Windows Server 2003 Dump

This is only 1 of about 20 dumps that I have from 11 servers all dell PE 2650 Dