edi+0xc] ds:0023:897ea6e4=00000208
ChildEBP RetAddr Args to Child
bd04773c 80410d87 88e48c68 bd047800 00000001 nt!MmPurgeSection+0x2c4 (FPO: [Non-Fpo])
bd0477a4 80410c8a 88e4d174 bd047844 00000000 nt!CcPurgeCacheSection+0xeb (FPO: [Non-Fpo])
bd047800 80410a38 88b33428 bd047844 ffffffff nt!CcPurgeAndClearCacheSection+0x112 (FPO: [Non-Fpo])
bd04788c bfef31cf 88a0cab8 e410b808 ffffffff nt!CcSetFileSizes+0x20e (FPO: [Non-Fpo])
bd0478c0 bff13ea8 88a0cab8 e410b808 e410b7f8 Ntfs!NtfsSetBothCacheSizes+0x67 (FPO: [Non-Fpo])
bd04793c bff3092e 88a93648 88a0cab8 00000005 Ntfs!NtfsDeleteAllocation+0x3c1 (FPO: [Non-Fpo])
bd047a3c bff30e0d 88a93648 88a22374 e410b728 Ntfs!NtfsReplaceAttribute+0x3f5 (FPO: [Non-Fpo])
bd047aec bff209cb 88a93648 88a22208 88a22374 Ntfs!NtfsOverwriteAttr+0x41d (FPO: [Non-Fpo])
bd047bf8 bff0f9fb 88a93648 88a22208 88a22374 Ntfs!NtfsOpenAttributeInExistingFile+0x362 (FPO: [Non-Fpo])
bd047d04 bff0f375 88a93648 88a22208 88a22374 Ntfs!NtfsOpenExistingPrefixFcb+0x339 (FPO: [Non-Fpo])
bd048024 bff0c5a2 88a93648 88a22208 bd048098 Ntfs!NtfsCommonCreate+0x786 (FPO: [Non-Fpo])
bd0480d8 8041d1af 88dc97c0 88a22208 00000000 Ntfs!NtfsFsdCreate+0x1fe (FPO: [Non-Fpo])
bd0480ec be8d8353 bd04813c bd048100 00000000 nt!IopfCallDriver+0x35 (FPO: [0,0,2])
WARNING: Stack unwind information not available. Following frames may be wrong.
bd0482fc 804be204 88dc6580 00000000 bd0483ec SYMEVENT+0x6353
bd048334 8044f397 88b3c188 00000000 bd0483ec nt!IopParseFile+0x44 (FPO: [Non-Fpo])
bd0483ac 804d3add 00000018 bd0484a8 00000042 nt!ObpLookupObjectName+0xf1 (FPO: [Non-Fpo])
bd0484bc 8049def1 00000000 00000000 00000001 nt!ObOpenObjectByName+0xc5 (FPO: [Non-Fpo])
bd048598 8049da96 059d5780 c0100080 059d571c nt!IopCreateFile+0x407 (FPO: [Non-Fpo])
bd0485e0 804a5424 059d5780 c0100080 059d571c nt!IoCreateFile+0x36 (FPO: [Non-Fpo])
bd048620 80463f64 059d5780 c0100080 059d571c nt!NtCreateFile+0x2e (FPO: [Non-Fpo])
start end module name
00400000 049d5000 ANSYS ANSYS.EXE Sat Nov 06 19:56:44 2004 (418C75AC)
05ae0000 05afa000 jpeg62 jpeg62.dll Wed Jan 28 07:02:44 2004 (4016A7C4)
05b00000 05b1a000 png png.dll Wed Jan 28 07:08:50 2004 (4016A932)
05b20000 05b2e000 zlib zlib.dll Wed Jan 28 07:09:17 2004 (4016A94D)
05b30000 05b52000 libguide40 libguide40.dll Wed Jan 28 07:09:39 2004 (4016A963)
10000000 10659000 cadoe cadoe.dll Sat Nov 06 13:55:06 2004 (418C20EA)
41120000 4114d000 libAnsTclTk libAnsTclTk.dll Sat Nov 06 16:09:34 2004 (418C406E)
41150000 411de000 tcl84 tcl84.dll Wed Jul 30 06:49:58 2003 (3F26C1D6)
411e0000 412dd000 tk84 tk84.dll Sat Sep 20 05:56:05 2003 (3F6B4335)
444e0000 444e6000 tclreg83 tclreg83.dll Tue Jun 04 00:12:39 2002 (3CFB5D37)
444f0000 4450a000 itcl32 itcl32.dll Wed Feb 12 08:06:06 2003 (3E49499E)
44510000 4451d000 itk32 itk32.dll Wed Feb 12 08:06:10 2003 (3E4949A2)
44520000 44539000 img12 img12.dll Tue Jun 24 07:24:15 2003 (3EF753DF)
45950000 45eba000 ansysb ansysb.dll Sat Nov 06 14:07:59 2004 (418C23EF)
45ec0000 46119000 mkl_def mkl_def.dll Wed Aug 06 02:35:14 2003 (3F2FC0A2)
51000000 5104d000 DDRAW DDRAW.dll Wed Dec 04 22:21:42 2002 (3DEDC926)
69510000 695d7000 opengl32 opengl32.dll Fri Jun 20 14:44:12 2003 (3EF274FC)
6a8f0000 6a910000 MSVFW32 MSVFW32.dll Fri Jun 20 14:44:08 2003 (3EF274F8)
6e420000 6e426000 INDICDLL INDICDLL.dll Tue Nov 30 22:32:46 1999 (384399BE)
6fac0000 6fadf000 GLU32 GLU32.dll Tue Nov 30 22:32:27 1999 (384399AB)
70a70000 70ad6000 SHLWAPI SHLWAPI.DLL Wed Dec 08 15:11:49 2004 (41B662E5)
71710000 71794000 COMCTL32 COMCTL32.DLL Fri Aug 30 02:13:07 2002 (3D6E2BF3)
728a0000 728a6000 DCIMAN32 DCIMAN32.dll Tue Nov 30 22:31:52 1999 (38439988)
72e90000 72ea1000 CTL3D32 CTL3D32.dll Tue Nov 30 22:31:45 1999 (38439981)
74870000 74886000 AVIFIL32 AVIFIL32.dll Fri Jun 20 14:43:49 2003 (3EF274E5)
74fd0000 74fee000 msafd msafd.dll Fri Jun 20 14:44:06 2003 (3EF274F6)
75010000 75017000 wshtcpip wshtcpip.dll Fri Jun 20 14:44:22 2003 (3EF27506)
75020000 75028000 WS2HELP WS2HELP.DLL Tue Nov 30 22:31:09 1999 (3843995D)
75030000 75044000 WS2_32 WS2_32.DLL Fri Jun 20 14:44:22 2003 (3EF27506)
75050000 75058000 WSOCK32 WSOCK32.dll Fri Jun 20 14:44:22 2003 (3EF27506)
75150000 7515f000 SAMLIB SAMLIB.dll Wed Mar 24 14:17:02 2004 (4060EF9E)
75170000 751bf000 NETAPI32 NETAPI32.dll Fri Jun 11 04:58:10 2004 (40C89322)
751c0000 751c6000 NETRAP NETRAP.dll Tue Nov 30 22:31:07 1999 (3843995B)
75e60000 75e7a000 IMM32 IMM32.dll Fri Jun 20 14:43:46 2003 (3EF274E2)
76620000 76630000 MPR MPR.DLL Wed Mar 24 14:17:02 2004 (4060EF9E)
76b30000 76b6e000 comdlg32 comdlg32.dll Fri Jun 20 14:43:43 2003 (3EF274DF)
77320000 77337000 MPRAPI MPRAPI.DLL Wed Dec 01 20:37:29 1999 (3844D039)
77340000 77353000 iphlpapi iphlpapi.dll Fri Jun 20 14:43:42 2003 (3EF274DE)
77360000 77379000 DHCPCSVC DHCPCSVC.DLL Fri Jun 20 14:43:42 2003 (3EF274DE)
77380000 773a3000 ADSLDPC ADSLDPC.DLL Fri Jun 20 14:43:42 2003 (3EF274DE)
773b0000 773df000 ACTIVEDS ACTIVEDS.DLL Fri Jun 20 14:43:42 2003 (3EF274DE)
77410000 77423000 MSACM32 MSACM32.dll Wed Dec 01 20:37:29 1999 (3844D039)
774c0000 774d1000 RASMAN RASMAN.DLL Fri May 02 12:39:13 2003 (3EB1BE31)
774e0000 77513000 RASAPI32 RASAPI32.DLL Fri Jun 20 14:43:42 2003 (3EF274DE)
77520000 77525000 icmp icmp.Dll Wed Dec 01 20:37:29 1999 (3844D039)
77530000 77552000 TAPI32 TAPI32.DLL Fri Jun 20 14:43:42 2003 (3EF274DE)
77570000 775a0000 WINMM WINMM.dll Wed Dec 01 20:37:28 1999 (3844D038)
777e0000 777e8000 winrnr winrnr.dll Wed Dec 01 20:37:27 1999 (3844D037)
777f0000 777f5000 rasadhlp rasadhlp.dll Wed Dec 01 20:37:27 1999 (3844D037)
77800000 7781e000 WINSPOOL WINSPOOL.DRV Fri Jun 20 14:43:41 2003 (3EF274DD)
77830000 7783e000 RTUTILS RTUTILS.DLL Wed Dec 01 20:37:27 1999 (3844D037)
77880000 7790e000 SETUPAPI SETUPAPI.DLL Fri Jun 20 14:43:41 2003 (3EF274DD)
77950000 7797a000 WLDAP32 WLDAP32.DLL Fri Jun 20 14:43:41 2003 (3EF274DD)
77980000 779a4000 DNSAPI DNSAPI.DLL Wed Mar 24 14:17:00 2004 (4060EF9C)
779b0000 77a4b000 OLEAUT32 OLEAUT32.DLL Fri Jun 20 14:43:41 2003 (3EF274DD)
77a50000 77b3f000 ole32 ole32.dll Fri Jan 14 14:27:08 2005 (41E71FEC)
77bf0000 77c01000 NTDSAPI NTDSAPI.dll Fri Jun 20 14:43:41 2003 (3EF274DD)
77d30000 77da1000 RPCRT4 RPCRT4.DLL Fri Mar 12 10:29:21 2004 (4050DA31)
77e10000 77e6f000 USER32 USER32.dll Wed Dec 29 22:14:10 2004 (41D27562)
77f40000 77f7b000 GDI32 GDI32.dll Tue Jun 22 13:35:10 2004 (40D78CCE)
77f80000 77ffd000 ntdll ntdll.dll Wed Mar 24 14:16:59 2004 (4060EF9B)
78000000 78045000 msvcrt msvcrt.dll Wed Mar 12 07:55:17 2003 (3E6E3115)
780c0000 78121000 MSVCP60 MSVCP60.dll Thu Jun 18 06:52:10 1998 (3588105A)
782c0000 782cc000 rnr20 rnr20.dll Fri Jun 20 14:43:41 2003 (3EF274DD)
782f0000 78535000 SHELL32 SHELL32.DLL Fri Dec 10 22:27:29 2004 (41B96C01)
7c0f0000 7c151000 USERENV USERENV.DLL Wed Aug 06 10:14:10 2003 (3F302C32)
7c2d0000 7c332000 ADVAPI32 ADVAPI32.dll Wed Mar 24 14:17:00 2004 (4060EF9C)
7c340000 7c34f000 Secur32 Secur32.dll Fri Jun 20 14:43:41 2003 (3EF274DD)
7c570000 7c623000 KERNEL32 KERNEL32.dll Tue Jun 22 13:35:10 2004 (40D78CCE)
7f000000 7f07e000 DFORMD DFORMD.DLL Thu Jul 18 02:40:20 2002 (3D3581D4)
80062000 80076100 hal halaacpi.dll Fri Mar 21 14:04:40 2003 (3E7A7338)
80400000 8059a800 nt ntoskrnl.exe Thu Oct 21 16:55:33 2004 (41773335)
a0000000 a018ec40 win32k win32k.sys Sat Dec 25 06:23:30 2004 (41CC5092)
ba2d6000 ba2fa240 kmixer kmixer.sys Wed Apr 16 16:02:03 2003 (3E9CD5BB)
bbcb1000 bbcf9000 ATMFD ATMFD.DLL unavailable (FFFFFFFE)
bcef4000 bcf1ec00 NAVAP NAVAP.SYS Sun Dec 09 11:59:59 2001 (3C129B6F)
bcf1f000 bcfb7a60 NavEx15 NavEx15.Sys Fri Dec 31 10:45:19 2004 (41D476EF)
bcfb8000 bcfc8960 NAVENG NAVENG.Sys Fri Dec 31 10:46:10 2004 (41D47722)
bd069000 bd08b3c0 Fastfat Fastfat.SYS Thu Jan 16 08:48:39 2003 (3E25BB17)
bd134000 bd1433c0 Udfs Udfs.SYS Thu Jan 16 08:54:03 2003 (3E25BC5B)
bd2b9000 bd2caf80 wdmaud wdmaud.sys Wed Apr 16 16:23:02 2003 (3E9CDAA6)
bd2cb000 bd306bc0 srv srv.sys Wed Apr 30 11:05:07 2003 (3EAF0523)
bd33f000 bd34dfe0 Cdfs Cdfs.SYS Wed Apr 16 15:58:53 2003 (3E9CD4FD)
bd41f000 bd43c4a0 afd afd.sys Wed Apr 30 20:45:29 2003 (3EAF8D29)
bd43d000 bd452c80 fortips fortips.sys Thu Sep 23 13:57:30 2004 (41522D8A)
bd487000 bd489780 CdaC15BA CdaC15BA.SYS Mon Apr 08 20:50:52 2002 (3CB159EC)
bd693000 bda23480 nv4_disp nv4_disp.dll Sat Oct 30 14:15:58 2004 (4182EB4E)
be7cb000 be7e0180 dump_atapi dump_atapi.sys Wed Apr 02 06:08:25 2003 (3E89D599)
be809000 be86dca0 mrxsmb mrxsmb.sys Thu Jan 20 20:25:21 2005 (41EF5CE1)
be880000 be8a9900 rdbss rdbss.sys Fri Dec 03 16:37:11 2004 (41AFDF67)
be8aa000 be8d1e00 netbt netbt.sys Thu Jul 17 07:44:26 2003 (3F15AB1A)
be8d2000 be8e2a60 SYMEVENT SYMEVENT.SYS Wed May 14 17:45:43 2003 (3EC1D807)
be8e3000 be922da0 SYMTDI SYMTDI.SYS Sat Jan 22 18:55:40 2005 (41F1EADC)
be923000 be974060 tcpip tcpip.sys Wed Apr 30 11:05:31 2003 (3EAF053B)
be9d5000 be9e08c0 sysaudio sysaudio.sys Wed Apr 16 16:21:44 2003 (3E9CDA58)
bfa67000 bfa913a0 update update.sys Wed Apr 16 16:22:01 2003 (3E9CDA69)
bfaa2000 bfaa7060 SYMREDRV SYMREDRV.SYS Sat Jan 22 18:58:32 2005 (41F1EB88)
bfae2000 bfaf8ba0 ndiswan ndiswan.sys Wed Apr 30 11:05:01 2003 (3EAF051D)
bfb21000 bfb40d00 KS KS.SYS Thu Dec 05 06:09:38 2002 (3DEE36D2)
bfb41000 bfb651e0 portcls portcls.sys Wed Apr 16 16:11:22 2003 (3E9CD7EA)
bfb66000 bfb91000 vinyl97 vinyl97.sys Tue Feb 01 21:39:02 2005 (41FF4026)
bfb91000 bfbb2b20 USBPORT USBPORT.SYS Tue Mar 11 04:47:39 2003 (3E6CB39B)
bfbb3000 bfe652c0 nv4_mini nv4_mini.sys Sat Oct 30 14:20:09 2004 (4182EC49)
bfe82000 bfe85580 vga vga.sys Sun Sep 26 06:37:40 1999 (37ED1674)
bfeae000 bfec3640 Mup Mup.sys Thu Jan 16 08:54:01 2003 (3E25BC59)
bfec4000 bfeedaa0 NDIS NDIS.sys Wed Apr 30 11:05:01 2003 (3EAF051D)
bfeee000 bff705a0 Ntfs Ntfs.sys Sat May 10 07:46:45 2003 (3EBC05A5)
bff71000 bff827c0 KSecDD KSecDD.sys Sun Sep 21 12:32:19 2003 (3F6CF193)
bff83000 bff98180 atapi atapi.sys Wed Apr 02 06:08:25 2003 (3E89D599)
bff99000 bffba9c0 dmio dmio.sys Thu Jan 16 08:47:04 2003 (3E25BAB8)
bffbb000 bffd7220 ftdisk ftdisk.sys Tue Apr 01 10:21:58 2003 (3E88BF86)
bffd8000 bffffc20 ACPI ACPI.sys Thu Jan 16 08:44:22 2003 (3E25BA16)
f6400000 f640e6a0 pci pci.sys Thu Jan 16 08:44:07 2003 (3E25BA07)

....continued in next post...

markf · 2005/03/25

f6410000 f641b680 isapnp isapnp.sys Thu Jan 16 08:43:47 2003 (3E25B9F3)
f6420000 f6428700 CLASSPNP CLASSPNP.SYS Thu Jan 16 08:42:51 2003 (3E25B9BB)
f6450000 f645c4c0 VIDEOPRT VIDEOPRT.SYS Thu Jan 16 08:47:20 2003 (3E25BAC8)
f6460000 f646a600 fetnd5bv fetnd5bv.sys Fri Jan 28 18:57:51 2005 (41F9D45F)
f6470000 f647f400 serial serial.sys Wed Apr 16 16:19:39 2003 (3E9CD9DB)
f6480000 f648b680 i8042prt i8042prt.sys Wed Apr 16 16:00:59 2003 (3E9CD57B)
f6490000 f649ca80 rasl2tp rasl2tp.sys Wed Apr 30 11:05:06 2003 (3EAF0522)
f64a0000 f64abc40 raspptp raspptp.sys Thu May 15 11:47:00 2003 (3EC2D574)
f64b0000 f64bea20 parallel parallel.sys Thu Jan 16 08:47:14 2003 (3E25BAC2)
f64c0000 f64c9be0 usbhub usbhub.sys Wed Mar 19 11:30:41 2003 (3E77AC21)
f64d0000 f64dc160 usbhub20 usbhub20.sys Thu Jan 16 08:45:59 2003 (3E25BA77)
f64f0000 f64f9ce0 NDProxy NDProxy.SYS Fri Oct 01 11:25:35 1999 (37F3F16F)
f6500000 f6508fa0 Npfs Npfs.SYS Sun Oct 10 12:58:07 1999 (37FFD68F)
f6510000 f6518680 msgpc msgpc.sys Thu Jan 16 08:54:25 2003 (3E25BC71)
f6520000 f65281a0 netbios netbios.sys Wed Oct 13 08:34:19 1999 (38038D3B)
f6620000 f6628240 Fips Fips.SYS Wed May 10 03:28:29 2000 (39182E9D)
f6680000 f6685520 PCIIDEX PCIIDEX.SYS Wed Feb 26 07:31:08 2003 (3E5BB66C)
f6688000 f668f4c0 MountMgr MountMgr.sys Wed Feb 11 08:47:53 2004 (40293569)
f6690000 f6697720 disk disk.sys Thu Jan 16 08:43:05 2003 (3E25B9C9)
f6698000 f669ed00 viaagp1 viaagp1.sys Wed Jul 02 22:19:52 2003 (3F02B1C8)
f66a8000 f66aca60 flpydisk flpydisk.sys Thu Jan 16 08:42:52 2003 (3E25B9BC)
f66b8000 f66bd200 iviaspi iviaspi.sys Thu Sep 11 18:36:53 2003 (3F601805)
f66c0000 f66c6a20 EFS EFS.SYS Thu Jan 16 08:46:55 2003 (3E25BAAF)
f66c8000 f66cec40 cdrom cdrom.sys Thu Jan 16 08:43:04 2003 (3E25B9C8)
f66d0000 f66d7f40 uhcd uhcd.sys Thu Jan 16 08:45:50 2003 (3E25BA6E)
f66e8000 f66ecfc0 USBD USBD.SYS Thu Jan 23 06:05:33 2003 (3E2ECF5D)
f66f8000 f66fcc00 usbehci usbehci.sys Tue May 06 08:50:04 2003 (3EB6CE7C)
f6708000 f670d460 usbprint usbprint.sys Thu Jan 16 08:44:07 2003 (3E25BA07)
f6718000 f671f000 fdc fdc.sys unavailable (FFFFFFFE)
f6730000 f6736100 parport parport.sys Thu Jan 16 08:47:13 2003 (3E25BAC1)
f6738000 f673d240 Msfs Msfs.SYS Wed Oct 27 12:21:32 1999 (3816377C)
f6740000 f6745400 mouclass mouclass.sys Fri Feb 21 05:37:45 2003 (3E550459)
f6750000 f6755ec0 kbdclass kbdclass.sys Fri Feb 21 05:37:30 2003 (3E55044A)
f6760000 f6767d00 wanarp wanarp.sys Sat Aug 17 00:25:01 2002 (3D5CEF1D)
f6770000 f6774400 ptilink ptilink.sys Thu Jan 16 08:47:15 2003 (3E25BAC3)
f6780000 f67840e0 raspti raspti.sys Sat Oct 09 09:45:10 1999 (37FE57D6)
f6810000 f6812a20 BOOTVID BOOTVID.dll Thu Nov 04 14:24:33 1999 (3820E051)
f6814000 f6816d00 PartMgr PartMgr.sys Thu Jan 16 08:43:07 2003 (3E25B9CB)
f6818000 f681be80 fortidrv fortidrv.sys Thu Sep 23 13:57:24 2004 (41522D84)
f6880000 f6883640 serenum serenum.sys Thu Jan 16 08:47:01 2003 (3E25BAB5)
f688c000 f688e2e0 ndistapi ndistapi.sys Thu Jan 16 08:54:15 2003 (3E25BC67)
f689c000 f689fe60 TDI TDI.SYS Thu Jan 16 08:56:26 2003 (3E25BCEA)
f68a0000 f68a2200 ftvnic ftvnic.sys Thu Sep 23 13:57:31 2004 (41522D8B)
f68ac000 f68ae900 vulfntr vulfntr.sys Wed Nov 13 22:34:04 2002 (3DD21C8C)
f6900000 f6901d20 Diskperf Diskperf.sys Thu Feb 13 10:34:38 2003 (3E4ABDEE)
f6902000 f6903b80 dmload dmload.sys Thu Jan 16 08:47:06 2003 (3E25BABA)
f6904000 f69056a0 viaide viaide.sys Thu Oct 18 19:11:14 2001 (3BCE7282)
f6910000 f6911ca0 Fs_Rec Fs_Rec.SYS Thu Jan 16 08:53:30 2003 (3E25BC3A)
f6918000 f6919e40 rasacd rasacd.sys Sun Sep 26 06:41:23 1999 (37ED1753)
f696c000 f696d860 ParVdm ParVdm.SYS Tue Sep 28 15:28:16 1999 (37F035D0)
f69c8000 f69c8f80 WMILIB WMILIB.SYS Sun Sep 26 06:36:47 1999 (37ED163F)
f69c9000 f69c9b00 pciide pciide.sys Thu Jan 16 08:43:03 2003 (3E25B9C7)
f69ce000 f69cef80 dump_WMILIB dump_WMILIB.SYS Sun Sep 26 06:36:47 1999 (37ED163F)
f69ec000 f69eca40 audstub audstub.sys Sun Sep 26 06:35:33 1999 (37ED15F5)
f69f7000 f69f8000 swenum swenum.sys Thu Dec 05 06:10:07 2002 (3DEE36EF)
f6a0a000 f6a0a9e0 Null Null.SYS Sun Sep 26 06:34:58 1999 (37ED15D2)
f6a0c000 f6a0cee0 Beep Beep.SYS Thu Oct 21 11:18:59 1999 (380E3FD3)
f6a0f000 f6a0ff80 mnmdd mnmdd.SYS Sun Sep 26 06:37:40 1999 (37ED1674)

Unloaded modules:
ba2d6000 ba2fb000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba2d6000 ba2fb000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba2d6000 ba2fb000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba72d000 ba752000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba72d000 ba752000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bab54000 bab79000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bab54000 bab79000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
babf4000 bac19000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
babf4000 bac19000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
babf4000 bac19000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
babf4000 bac19000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
babf4000 bac19000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
babf4000 bac19000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f66f0000 f66f6000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
babf4000 bac19000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bb01b000 bb040000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bb1ec000 bb211000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bb1d7000 bb1ec000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
bb1d7000 bb1ec000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
bb1d7000 bb1ec000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
bb1d7000 bb1ec000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
bb715000 bb73a000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bb5fe000 bb613000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
bb5fe000 bb613000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
bb5fe000 bb613000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
bb97c000 bb9a1000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bd1cc000 bd1f1000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
be9b5000 be9c2000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
be9c5000 be9d3000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bda0f000 bda24000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
bd693000 bda24000 nv4_disp.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
f6530000 f6539000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6720000 f6725000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
bfe8a000 bfe8d000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

markf · 2005/03/25

Crash 2:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINNT\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

************************************************************************
WARNING: Dump file has inconsistent set-bit count. Data may be missing.
************************************************************************
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
Product: WinNt
Kernel base = 0x80400000 PsLoadedModuleList = 0x80480780
Debug session time: Fri Mar 25 21:29:20.796 2005 (GMT+12)
System Uptime: 0 days 0:00:17.468
Loading Kernel Symbols
.................................................................................
Loading unloaded module list
...
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {f7857d44, 2, 0, 80431250}

Probably caused by : ntoskrnl.exe ( nt!KiUnwaitThread+8 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: f7857d44, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 80431250, address which referenced memory

Debugging Details:
------------------

READ_ADDRESS: f7857d44 Nonpaged pool

CURRENT_IRQL: 2

FAULTING_IP:
nt!KiUnwaitThread+8
80431250 8b7004 mov esi,[eax+0x4]

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 80431481 to 80431250

TRAP_FRAME: 8047069c -- (.trap ffffffff8047069c)
.trap ffffffff8047069c
ErrCode = 00000000
eax=f7857d40 ebx=89069b20 ecx=89069b20 edx=80480b08 esi=80480b08 edi=f6857d78
eip=80431250 esp=80470710 ebp=80470734 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!KiUnwaitThread+0x8:
80431250 8b7004 mov esi,[eax+0x4] ds:0023:f7857d44=????????
.trap
Resetting default scope

STACK_TEXT:
80470714 80431481 00000000 80470764 f6857d70 nt!KiUnwaitThread+0x8
80470734 804308a9 0000005e f6857d88 80470840 nt!KiWaitTest+0xdf
80470824 80430834 8046c630 8046c8c0 ffdff000 nt!KiTimerListExpire+0x6d
80470850 80463417 8047ff20 00000000 0000045d nt!KiTimerExpiration+0xb4
80470864 804633b2 0000000e 00000000 00000000 nt!KiRetireDpcList+0x30
8047086c 00000000 00000000 00000000 00000000 nt!KiIdleLoop+0x26

FOLLOWUP_IP:
nt!KiUnwaitThread+8
80431250 8b7004 mov esi,[eax+0x4]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!KiUnwaitThread+8

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 41773335

STACK_COMMAND: .trap ffffffff8047069c ; kb

FAILURE_BUCKET_ID: 0xA_nt!KiUnwaitThread+8

BUCKET_ID: 0xA_nt!KiUnwaitThread+8

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000000a ecx=00000000 edx=40000000 esi=80431250 edi=f7857d44
eip=80466d47 esp=80470688 ebp=8047069c iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x20b:
80466d47 f7457000000200 test dword ptr [ebp+0x70],0x20000 ss:0010:8047070c=00010206
ChildEBP RetAddr Args to Child
8047069c 80431250 00000000 bff89f52 00000000 nt!KiTrap0E+0x20b (FPO: [0,0] TrapFrame @ 8047069c)
80470714 80431481 00000000 80470764 f6857d70 nt!KiUnwaitThread+0x8 (FPO: [1,0,2])
80470734 804308a9 0000005e f6857d88 80470840 nt!KiWaitTest+0xdf (FPO: [Non-Fpo])
80470824 80430834 8046c630 8046c8c0 ffdff000 nt!KiTimerListExpire+0x6d (FPO: [Non-Fpo])
80470850 80463417 8047ff20 00000000 0000045d nt!KiTimerExpiration+0xb4 (FPO: [Non-Fpo])
80470864 804633b2 0000000e 00000000 00000000 nt!KiRetireDpcList+0x30 (FPO: [0,0,0])
8047086c 00000000 00000000 00000000 00000000 nt!KiIdleLoop+0x26
start end module name
80062000 80076100 hal halaacpi.dll Fri Mar 21 14:04:40 2003 (3E7A7338)
80400000 8059a800 nt ntoskrnl.exe Thu Oct 21 16:55:33 2004 (41773335)
be732000 be747180 dump_atapi dump_atapi.sys Wed Apr 02 06:08:25 2003 (3E89D599)
be770000 be7d4ca0 mrxsmb mrxsmb.sys Thu Jan 20 20:25:21 2005 (41EF5CE1)
be7e7000 be810900 rdbss rdbss.sys Fri Dec 03 16:37:11 2004 (41AFDF67)
be811000 be838e00 netbt netbt.sys Thu Jul 17 07:44:26 2003 (3F15AB1A)
be839000 be849a60 SYMEVENT SYMEVENT.SYS Wed May 14 17:45:43 2003 (3EC1D807)
be84a000 be889da0 SYMTDI SYMTDI.SYS Sat Jan 22 18:55:40 2005 (41F1EADC)
be88a000 be8db060 tcpip tcpip.sys Wed Apr 30 11:05:31 2003 (3EAF053B)
bf9ce000 bf9f83a0 update update.sys Wed Apr 16 16:22:01 2003 (3E9CDA69)
bfa49000 bfa5fba0 ndiswan ndiswan.sys Wed Apr 30 11:05:01 2003 (3EAF051D)
bfa88000 bfaa7d00 KS KS.SYS Thu Dec 05 06:09:38 2002 (3DEE36D2)
bfaa8000 bfacc1e0 portcls portcls.sys Wed Apr 16 16:11:22 2003 (3E9CD7EA)
bfacd000 bfaf8000 vinyl97 vinyl97.sys Tue Feb 01 21:39:02 2005 (41FF4026)
bfaf8000 bfb19b20 USBPORT USBPORT.SYS Tue Mar 11 04:47:39 2003 (3E6CB39B)
bfb1a000 bfe654c0 nv4_mini nv4_mini.sys Fri Feb 25 05:13:44 2005 (421DFD38)
bfe82000 bfe85580 vga vga.sys Sun Sep 26 06:37:40 1999 (37ED1674)
bfeae000 bfec3640 Mup Mup.sys Thu Jan 16 08:54:01 2003 (3E25BC59)
bfec4000 bfeedaa0 NDIS NDIS.sys Wed Apr 30 11:05:01 2003 (3EAF051D)
bfeee000 bff705a0 Ntfs Ntfs.sys Sat May 10 07:46:45 2003 (3EBC05A5)
bff71000 bff827c0 KSecDD KSecDD.sys Sun Sep 21 12:32:19 2003 (3F6CF193)
bff83000 bff98180 atapi atapi.sys Wed Apr 02 06:08:25 2003 (3E89D599)
bff99000 bffba9c0 dmio dmio.sys Thu Jan 16 08:47:04 2003 (3E25BAB8)
bffbb000 bffd7220 ftdisk ftdisk.sys Tue Apr 01 10:21:58 2003 (3E88BF86)
bffd8000 bffffc20 ACPI ACPI.sys Thu Jan 16 08:44:22 2003 (3E25BA16)
f6400000 f640e6a0 pci pci.sys Thu Jan 16 08:44:07 2003 (3E25BA07)
f6410000 f641b680 isapnp isapnp.sys Thu Jan 16 08:43:47 2003 (3E25B9F3)
f6420000 f6428700 CLASSPNP CLASSPNP.SYS Thu Jan 16 08:42:51 2003 (3E25B9BB)
f6450000 f645c4c0 VIDEOPRT VIDEOPRT.SYS Thu Jan 16 08:47:20 2003 (3E25BAC8)
f6460000 f646a600 fetnd5bv fetnd5bv.sys Fri Jan 28 18:57:51 2005 (41F9D45F)
f6470000 f647f400 serial serial.sys Wed Apr 16 16:19:39 2003 (3E9CD9DB)
f6480000 f648b680 i8042prt i8042prt.sys Wed Apr 16 16:00:59 2003 (3E9CD57B)
f6490000 f649ca80 rasl2tp rasl2tp.sys Wed Apr 30 11:05:06 2003 (3EAF0522)
f64a0000 f64abc40 raspptp raspptp.sys Thu May 15 11:47:00 2003 (3EC2D574)
f64b0000 f64bea20 parallel parallel.sys Thu Jan 16 08:47:14 2003 (3E25BAC2)
f64c0000 f64c9be0 usbhub usbhub.sys Wed Mar 19 11:30:41 2003 (3E77AC21)
f64d0000 f64dc160 usbhub20 usbhub20.sys Thu Jan 16 08:45:59 2003 (3E25BA77)
f64f0000 f64f9ce0 NDProxy NDProxy.SYS Fri Oct 01 11:25:35 1999 (37F3F16F)
f6500000 f6508fa0 Npfs Npfs.SYS Sun Oct 10 12:58:07 1999 (37FFD68F)
f6510000 f6518680 msgpc msgpc.sys Thu Jan 16 08:54:25 2003 (3E25BC71)
f6520000 f65281a0 netbios netbios.sys Wed Oct 13 08:34:19 1999 (38038D3B)
f6680000 f6685520 PCIIDEX PCIIDEX.SYS Wed Feb 26 07:31:08 2003 (3E5BB66C)
f6688000 f668f4c0 MountMgr MountMgr.sys Wed Feb 11 08:47:53 2004 (40293569)
f6690000 f6697720 disk disk.sys Thu Jan 16 08:43:05 2003 (3E25B9C9)
f6698000 f669ed00 viaagp1 viaagp1.sys Wed Jul 02 22:19:52 2003 (3F02B1C8)
f66a8000 f66aca60 flpydisk flpydisk.sys Thu Jan 16 08:42:52 2003 (3E25B9BC)
f66b8000 f66bd200 iviaspi iviaspi.sys Thu Sep 11 18:36:53 2003 (3F601805)
f66c8000 f66cec40 cdrom cdrom.sys Thu Jan 16 08:43:04 2003 (3E25B9C8)
f66d0000 f66d7f40 uhcd uhcd.sys Thu Jan 16 08:45:50 2003 (3E25BA6E)
f66d8000 f66dea20 EFS EFS.SYS Thu Jan 16 08:46:55 2003 (3E25BAAF)
f66e8000 f66ecfc0 USBD USBD.SYS Thu Jan 23 06:05:33 2003 (3E2ECF5D)
f66f8000 f66fcc00 usbehci usbehci.sys Tue May 06 08:50:04 2003 (3EB6CE7C)
f6708000 f670d240 Msfs Msfs.SYS Wed Oct 27 12:21:32 1999 (3816377C)
f6718000 f671e580 fdc fdc.sys Thu Jan 16 08:42:51 2003 (3E25B9BB)
f6728000 f672fd00 wanarp wanarp.sys Sat Aug 17 00:25:01 2002 (3D5CEF1D)
f6730000 f6736100 parport parport.sys Thu Jan 16 08:47:13 2003 (3E25BAC1)
f6740000 f6745400 mouclass mouclass.sys Fri Feb 21 05:37:45 2003 (3E550459)
f6750000 f6755ec0 kbdclass kbdclass.sys Fri Feb 21 05:37:30 2003 (3E55044A)
f6758000 f675d460 usbprint usbprint.sys Thu Jan 16 08:44:07 2003 (3E25BA07)
f6770000 f6774400 ptilink ptilink.sys Thu Jan 16 08:47:15 2003 (3E25BAC3)
f6780000 f67840e0 raspti raspti.sys Sat Oct 09 09:45:10 1999 (37FE57D6)
f6810000 f6812a20 BOOTVID BOOTVID.dll Thu Nov 04 14:24:33 1999 (3820E051)
f6814000 f6816d00 PartMgr PartMgr.sys Thu Jan 16 08:43:07 2003 (3E25B9CB)
f6818000 f681be80 fortidrv fortidrv.sys Thu Sep 23 13:57:24 2004 (41522D84)
f6880000 f6883640 serenum serenum.sys Thu Jan 16 08:47:01 2003 (3E25BAB5)
f688c000 f688e2e0 ndistapi ndistapi.sys Thu Jan 16 08:54:15 2003 (3E25BC67)
f689c000 f689fe60 TDI TDI.SYS Thu Jan 16 08:56:26 2003 (3E25BCEA)
f68a0000 f68a2200 ftvnic ftvnic.sys Thu Sep 23 13:57:31 2004 (41522D8B)
f68ac000 f68ae900 vulfntr vulfntr.sys Wed Nov 13 22:34:04 2002 (3DD21C8C)
f6900000 f6901d20 Diskperf Diskperf.sys Thu Feb 13 10:34:38 2003 (3E4ABDEE)
f6902000 f6903b80 dmload dmload.sys Thu Jan 16 08:47:06 2003 (3E25BABA)
f6904000 f69056a0 viaide viaide.sys Thu Oct 18 19:11:14 2001 (3BCE7282)
f6910000 f6911ca0 Fs_Rec Fs_Rec.SYS Thu Jan 16 08:53:30 2003 (3E25BC3A)
f6918000 f6919e40 rasacd rasacd.sys Sun Sep 26 06:41:23 1999 (37ED1753)
f69c8000 f69c8f80 WMILIB WMILIB.SYS Sun Sep 26 06:36:47 1999 (37ED163F)
f69c9000 f69c9b00 pciide pciide.sys Thu Jan 16 08:43:03 2003 (3E25B9C7)
f69cc000 f69ccf80 dump_WMILIB dump_WMILIB.SYS Sun Sep 26 06:36:47 1999 (37ED163F)
f69ec000 f69eca40 audstub audstub.sys Sun Sep 26 06:35:33 1999 (37ED15F5)
f69f7000 f69f8000 swenum swenum.sys Thu Dec 05 06:10:07 2002 (3DEE36EF)
f6a08000 f6a089e0 Null Null.SYS Sun Sep 26 06:34:58 1999 (37ED15D2)
f6a0a000 f6a0aee0 Beep Beep.SYS Thu Oct 21 11:18:59 1999 (380E3FD3)
f6a0d000 f6a0df80 mnmdd mnmdd.SYS Sun Sep 26 06:37:40 1999 (37ED1674)

Unloaded modules:
f6530000 f6539000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f66f0000 f66f5000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
bfe8a000 bfe8d000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

markf · 2005/03/26

Another crash; more data:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINNT\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

************************************************************************
WARNING: Dump file has inconsistent set-bit count. Data may be missing.
************************************************************************
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
Product: WinNt
Kernel base = 0x80400000 PsLoadedModuleList = 0x80480780
Debug session time: Sun Mar 27 04:21:54.390 2005 (GMT+12)
System Uptime: 1 days 5:26:54.059
Loading Kernel Symbols
.....................................................................................................
Loading unloaded module list
..................................................
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {f789bd9c, 1, 80428edd, 0}

Probably caused by : USBPORT.SYS ( USBPORT!USBPORT_WorkerThread+40 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: f789bd9c, memory referenced.
Arg2: 00000001, value 0 = read operation, 1 = write operation.
Arg3: 80428edd, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------

OVERLAPPED_MODULE:

WRITE_ADDRESS: f789bd9c Nonpaged pool

FAULTING_IP:
nt!KeQuerySystemTime+b
80428edd 894204 mov [edx+0x4],eax

MM_INTERNAL_CODE: 0

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

LAST_CONTROL_TRANSFER: from bfad5164 to 80428edd

TRAP_FRAME: f689bd04 -- (.trap fffffffff689bd04)
.trap fffffffff689bd04
ErrCode = 00000002
eax=01c5321f ebx=00000000 ecx=00000000 edx=f789bd98 esi=890230e0 edi=80428ed2
eip=80428edd esp=f689bd78 ebp=f689bd78 iopl=0 nv up ei ng nz na po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010287
nt!KeQuerySystemTime+0xb:
80428edd 894204 mov [edx+0x4],eax ds:0023:f789bd9c=????????
.trap
Resetting default scope

STACK_TEXT:
f689bd78 bfad5164 f789bd98 00000000 00000000 nt!KeQuerySystemTime+0xb
f789bda8 00000000 00000000 00000000 00000000 USBPORT!USBPORT_WorkerThread+0x40

FOLLOWUP_IP:
USBPORT!USBPORT_WorkerThread+40
bfad5164 8b45f0 mov eax,[ebp-0x10]

SYMBOL_STACK_INDEX: 1

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: USBPORT!USBPORT_WorkerThread+40

MODULE_NAME: USBPORT

IMAGE_NAME: USBPORT.SYS

DEBUG_FLR_IMAGE_TIMESTAMP: 3e6cb39b

STACK_COMMAND: .trap fffffffff689bd04 ; kb

FAILURE_BUCKET_ID: 0x50_W_USBPORT!USBPORT_WorkerThread+40

BUCKET_ID: 0x50_W_USBPORT!USBPORT_WorkerThread+40

Followup: MachineOwner
---------

eax=ffdff13c ebx=00000050 ecx=f689bd04 edx=804630b6 esi=80064b7c edi=c03de26c
eip=80448d37 esp=f689bcac ebp=f689bcec iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!MmAccessFault+0x757:
80448d37 33c0 xor eax,eax
ChildEBP RetAddr Args to Child
f689bcec 80466bff 00000001 f789bd9c 00000000 nt!MmAccessFault+0x757 (FPO: [Non-Fpo])
f689bcec 80428edd 00000001 f789bd9c 00000000 nt!KiTrap0E+0xc3 (FPO: [0,0] TrapFrame @ f689bd04)
f689bd78 bfad5164 f789bd98 00000000 00000000 nt!KeQuerySystemTime+0xb (FPO: [Non-Fpo])
f789bda8 00000000 00000000 00000000 00000000 USBPORT!USBPORT_WorkerThread+0x40 (FPO: [Non-Fpo])
start end module name
80062000 80076100 hal halaacpi.dll Fri Mar 21 14:04:40 2003 (3E7A7338)
80400000 8059a800 nt ntoskrnl.exe Thu Oct 21 16:55:33 2004 (41773335)
a0000000 a018ec40 win32k win32k.sys Sat Dec 25 06:23:30 2004 (41CC5092)
b985c000 b986c960 NAVENG NAVENG.Sys Fri Dec 31 10:46:10 2004 (41D47722)
b986d000 b9905a60 NavEx15 NavEx15.Sys Fri Dec 31 10:45:19 2004 (41D476EF)
b9df2000 b9e3a000 ATMFD ATMFD.DLL unavailable (FFFFFFFE)
bca61000 bca703c0 Udfs Udfs.SYS Thu Jan 16 08:54:03 2003 (3E25BC5B)
bcec1000 bceebc00 NAVAP NAVAP.SYS Sun Dec 09 11:59:59 2001 (3C129B6F)
bcf96000 bcfb83c0 Fastfat Fastfat.SYS Thu Jan 16 08:48:39 2003 (3E25BB17)
bd1be000 bd1cff80 wdmaud wdmaud.sys Wed Apr 16 16:23:02 2003 (3E9CDAA6)
bd1f8000 bd233bc0 srv srv.sys Wed Apr 30 11:05:07 2003 (3EAF0523)
bd26c000 bd27afe0 Cdfs Cdfs.SYS Wed Apr 16 15:58:53 2003 (3E9CD4FD)
bd34c000 bd3694a0 afd afd.sys Wed Apr 30 20:45:29 2003 (3EAF8D29)
bd36a000 bd37fc80 fortips fortips.sys Thu Sep 23 13:57:30 2004 (41522D8A)
bd3a8000 bd3aa780 CdaC15BA CdaC15BA.SYS Mon Apr 08 20:50:52 2002 (3CB159EC)
bd5c0000 bd98a300 nv4_disp nv4_disp.dll Fri Feb 25 05:08:56 2005 (421DFC18)
be732000 be747180 dump_atapi dump_atapi.sys Wed Apr 02 06:08:25 2003 (3E89D599)
be770000 be7d4ca0 mrxsmb mrxsmb.sys Thu Jan 20 20:25:21 2005 (41EF5CE1)
be7e7000 be810900 rdbss rdbss.sys Fri Dec 03 16:37:11 2004 (41AFDF67)
be811000 be838e00 netbt netbt.sys Thu Jul 17 07:44:26 2003 (3F15AB1A)
be839000 be849a60 SYMEVENT SYMEVENT.SYS Wed May 14 17:45:43 2003 (3EC1D807)
be84a000 be889da0 SYMTDI SYMTDI.SYS Sat Jan 22 18:55:40 2005 (41F1EADC)
be88a000 be8db060 tcpip tcpip.sys Wed Apr 30 11:05:31 2003 (3EAF053B)
bf9ce000 bf9f83a0 update update.sys Wed Apr 16 16:22:01 2003 (3E9CDA69)
bfa19000 bfa1e060 SYMREDRV SYMREDRV.SYS Sat Jan 22 18:58:32 2005 (41F1EB88)
bfa49000 bfa5fba0 ndiswan ndiswan.sys Wed Apr 30 11:05:01 2003 (3EAF051D)
bfa60000 bfa7fd00 KS KS.SYS Thu Dec 05 06:09:38 2002 (3DEE36D2)
bfa80000 bfaa41e0 portcls portcls.sys Wed Apr 16 16:11:22 2003 (3E9CD7EA)
bfaa5000 bfad0000 vinyl97 vinyl97.sys Tue Feb 01 21:39:02 2005 (41FF4026)
bfad0000 bfaf1b20 USBPORT USBPORT.SYS Tue Mar 11 04:47:39 2003 (3E6CB39B)
bfb1a000 bfe654c0 nv4_mini nv4_mini.sys Fri Feb 25 05:13:44 2005 (421DFD38)
bfe7a000 bfe7d580 vga vga.sys Sun Sep 26 06:37:40 1999 (37ED1674)
bfeae000 bfec3640 Mup Mup.sys Thu Jan 16 08:54:01 2003 (3E25BC59)
bfec4000 bfeedaa0 NDIS NDIS.sys Wed Apr 30 11:05:01 2003 (3EAF051D)
bfeee000 bff705a0 Ntfs Ntfs.sys Sat May 10 07:46:45 2003 (3EBC05A5)
bff71000 bff827c0 KSecDD KSecDD.sys Sun Sep 21 12:32:19 2003 (3F6CF193)
bff83000 bff98180 atapi atapi.sys Wed Apr 02 06:08:25 2003 (3E89D599)
bff99000 bffba9c0 dmio dmio.sys Thu Jan 16 08:47:04 2003 (3E25BAB8)
bffbb000 bffd7220 ftdisk ftdisk.sys Tue Apr 01 10:21:58 2003 (3E88BF86)
bffd8000 bffffc20 ACPI ACPI.sys Thu Jan 16 08:44:22 2003 (3E25BA16)
f6400000 f640e6a0 pci pci.sys Thu Jan 16 08:44:07 2003 (3E25BA07)
f6410000 f641b680 isapnp isapnp.sys Thu Jan 16 08:43:47 2003 (3E25B9F3)
f6420000 f6428700 CLASSPNP CLASSPNP.SYS Thu Jan 16 08:42:51 2003 (3E25B9BB)
f6450000 f645c4c0 VIDEOPRT VIDEOPRT.SYS Thu Jan 16 08:47:20 2003 (3E25BAC8)
f6460000 f646a600 fetnd5bv fetnd5bv.sys Fri Jan 28 18:57:51 2005 (41F9D45F)
f6470000 f647f400 serial serial.sys Wed Apr 16 16:19:39 2003 (3E9CD9DB)
f6480000 f648b680 i8042prt i8042prt.sys Wed Apr 16 16:00:59 2003 (3E9CD57B)
f6490000 f649ca80 rasl2tp rasl2tp.sys Wed Apr 30 11:05:06 2003 (3EAF0522)
f64a0000 f64abc40 raspptp raspptp.sys Thu May 15 11:47:00 2003 (3EC2D574)
f64b0000 f64bea20 parallel parallel.sys Thu Jan 16 08:47:14 2003 (3E25BAC2)
f64c0000 f64c9be0 usbhub usbhub.sys Wed Mar 19 11:30:41 2003 (3E77AC21)
f64d0000 f64dc160 usbhub20 usbhub20.sys Thu Jan 16 08:45:59 2003 (3E25BA77)
f64f0000 f64f9ce0 NDProxy NDProxy.SYS Fri Oct 01 11:25:35 1999 (37F3F16F)
f6500000 f6508fa0 Npfs Npfs.SYS Sun Oct 10 12:58:07 1999 (37FFD68F)
f6510000 f6518680 msgpc msgpc.sys Thu Jan 16 08:54:25 2003 (3E25BC71)
f6520000 f65281a0 netbios netbios.sys Wed Oct 13 08:34:19 1999 (38038D3B)
f65a0000 f65ab8c0 sysaudio sysaudio.sys Wed Apr 16 16:21:44 2003 (3E9CDA58)
f65d0000 f65d8240 Fips Fips.SYS Wed May 10 03:28:29 2000 (39182E9D)
f6680000 f6685520 PCIIDEX PCIIDEX.SYS Wed Feb 26 07:31:08 2003 (3E5BB66C)
f6688000 f668f4c0 MountMgr MountMgr.sys Wed Feb 11 08:47:53 2004 (40293569)
f6690000 f6697720 disk disk.sys Thu Jan 16 08:43:05 2003 (3E25B9C9)
f6698000 f669ed00 viaagp1 viaagp1.sys Wed Jul 02 22:19:52 2003 (3F02B1C8)
f66a8000 f66aca60 flpydisk flpydisk.sys Thu Jan 16 08:42:52 2003 (3E25B9BC)
f66b8000 f66bd200 iviaspi iviaspi.sys Thu Sep 11 18:36:53 2003 (3F601805)
f66c8000 f66cec40 cdrom cdrom.sys Thu Jan 16 08:43:04 2003 (3E25B9C8)
f66d0000 f66d7f40 uhcd uhcd.sys Thu Jan 16 08:45:50 2003 (3E25BA6E)
f66d8000 f66dea20 EFS EFS.SYS Thu Jan 16 08:46:55 2003 (3E25BAAF)
f66e8000 f66ecfc0 USBD USBD.SYS Thu Jan 23 06:05:33 2003 (3E2ECF5D)
f66f8000 f66fcc00 usbehci usbehci.sys Tue May 06 08:50:04 2003 (3EB6CE7C)
f6708000 f670d240 Msfs Msfs.SYS Wed Oct 27 12:21:32 1999 (3816377C)
f6718000 f671f000 fdc fdc.sys unavailable (FFFFFFFE)
f6728000 f672fd00 wanarp wanarp.sys Sat Aug 17 00:25:01 2002 (3D5CEF1D)
f6730000 f6736100 parport parport.sys Thu Jan 16 08:47:13 2003 (3E25BAC1)
f6740000 f6745400 mouclass mouclass.sys Fri Feb 21 05:37:45 2003 (3E550459)
f6750000 f6755ec0 kbdclass kbdclass.sys Fri Feb 21 05:37:30 2003 (3E55044A)
f6758000 f675d460 usbprint usbprint.sys Thu Jan 16 08:44:07 2003 (3E25BA07)
f6770000 f6774400 ptilink ptilink.sys Thu Jan 16 08:47:15 2003 (3E25BAC3)
f6780000 f67840e0 raspti raspti.sys Sat Oct 09 09:45:10 1999 (37FE57D6)
f6810000 f6812a20 BOOTVID BOOTVID.dll Thu Nov 04 14:24:33 1999 (3820E051)
f6814000 f6816d00 PartMgr PartMgr.sys Thu Jan 16 08:43:07 2003 (3E25B9CB)
f6818000 f681be80 fortidrv fortidrv.sys Thu Sep 23 13:57:24 2004 (41522D84)
f687c000 f687e880 pfc pfc.sys Sat Sep 20 11:47:22 2003 (3F6B958A)
f6888000 f688b640 serenum serenum.sys Thu Jan 16 08:47:01 2003 (3E25BAB5)
f6894000 f68962e0 ndistapi ndistapi.sys Thu Jan 16 08:54:15 2003 (3E25BC67)
f68a4000 f68a7e60 TDI TDI.SYS Thu Jan 16 08:56:26 2003 (3E25BCEA)
f68a8000 f68aa200 ftvnic ftvnic.sys Thu Sep 23 13:57:31 2004 (41522D8B)
f68b4000 f68b6900 vulfntr vulfntr.sys Wed Nov 13 22:34:04 2002 (3DD21C8C)
f6900000 f6901d20 Diskperf Diskperf.sys Thu Feb 13 10:34:38 2003 (3E4ABDEE)
f6902000 f6903b80 dmload dmload.sys Thu Jan 16 08:47:06 2003 (3E25BABA)
f6904000 f69056a0 viaide viaide.sys Thu Oct 18 19:11:14 2001 (3BCE7282)
f6910000 f6911ca0 Fs_Rec Fs_Rec.SYS Thu Jan 16 08:53:30 2003 (3E25BC3A)
f6918000 f6919e40 rasacd rasacd.sys Sun Sep 26 06:41:23 1999 (37ED1753)
f696a000 f696b860 ParVdm ParVdm.SYS Tue Sep 28 15:28:16 1999 (37F035D0)
f69c8000 f69c8f80 WMILIB WMILIB.SYS Sun Sep 26 06:36:47 1999 (37ED163F)
f69c9000 f69c9b00 pciide pciide.sys Thu Jan 16 08:43:03 2003 (3E25B9C7)
f69ce000 f69cef80 dump_WMILIB dump_WMILIB.SYS Sun Sep 26 06:36:47 1999 (37ED163F)
f69ed000 f69eda40 audstub audstub.sys Sun Sep 26 06:35:33 1999 (37ED15F5)
f69f8000 f69f9000 swenum swenum.sys Thu Dec 05 06:10:07 2002 (3DEE36EF)
f6a09000 f6a099e0 Null Null.SYS Sun Sep 26 06:34:58 1999 (37ED15D2)
f6a0b000 f6a0bee0 Beep Beep.SYS Thu Oct 21 11:18:59 1999 (380E3FD3)
f6a0e000 f6a0ef80 mnmdd mnmdd.SYS Sun Sep 26 06:37:40 1999 (37ED1674)
f6a2e000 f6a2eb80 mbmiodrvr mbmiodrvr.sys Sun Apr 11 02:42:35 2004 (407807DB)

Unloaded modules:
b79bc000 b79e1000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b7de3000 b7e08000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b7de3000 b7e08000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9320000 b932c000 STREAM.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
be760000 be763000 SLIP.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bceb1000 bceb5000 MPE.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6788000 f678e000 RCA.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b8d82000 b8da7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b896b000 b8980000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
b92ab000 b92d0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b831c000 b8331000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
ba27c000 ba288000 STREAM.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
bc999000 bc99d000 MPE.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f66e0000 f66e6000 RCA.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
be75c000 be75f000 SLIP.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9296000 b92ab000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
b92ab000 b92d0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b92bb000 b92d0000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
b92bb000 b92d0000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
b92bb000 b92d0000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
b92bb000 b92d0000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
b92bb000 b92d0000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
b92bb000 b92d0000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
b92bb000 b92d0000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
b92bb000 b92d0000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
b92bb000 b92d0000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
b92ab000 b92d0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b92ab000 b92d0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b92ab000 b92d0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b92ab000 b92d0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b92ab000 b92d0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9370000 b9395000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9370000 b9395000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9370000 b9395000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9370000 b9395000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9370000 b9395000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9370000 b9395000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9435000 b945a000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9435000 b945a000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9906000 b992b000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bceec000 bcf85000 NavEx15.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bcf85000 bcf96000 NAVENG.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b99cb000 b99f0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b99cb000 b99f0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b99cb000 b99f0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b99cb000 b99f0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9dcd000 b9df2000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba2dc000 ba301000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bcc93000 bcc9f000 STREAM.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
bc999000 bc99d000 MPE.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

JoeHobart · 2005/03/26

this space for rent

markf · 2005/03/27

Fair comment Joe. I've now subscribed. For the record, the problems is (unfortunately) with my home PC and the work I was referring to was my PhD thesis, not commerical work!

Any help tracking down the cause of these crashes would be much appreciated.

Mark

JoeHobart · 2005/03/27

Ack! i was just tagging it because i was too tired to look at that many dumps last night. Posting nonsense makes it easy to find the thread later I apologize mark, i was not trying to nudge you to contribute.

your old thread:
http://www.windowsbbs.com/showthread.php?t=42605

The first dump is pool corruption. We can figure out what driver did it by enabling special pool. Might even be able to tell without it.

Dump 2 is very similar to what we saw in dump1 from your first thread, its processing against an address that appears to be bad data. my guess is that its also pool corruption, but it didnt crash right away.

------------------------------------------------
You will need to enable "special pool" and get another crash dump. When it crashes with special pool enabled, you should see the bad driver right on the stack.

Using the registry to enable special pool <---recommended proceedure using *
http://support.microsoft.com/kb/188831/EN-US/

Turn this on, get a new dump.

Things to consider before you enable Driver Verifier Manager on production servers
http://support.microsoft.com/kb/251233/EN-US/

Note that this will increase the frequency of the crashes

markf · 2005/03/28

Hi Joe,

I enabled the special pool as you suggested. After some time the PC crashed again; but rather than the blue screen, it just locked up keyboard and mouse. After pressing the reset button it stopped in the bios with an error about not detecting the keyboard. It started on the second reset, but on loading Windows 2000 it went to a blue screen with the error:

*** STOP: 0x000000D5 (0xB97BEFDC 0x00000000 0xF68193C8 0x00000000)
Driver attempting to access memory after it has been freed.
Address 0xF68193C8 base at 0xF6818000 Date stamp 41522d84 - fortidrv.sys

Unfortunately there was no memory.dmp file generated. I had trouble getting it going again until figured to start in safe mode and remove the special pool settings from the registry. I've since set them back.

The driver mentioned in the error is probably to do with FortiClient, some software I use for a VPN connection. It wasn't running at the time.

Probably not much to go on here. I'll wait for it to crash again and see if I can get a memory dump.

Mark

P.S. Actually, I've just found that this error always happens on restarting with special pool enabled, so probably unrelated to the crash.

iclarius · 2005/03/28

Mark,

If this is a brand name PC and you have added hardware to what came wi the PC, then the problem could be the power supply is too small. most brand name PCs come with an upder sized power supply so if you add another drive, some more ram and maybe another dvd-rw drive, you are way over what would be considered a safe margin. I'll bet your power supply is 200-220 watts. With any new PC that I build, I would not consider anything less than 400 watts.

George

BenMcDonald[MS] · 2005/03/28

*** STOP: 0x000000D5 (0xB97BEFDC 0x00000000 0xF68193C8 0x00000000)
Driver attempting to access memory after it has been freed.
Address 0xF68193C8 base at 0xF6818000 Date stamp 41522d84 - fortidrv.sys

This is the kind of dump that Joe is trying to get with special pool. In this case, the fortidrv.sys driver is doing a double free, which was caught by the special pool.

Kernel drivers are always running, even if you arent using them. You should disable that driver for temporary testing using msconfig and continue monitoring for the phenomenon

markf · 2005/03/28

Thanks for the replies. The power supply is 400 watt and new with the recent motherboard upgrade. I replaced it in an attempt to rule it out!

I've uninstalled FortiClient and Windows starts now without that Stop error. I've also gone back to a slightly older revision of the graphics card driver - the one that came on CD with the hardware. Hasn't crashed yet (today)...

Mark

markf · 2005/04/02

Over a week since the last crash and I thought things were coming right. Unfortunately not. This time I had the special pool enabled, so maybe there's more info in this debug log file. Can anyone suggest anything from this:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINNT\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

************************************************************************
WARNING: Dump file has inconsistent set-bit count. Data may be missing.
************************************************************************
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
Product: WinNt
Kernel base = 0x80400000 PsLoadedModuleList = 0x80480780
Debug session time: Sun Apr 3 00:04:17.609 2005 (GMT+12)
System Uptime: 2 days 1:46:44.288
Loading Kernel Symbols
................................................................................................
Loading unloaded module list
.............................................
Loading User Symbols
......................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {28, 2, 0, 8044bf99}

*** ERROR: Symbol file could not be found. Defaulted to export symbols for LUCOMS~1.EXE -
Probably caused by : memory_corruption ( nt!MiReleasePageFileSpace+33 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000028, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 8044bf99, address which referenced memory

Debugging Details:
------------------

OVERLAPPED_MODULE: NavEx15

READ_ADDRESS: 00000028

CURRENT_IRQL: 2

FAULTING_IP:
nt!MiReleasePageFileSpace+33
8044bf99 ff7028 push dword ptr [eax+0x28]

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 8044b3b2 to 8044bf99

TRAP_FRAME: ae889734 -- (.trap ffffffffae889734)
.trap ffffffffae889734
ErrCode = 00000000
eax=00000000 ebx=00000700 ecx=00000039 edx=00000000 esi=897c2388 edi=0000000d
eip=8044bf99 esp=ae8897a8 ebp=ae8897dc iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00210202
nt!MiReleasePageFileSpace+0x33:
8044bf99 ff7028 push dword ptr [eax+0x28] ds:0023:00000028=????????
.trap
Resetting default scope

STACK_TEXT:
ae8897b4 8044b3b2 0003927b 0004c57b 897c2388 nt!MiReleasePageFileSpace+0x33
ae8897c4 8044b362 ae8898ac 897c2388 0004c57b nt!MiDecrementReferenceCount+0x4a
ae8897dc 80444ffc 88850aa0 c0004c54 00000000 nt!MiDecrementShareCount+0xc4
ae889874 80444f94 ffffff84 00000001 c0004c50 nt!MiProcessValidPteList+0x56
ae889ca8 804cf5b2 01314000 c0004c50 88850aa0 nt!MiDecommitPages+0x308
ae889d4c 80463f64 ffffffff 0012fd78 0012fd7c nt!NtFreeVirtualMemory+0x5d8
ae889d4c 77f82ae7 ffffffff 0012fd78 0012fd7c nt!KiSystemService+0xc4
0012fd24 77fcddcb ffffffff 0012fd78 0012fd7c ntdll!ZwFreeVirtualMemory+0xb
0012fd70 77fcda9a 01314000 00001000 0000023d ntdll!RtlpDeCommitFreeBlock+0x1ff
0012fe18 004e1188 01200000 00000000 01314008 ntdll!RtlFreeHeap+0x1e5
WARNING: Stack unwind information not available. Following frames may be wrong.
0012fe54 0041cdd4 01314008 00000000 00000001 LUCOMS_1!IsdTestRandomGenerator+0x4d58
0012fe94 004e9f95 00000000 00000000 00000000 LUCOMS_1+0x1cdd4
0012ffc0 7c59893d 00000004 77f82a8c 7ffdf000 LUCOMS_1!IsdTestRandomGenerator+0xdb65
0012fff0 00000000 004e41e5 00000000 000000c8 KERNEL32!BaseProcessStart+0x3d

FOLLOWUP_IP:
nt!MiReleasePageFileSpace+33
8044bf99 ff7028 push dword ptr [eax+0x28]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!MiReleasePageFileSpace+33

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 41773335

STACK_COMMAND: .trap ffffffffae889734 ; kb

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0xA_nt!MiReleasePageFileSpace+33

BUCKET_ID: 0xA_nt!MiReleasePageFileSpace+33

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000000a ecx=00000000 edx=40000000 esi=8044bf99 edi=00000028
eip=80466d47 esp=ae889720 ebp=ae889734 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00200286
nt!KiTrap0E+0x20b:
80466d47 f7457000000200 test dword ptr [ebp+0x70],0x20000 ss:0010:ae8897a4=00210202
ChildEBP RetAddr Args to Child
ae889734 8044bf99 00000000 ae88976c 8041d462 nt!KiTrap0E+0x20b (FPO: [0,0] TrapFrame @ ae889734)
ae8897b4 8044b3b2 0003927b 0004c57b 897c2388 nt!MiReleasePageFileSpace+0x33 (FPO: [1,0,2])
ae8897c4 8044b362 ae8898ac 897c2388 0004c57b nt!MiDecrementReferenceCount+0x4a (FPO: [0,0,2])
ae8897dc 80444ffc 88850aa0 c0004c54 00000000 nt!MiDecrementShareCount+0xc4 (FPO: [Non-Fpo])
ae889874 80444f94 ffffff84 00000001 c0004c50 nt!MiProcessValidPteList+0x56 (FPO: [Non-Fpo])
ae889ca8 804cf5b2 01314000 c0004c50 88850aa0 nt!MiDecommitPages+0x308 (FPO: [EBP 0xae889d4c] [4,262,4])
ae889d4c 80463f64 ffffffff 0012fd78 0012fd7c nt!NtFreeVirtualMemory+0x5d8 (FPO: [Non-Fpo])
ae889d4c 77f82ae7 ffffffff 0012fd78 0012fd7c nt!KiSystemService+0xc4 (FPO: [0,0] TrapFrame @ ae889d64)
0012fd24 77fcddcb ffffffff 0012fd78 0012fd7c ntdll!ZwFreeVirtualMemory+0xb (FPO: [4,0,0])
0012fd70 77fcda9a 01314000 00001000 0000023d ntdll!RtlpDeCommitFreeBlock+0x1ff (FPO: [Non-Fpo])
0012fe18 004e1188 01200000 00000000 01314008 ntdll!RtlFreeHeap+0x1e5 (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
0012fe54 0041cdd4 01314008 00000000 00000001 LUCOMS_1!IsdTestRandomGenerator+0x4d58
0012fe94 004e9f95 00000000 00000000 00000000 LUCOMS_1+0x1cdd4
0012ffc0 7c59893d 00000004 77f82a8c 7ffdf000 LUCOMS_1!IsdTestRandomGenerator+0xdb65
0012fff0 00000000 004e41e5 00000000 000000c8 KERNEL32!BaseProcessStart+0x3d (FPO: [Non-Fpo])
start end module name
00230000 00261000 unrar unrar.dll Fri Jan 23 03:06:32 2004 (400FD8E8)
00400000 0059b000 LUCOMS_1 LUCOMS~1.EXE Wed Dec 15 09:21:49 2004 (41BF4B5D)
01930000 01b34000 msi msi.dll Tue Mar 11 12:21:33 2003 (3E6D1DFD)
02100000 02117000 PATCH32I PATCH32I.DLL Tue Dec 18 15:16:54 2001 (3C1EA716)
1a400000 1a47d000 urlmon urlmon.dll Wed Dec 08 13:37:42 2004 (41B64CD6)
63000000 63096000 WININET WININET.dll Wed Dec 08 13:36:55 2004 (41B64CA7)
70a70000 70ad6000 SHLWAPI SHLWAPI.dll Wed Dec 08 15:11:49 2004 (41B662E5)
71710000 71794000 COMCTL32 COMCTL32.dll Fri Aug 30 02:13:07 2002 (3D6E2BF3)
74fd0000 74fee000 msafd msafd.dll Fri Jun 20 14:44:06 2003 (3EF274F6)
75010000 75017000 wshtcpip wshtcpip.dll Fri Jun 20 14:44:22 2003 (3EF27506)
75020000 75028000 WS2HELP WS2HELP.DLL Tue Nov 30 22:31:09 1999 (3843995D)
75030000 75044000 WS2_32 WS2_32.DLL Fri Jun 20 14:44:22 2003 (3EF27506)
75050000 75058000 WSOCK32 WSOCK32.dll Fri Jun 20 14:44:22 2003 (3EF27506)
75150000 7515f000 SAMLIB SAMLIB.DLL Wed Mar 24 14:17:02 2004 (4060EF9E)
75170000 751bf000 NETAPI32 NETAPI32.DLL Fri Jun 11 04:58:10 2004 (40C89322)
751c0000 751c6000 NETRAP NETRAP.dll Tue Nov 30 22:31:07 1999 (3843995B)
759b0000 759b6000 LZ32 LZ32.DLL Fri Jun 20 14:43:46 2003 (3EF274E2)
75ab0000 75ab5000 sensapi sensapi.dll Fri Jun 20 14:43:46 2003 (3EF274E2)
76620000 76630000 MPR MPR.dll Wed Mar 24 14:17:02 2004 (4060EF9E)
770c0000 770e3000 CSCDLL CSCDLL.DLL Fri Jun 20 14:43:42 2003 (3EF274DE)
77320000 77337000 MPRAPI MPRAPI.DLL Wed Dec 01 20:37:29 1999 (3844D039)
77340000 77353000 iphlpapi iphlpapi.dll Fri Jun 20 14:43:42 2003 (3EF274DE)
77360000 77379000 DHCPCSVC DHCPCSVC.DLL Fri Jun 20 14:43:42 2003 (3EF274DE)
77380000 773a3000 ADSLDPC ADSLDPC.DLL Fri Jun 20 14:43:42 2003 (3EF274DE)
773b0000 773df000 ACTIVEDS ACTIVEDS.DLL Fri Jun 20 14:43:42 2003 (3EF274DE)
77430000 77440000 MSASN1 MSASN1.DLL Wed Mar 24 14:17:00 2004 (4060EF9C)
774c0000 774d1000 RASMAN RASMAN.DLL Fri May 02 12:39:13 2003 (3EB1BE31)
774e0000 77513000 RASAPI32 RASAPI32.DLL Fri Jun 20 14:43:42 2003 (3EF274DE)
77520000 77525000 ICMP ICMP.DLL Wed Dec 01 20:37:29 1999 (3844D039)
77530000 77552000 TAPI32 TAPI32.DLL Fri Jun 20 14:43:42 2003 (3EF274DE)
775a0000 77630000 CLBCATQ CLBCATQ.DLL Fri Mar 12 10:29:21 2004 (4050DA31)
777e0000 777e8000 winrnr winrnr.dll Wed Dec 01 20:37:27 1999 (3844D037)
777f0000 777f5000 rasadhlp rasadhlp.dll Wed Dec 01 20:37:27 1999 (3844D037)
77820000 77827000 VERSION VERSION.dll Fri Jun 20 14:43:41 2003 (3EF274DD)
77830000 7783e000 RTUTILS RTUTILS.DLL Wed Dec 01 20:37:27 1999 (3844D037)
77840000 7787e000 cscui cscui.dll Fri Jun 20 14:43:41 2003 (3EF274DD)
77880000 7790e000 SETUPAPI SETUPAPI.DLL Fri Jun 20 14:43:41 2003 (3EF274DD)
77950000 7797a000 WLDAP32 WLDAP32.DLL Fri Jun 20 14:43:41 2003 (3EF274DD)
77980000 779a4000 DNSAPI DNSAPI.DLL Wed Mar 24 14:17:00 2004 (4060EF9C)
779b0000 77a4b000 OLEAUT32 OLEAUT32.dll Fri Jun 20 14:43:41 2003 (3EF274DD)
77a50000 77b3f000 ole32 ole32.dll Fri Jan 14 14:27:08 2005 (41E71FEC)
77bf0000 77c01000 NTDSAPI NTDSAPI.dll Fri Jun 20 14:43:41 2003 (3EF274DD)
77d30000 77da1000 RPCRT4 RPCRT4.DLL Fri Mar 12 10:29:21 2004 (4050DA31)
77e10000 77e6f000 USER32 USER32.dll Wed Dec 29 22:14:10 2004 (41D27562)
77f40000 77f7b000 GDI32 GDI32.dll Tue Jun 22 13:35:10 2004 (40D78CCE)
77f80000 77ffd000 ntdll ntdll.dll Wed Mar 24 14:16:59 2004 (4060EF9B)
78000000 78045000 MSVCRT MSVCRT.DLL Wed Mar 12 07:55:17 2003 (3E6E3115)
782c0000 782cc000 rnr20 rnr20.dll Fri Jun 20 14:43:41 2003 (3EF274DD)
782f0000 78535000 SHELL32 SHELL32.dll Fri Dec 10 22:27:29 2004 (41B96C01)
7c0f0000 7c151000 USERENV USERENV.DLL Wed Aug 06 10:14:10 2003 (3F302C32)
7c2d0000 7c332000 ADVAPI32 ADVAPI32.dll Wed Mar 24 14:17:00 2004 (4060EF9C)
7c340000 7c34f000 Secur32 Secur32.dll Fri Jun 20 14:43:41 2003 (3EF274DD)
7c570000 7c623000 KERNEL32 KERNEL32.DLL Tue Jun 22 13:35:10 2004 (40D78CCE)
7c740000 7c7c7000 CRYPT32 CRYPT32.dll Wed Mar 24 14:17:00 2004 (4060EF9C)
80062000 80076100 hal halaacpi.dll Fri Mar 21 14:04:40 2003 (3E7A7338)
80400000 8059a800 nt ntoskrnl.exe Thu Oct 21 16:55:33 2004 (41773335)
a0000000 a018ec40 win32k win32k.sys Sat Dec 25 06:23:30 2004 (41CC5092)
ac073000 ac083960 NAVENG NAVENG.Sys Fri Dec 31 10:46:10 2004 (41D47722)
ac084000 ac11ca60 NavEx15 NavEx15.Sys Fri Dec 31 10:45:19 2004 (41D476EF)
ac54c000 ac594000 ATMFD ATMFD.DLL unavailable (FFFFFFFE)
ae3ac000 ae3d6c00 NAVAP NAVAP.SYS Sun Dec 09 11:59:59 2001 (3C129B6F)
ae481000 ae4a33c0 Fastfat Fastfat.SYS Thu Jan 16 08:48:39 2003 (3E25BB17)
ae95a000 ae968fe0 Cdfs Cdfs.SYS Wed Apr 16 15:58:53 2003 (3E9CD4FD)
aea17000 aea28f80 wdmaud wdmaud.sys Wed Apr 16 16:23:02 2003 (3E9CDAA6)
aea51000 aea8cbc0 srv srv.sys Wed Apr 30 11:05:07 2003 (3EAF0523)
aebaf000 aebcc4a0 afd afd.sys Wed Apr 30 20:45:29 2003 (3EAF8D29)
aebf1000 aebf3780 CdaC15BA CdaC15BA.SYS Mon Apr 08 20:50:52 2002 (3CB159EC)
aec3d000 aec488c0 sysaudio sysaudio.sys Wed Apr 16 16:21:44 2003 (3E9CDA58)
aec7d000 aec85240 Fips Fips.SYS Wed May 10 03:28:29 2000 (39182E9D)
aeeef000 af28a100 nv4_disp nv4_disp.dll Fri Jun 11 09:32:04 2004 (40C8D354)
b006e000 b0083180 dump_atapi dump_atapi.sys Wed Apr 02 06:08:25 2003 (3E89D599)
b0084000 b00e8ca0 mrxsmb mrxsmb.sys Thu Jan 20 20:25:21 2005 (41EF5CE1)
b00fb000 b0124900 rdbss rdbss.sys Fri Dec 03 16:37:11 2004 (41AFDF67)
b0125000 b014ce00 netbt netbt.sys Thu Jul 17 07:44:26 2003 (3F15AB1A)
b014d000 b015da60 SYMEVENT SYMEVENT.SYS Wed May 14 17:45:43 2003 (3EC1D807)
b015e000 b019dda0 SYMTDI SYMTDI.SYS Sat Jan 22 18:55:40 2005 (41F1EADC)
b01c6000 b0217060 tcpip tcpip.sys Wed Apr 30 11:05:31 2003 (3EAF053B)
b12e2000 b130c3a0 update update.sys Wed Apr 16 16:22:01 2003 (3E9CDA69)
b135d000 b1373ba0 ndiswan ndiswan.sys Wed Apr 30 11:05:01 2003 (3EAF051D)
b139c000 b13bbd00 KS KS.SYS Thu Dec 05 06:09:38 2002 (3DEE36D2)
b13bc000 b13e01e0 portcls portcls.sys Wed Apr 16 16:11:22 2003 (3E9CD7EA)
b13e1000 b140c000 vinyl97 vinyl97.sys Tue Feb 01 21:39:02 2005 (41FF4026)
b140c000 b142db20 USBPORT USBPORT.SYS Tue Mar 11 04:47:39 2003 (3E6CB39B)
b142e000 b16658c0 nv4_mini nv4_mini.sys Fri Jun 11 09:36:05 2004 (40C8D445)
b1686000 b1689580 vga vga.sys Sun Sep 26 06:37:40 1999 (37ED1674)
bfeae000 bfec3640 Mup Mup.sys Thu Jan 16 08:54:01 2003 (3E25BC59)
bfec4000 bfeedaa0 NDIS NDIS.sys Wed Apr 30 11:05:01 2003 (3EAF051D)
bfeee000 bff705a0 Ntfs Ntfs.sys Sat May 10 07:46:45 2003 (3EBC05A5)
bff71000 bff827c0 KSecDD KSecDD.sys Sun Sep 21 12:32:19 2003 (3F6CF193)
bff83000 bff98180 atapi atapi.sys Wed Apr 02 06:08:25 2003 (3E89D599)
bff99000 bffba9c0 dmio dmio.sys Thu Jan 16 08:47:04 2003 (3E25BAB8)
bffbb000 bffd7220 ftdisk ftdisk.sys Tue Apr 01 10:21:58 2003 (3E88BF86)
bffd8000 bffffc20 ACPI ACPI.sys Thu Jan 16 08:44:22 2003 (3E25BA16)
f6400000 f640e6a0 pci pci.sys Thu Jan 16 08:44:07 2003 (3E25BA07)
f6410000 f641b680 isapnp isapnp.sys Thu Jan 16 08:43:47 2003 (3E25B9F3)
f6420000 f6428700 CLASSPNP CLASSPNP.SYS Thu Jan 16 08:42:51 2003 (3E25B9BB)
f6450000 f645c4c0 VIDEOPRT VIDEOPRT.SYS Thu Jan 16 08:47:20 2003 (3E25BAC8)
f6460000 f646a600 fetnd5bv fetnd5bv.sys Fri Jan 28 18:57:51 2005 (41F9D45F)
f6470000 f647f400 serial serial.sys Wed Apr 16 16:19:39 2003 (3E9CD9DB)
f6480000 f648b680 i8042prt i8042prt.sys Wed Apr 16 16:00:59 2003 (3E9CD57B)
f6490000 f649ca80 rasl2tp rasl2tp.sys Wed Apr 30 11:05:06 2003 (3EAF0522)
f64a0000 f64abc40 raspptp raspptp.sys Thu May 15 11:47:00 2003 (3EC2D574)
f64b0000 f64bea20 parallel parallel.sys Thu Jan 16 08:47:14 2003 (3E25BAC2)
f64c0000 f64c9be0 usbhub usbhub.sys Wed Mar 19 11:30:41 2003 (3E77AC21)
f64d0000 f64dc160 usbhub20 usbhub20.sys Thu Jan 16 08:45:59 2003 (3E25BA77)
f64f0000 f64f9ce0 NDProxy NDProxy.SYS Fri Oct 01 11:25:35 1999 (37F3F16F)
f6500000 f6508fa0 Npfs Npfs.SYS Sun Oct 10 12:58:07 1999 (37FFD68F)
f6510000 f6518680 msgpc msgpc.sys Thu Jan 16 08:54:25 2003 (3E25BC71)
f6520000 f65281a0 netbios netbios.sys Wed Oct 13 08:34:19 1999 (38038D3B)
f6680000 f6685520 PCIIDEX PCIIDEX.SYS Wed Feb 26 07:31:08 2003 (3E5BB66C)
f6688000 f668f4c0 MountMgr MountMgr.sys Wed Feb 11 08:47:53 2004 (40293569)
f6690000 f6697720 disk disk.sys Thu Jan 16 08:43:05 2003 (3E25B9C9)
f6698000 f669ed00 viaagp1 viaagp1.sys Wed Jul 02 22:19:52 2003 (3F02B1C8)
f66b0000 f66b4a60 flpydisk flpydisk.sys Thu Jan 16 08:42:52 2003 (3E25B9BC)
f66c0000 f66c5200 iviaspi iviaspi.sys Thu Sep 11 18:36:53 2003 (3F601805)
f66d0000 f66d6c40 cdrom cdrom.sys Thu Jan 16 08:43:04 2003 (3E25B9C8)
f66d8000 f66dff40 uhcd uhcd.sys Thu Jan 16 08:45:50 2003 (3E25BA6E)
f66e0000 f66e6a20 EFS EFS.SYS Thu Jan 16 08:46:55 2003 (3E25BAAF)
f66f0000 f66f4fc0 USBD USBD.SYS Thu Jan 23 06:05:33 2003 (3E2ECF5D)
f6700000 f6704c00 usbehci usbehci.sys Tue May 06 08:50:04 2003 (3EB6CE7C)
f6710000 f6715460 usbprint usbprint.sys Thu Jan 16 08:44:07 2003 (3E25BA07)
f6718000 f671d060 SYMREDRV SYMREDRV.SYS Sat Jan 22 18:58:32 2005 (41F1EB88)
f6720000 f6726580 fdc fdc.sys Thu Jan 16 08:42:51 2003 (3E25B9BB)
f6738000 f673e100 parport parport.sys Thu Jan 16 08:47:13 2003 (3E25BAC1)
f6740000 f6745240 Msfs Msfs.SYS Wed Oct 27 12:21:32 1999 (3816377C)
f6748000 f674d400 mouclass mouclass.sys Fri Feb 21 05:37:45 2003 (3E550459)
f6758000 f675dec0 kbdclass kbdclass.sys Fri Feb 21 05:37:30 2003 (3E55044A)
f6768000 f676fd00 wanarp wanarp.sys Sat Aug 17 00:25:01 2002 (3D5CEF1D)
f6778000 f677c400 ptilink ptilink.sys Thu Jan 16 08:47:15 2003 (3E25BAC3)
f6788000 f678c0e0 raspti raspti.sys Sat Oct 09 09:45:10 1999 (37FE57D6)
f6810000 f6812a20 BOOTVID BOOTVID.dll Thu Nov 04 14:24:33 1999 (3820E051)
f6814000 f6816d00 PartMgr PartMgr.sys Thu Jan 16 08:43:07 2003 (3E25B9CB)
f6874000 f6876880 pfc pfc.sys Sat Sep 20 11:47:22 2003 (3F6B958A)
f6880000 f6883640 serenum serenum.sys Thu Jan 16 08:47:01 2003 (3E25BAB5)
f688c000 f688e2e0 ndistapi ndistapi.sys Thu Jan 16 08:54:15 2003 (3E25BC67)
f689c000 f689fe60 TDI TDI.SYS Thu Jan 16 08:56:26 2003 (3E25BCEA)
f68a8000 f68aa900 vulfntr vulfntr.sys Wed Nov 13 22:34:04 2002 (3DD21C8C)
f6900000 f6901d20 Diskperf Diskperf.sys Thu Feb 13 10:34:38 2003 (3E4ABDEE)
f6902000 f6903b80 dmload dmload.sys Thu Jan 16 08:47:06 2003 (3E25BABA)
f6904000 f69056a0 viaide viaide.sys Thu Oct 18 19:11:14 2001 (3BCE7282)
f6910000 f6911ca0 Fs_Rec Fs_Rec.SYS Thu Jan 16 08:53:30 2003 (3E25BC3A)
f6918000 f6919e40 rasacd rasacd.sys Sun Sep 26 06:41:23 1999 (37ED1753)
f6954000 f6955860 ParVdm ParVdm.SYS Tue Sep 28 15:28:16 1999 (37F035D0)
f69c8000 f69c8f80 WMILIB WMILIB.SYS Sun Sep 26 06:36:47 1999 (37ED163F)
f69c9000 f69c9b00 pciide pciide.sys Thu Jan 16 08:43:03 2003 (3E25B9C7)
f69ed000 f69eda40 audstub audstub.sys Sun Sep 26 06:35:33 1999 (37ED15F5)
f69f0000 f69f0f80 dump_WMILIB dump_WMILIB.SYS Sun Sep 26 06:36:47 1999 (37ED163F)
f69f7000 f69f8000 swenum swenum.sys Thu Dec 05 06:10:07 2002 (3DEE36EF)
f6a17000 f6a179e0 Null Null.SYS Sun Sep 26 06:34:58 1999 (37ED15D2)
f6a1c000 f6a1cee0 Beep Beep.SYS Thu Oct 21 11:18:59 1999 (380E3FD3)
f6a21000 f6a21f80 mnmdd mnmdd.SYS Sun Sep 26 06:37:40 1999 (37ED1674)

markf · 2005/04/02

(debug log continued)

Unloaded modules:
abe4c000 abe71000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac04e000 ac073000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac039000 ac04e000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
ac39e000 ac437000 NavEx15.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac38d000 ac39e000 NAVENG.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac0f8000 ac11d000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac0f8000 ac11d000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac0f8000 ac11d000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac0f8000 ac11d000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac0f8000 ac11d000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac0f8000 ac11d000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac0f8000 ac11d000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac0f8000 ac11d000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac198000 ac1bd000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac198000 ac1bd000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac198000 ac1bd000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac28f000 ac2b4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac28f000 ac2b4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac368000 ac38d000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac368000 ac38d000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac368000 ac38d000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac368000 ac38d000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f66f8000 f66fe000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ac368000 ac38d000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ae3d7000 ae470000 NavEx15.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ae470000 ae481000 NAVENG.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac412000 ac437000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac487000 ac4ac000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac487000 ac4ac000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac594000 ac5b9000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac659000 ac67e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac659000 ac67e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
acf20000 acf45000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
acf20000 acf45000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
acf20000 acf45000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
acf4f000 acf74000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
adabf000 adae4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ae9ca000 ae9ef000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
aec1d000 aec2a000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
aec2d000 aec3b000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
af276000 af28b000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
aeeef000 af28b000 nv4_disp.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
f6530000 f6539000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6728000 f672d000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f68c4000 f68c7000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

JoeHobart · 2005/04/02

This time I had the special pool enabled, so maybe there's more info in this debug log file.

Unfortunatly not this one, this is a classic pool corruption dump, but the place thats messed up is not protected by the 'special' pool. Youll need to let it crash again. Ideally, we are hoping to see a stop code in the Cx or Dx range, rather than these stop 0As.

Stay the course, it'll catch it eventually.

markf · 2005/04/02

Thanks for the feedback, Joe. Is there anything I can do to stress the system a bit and bring on the crash? Would it be worth trying something like CPU Burn In? (I've only heard about it from a friend who is into overclocking his hardware.)

Mark

JoeHobart · 2005/04/03

nope.

markf · 2005/04/04

How about this one then?

By the way, which lines are you looking at "to see a stop code in the Cx or Dx range, rather than these stop 0As "?

Mark

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINNT\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

************************************************************************
WARNING: Dump file has inconsistent set-bit count. Data may be missing.
************************************************************************
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
Product: WinNt
Kernel base = 0x80400000 PsLoadedModuleList = 0x80480780
Debug session time: Mon Apr 4 17:38:32.437 2005 (GMT+12)
System Uptime: 0 days 19:37:45.120
Loading Kernel Symbols
..................................................................................................
Loading unloaded module list
................
Loading User Symbols
.................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {ec2793ec, 0, 804698c8, 2}

*** ERROR: Symbol file could not be found. Defaulted to export symbols for SYMEVENT.SYS -
Probably caused by : SYMEVENT.SYS ( SYMEVENT+6353 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: ec2793ec, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 804698c8, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000002, (reserved)

Debugging Details:
------------------

OVERLAPPED_MODULE: nv4_disp

READ_ADDRESS: ec2793ec Paged pool

FAULTING_IP:
nt!ExAllocatePoolWithTag+488
804698c8 8b5004 mov edx,[eax+0x4]

MM_INTERNAL_CODE: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

LAST_CONTROL_TRANSFER: from 8041572b to 804698c8

TRAP_FRAME: bcfe31ec -- (.trap ffffffffbcfe31ec)
.trap ffffffffbcfe31ec
ErrCode = 00000000
eax=ec2793e8 ebx=0000001b ecx=89099b68 edx=00000000 esi=80065470 edi=89099748
eip=804698c8 esp=bcfe3260 ebp=bcfe3284 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!ExAllocatePoolWithTag+0x488:
804698c8 8b5004 mov edx,[eax+0x4] ds:0023:ec2793ec=????????
.trap
Resetting default scope

STACK_TEXT:
bcfe3284 8041572b 00000011 00000001 6666744e nt!ExAllocatePoolWithTag+0x488
bcfe3320 bff05750 88b226e8 890390f0 000065e5 nt!ExAllocateFromPagedLookasideList+0x2d
bcfe3320 bff05750 88b226e8 890390f0 000065e5 Ntfs!NtfsOpenFile+0x113
bcfe3438 bff17bc3 88b226e8 88960448 889605b4 Ntfs!NtfsOpenFile+0x113
bcfe3778 bff0c5a2 88b226e8 88960448 bcfe37ec Ntfs!NtfsCommonCreate+0x786
bcfe382c 8041d1af 89039020 88960448 00000000 Ntfs!NtfsFsdCreate+0x1fe
bcfe3840 be953353 bcfe3890 bc043800 00000000 nt!IopfCallDriver+0x35
WARNING: Stack unwind information not available. Following frames may be wrong.
bcfe3a50 8044f78d 88feb470 00000000 bcfe3b08 SYMEVENT+0x6353
bcfe3ac8 804d3add 00000000 8906d300 00000040 nt!ObpLookupObjectName+0x4e7
bcfe3bd8 8049f509 00000000 00000000 00000001 nt!ObOpenObjectByName+0xc5
bcfe3d54 80463f64 0134faa4 0134fa7c 36313520 nt!NtQueryAttributesFile+0xe3
bcfe3d54 77f87db3 0134faa4 0134fa7c 36313520 nt!KiSystemService+0xc4
0134fa60 7c587441 0134faa4 0134fa7c 0134fcec ntdll!NtQueryAttributesFile+0xb
0134fad0 0100c524 00748f48 00000000 00000010 KERNEL32!GetFileAttributesW+0x71
0134fce8 0100f8c5 00000000 0100f74a 00000000 DfrgNtfs!OpenNtfsFile+0x4a
0134fcf0 0100f74a 00000000 7c59b99d 77e1dc9b DfrgNtfs!MoveNtfsFile+0x63
0134ff84 0100f28f 00000000 00000001 00000000 DfrgNtfs!DefragNtfs+0x42c
0134ffb4 7c57b388 00000000 00000000 00000001 DfrgNtfs!DefragThread+0x2c7
0134ffec 00000000 0100efc8 00000000 00000000 KERNEL32!BaseThreadStart+0x52

FOLLOWUP_IP:
SYMEVENT+6353
be953353 6a00 push 0x0

SYMBOL_STACK_INDEX: 7

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: SYMEVENT+6353

MODULE_NAME: SYMEVENT

IMAGE_NAME: SYMEVENT.SYS

DEBUG_FLR_IMAGE_TIMESTAMP: 3ec1d807

STACK_COMMAND: .trap ffffffffbcfe31ec ; kb

FAILURE_BUCKET_ID: 0x50_SYMEVENT+6353

BUCKET_ID: 0x50_SYMEVENT+6353

Followup: MachineOwner
---------

eax=ffdff13c ebx=00000050 ecx=bcfe31ec edx=804630b6 esi=c0300ec0 edi=c03b09e4
eip=80448d37 esp=bcfe3194 ebp=bcfe31d4 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!MmAccessFault+0x757:
80448d37 33c0 xor eax,eax
ChildEBP RetAddr Args to Child
bcfe31d4 80466bff 00000000 ec2793ec 00000000 nt!MmAccessFault+0x757 (FPO: [Non-Fpo])
bcfe31d4 804698c8 00000000 ec2793ec 00000000 nt!KiTrap0E+0xc3 (FPO: [0,0] TrapFrame @ bcfe31ec)
bcfe3284 8041572b 00000011 00000001 6666744e nt!ExAllocatePoolWithTag+0x488 (FPO: [Non-Fpo])
bcfe3320 bff05750 88b226e8 890390f0 000065e5 nt!ExAllocateFromPagedLookasideList+0x2d (FPO: [1,0,3])
bcfe3320 bff05750 88b226e8 890390f0 000065e5 Ntfs!NtfsOpenFile+0x113 (FPO: [Non-Fpo])
bcfe3438 bff17bc3 88b226e8 88960448 889605b4 Ntfs!NtfsOpenFile+0x113 (FPO: [Non-Fpo])
bcfe3778 bff0c5a2 88b226e8 88960448 bcfe37ec Ntfs!NtfsCommonCreate+0x786 (FPO: [Non-Fpo])
bcfe382c 8041d1af 89039020 88960448 00000000 Ntfs!NtfsFsdCreate+0x1fe (FPO: [Non-Fpo])
bcfe3840 be953353 bcfe3890 bc043800 00000000 nt!IopfCallDriver+0x35 (FPO: [0,0,2])
WARNING: Stack unwind information not available. Following frames may be wrong.
bcfe3a50 8044f78d 88feb470 00000000 bcfe3b08 SYMEVENT+0x6353
bcfe3ac8 804d3add 00000000 8906d300 00000040 nt!ObpLookupObjectName+0x4e7 (FPO: [Non-Fpo])
bcfe3bd8 8049f509 00000000 00000000 00000001 nt!ObOpenObjectByName+0xc5 (FPO: [Non-Fpo])
bcfe3d54 80463f64 0134faa4 0134fa7c 36313520 nt!NtQueryAttributesFile+0xe3 (FPO: [Non-Fpo])
bcfe3d54 77f87db3 0134faa4 0134fa7c 36313520 nt!KiSystemService+0xc4 (FPO: [0,0] TrapFrame @ bcfe3d64)
0134fa60 7c587441 0134faa4 0134fa7c 0134fcec ntdll!NtQueryAttributesFile+0xb (FPO: [2,0,0])
0134fad0 0100c524 00748f48 00000000 00000010 KERNEL32!GetFileAttributesW+0x71 (FPO: [Non-Fpo])
0134fce8 0100f8c5 00000000 0100f74a 00000000 DfrgNtfs!OpenNtfsFile+0x4a (FPO: [0,130,2])
0134fcf0 0100f74a 00000000 7c59b99d 77e1dc9b DfrgNtfs!MoveNtfsFile+0x63 (FPO: [0,0,1])
0134ff84 0100f28f 00000000 00000001 00000000 DfrgNtfs!DefragNtfs+0x42c (FPO: [Non-Fpo])
0134ffb4 7c57b388 00000000 00000000 00000001 DfrgNtfs!DefragThread+0x2c7 (FPO: [Non-Fpo])
start end module name
<SNIP>

JoeHobart · 2005/04/04

BugCheck 50, {ec2793ec, 0, 804698c8, 2}

This is a Stop 50.

STACK_TEXT:
bcfe3284 8041572b 00000011 00000001 6666744e nt!ExAllocatePoolWithTag+0x488
bcfe3320 bff05750 88b226e8 890390f0 000065e5 nt!ExAllocateFromPagedLookasideList+0x2d
bcfe3320 bff05750 88b226e8 890390f0 000065e5 Ntfs!NtfsOpenFile+0x113
bcfe3438 bff17bc3 88b226e8 88960448 889605b4 Ntfs!NtfsOpenFile+0x113
bcfe3778 bff0c5a2 88b226e8 88960448 bcfe37ec Ntfs!NtfsCommonCreate+0x786

From this stack, we can see that there was a corrupt entry on the Lookaside list that caused allocatepool to die. Unfortunatly, lookaside lists arent guarded by special pool.. Once more into the breech, my friend. (having fun yet?)

ps: no need to include all the driver times in the spew for next time. trim all the stuff below this line from your next log
start end module name
01000000 01020000 DfrgNtfs DfrgNtfs.exe Sat Sep 14 11:35:21 2002 (3D827639)

markf · 2005/04/05

Thanks Joe, I'll keep waiting...

Log in or Sign up

Random Reboots II (Dump Data)

markf Inactive Thread Starter

markf Inactive Thread Starter

markf Inactive Thread Starter

markf Inactive Thread Starter

markf Inactive Thread Starter

JoeHobart Inactive Alumni

markf Inactive Thread Starter

JoeHobart Inactive Alumni

markf Inactive Thread Starter

iclarius Inactive

BenMcDonald[MS] Inactive

markf Inactive Thread Starter

markf Inactive Thread Starter

markf Inactive Thread Starter

JoeHobart Inactive Alumni

markf Inactive Thread Starter

JoeHobart Inactive Alumni

markf Inactive Thread Starter

JoeHobart Inactive Alumni

markf Inactive Thread Starter

Share This Page

Log in or Sign up

Random Reboots II (Dump Data)

markf Inactive Thread Starter

markf Inactive Thread Starter

markf Inactive Thread Starter

markf Inactive Thread Starter

markf Inactive Thread Starter

JoeHobart Inactive Alumni

markf Inactive Thread Starter

JoeHobart Inactive Alumni

markf Inactive Thread Starter

iclarius Inactive

BenMcDonald[MS] Inactive

markf Inactive Thread Starter

markf Inactive Thread Starter

markf Inactive Thread Starter

JoeHobart Inactive Alumni

markf Inactive Thread Starter

JoeHobart Inactive Alumni

markf Inactive Thread Starter

JoeHobart Inactive Alumni

markf Inactive Thread Starter

Share This Page

Useful Searches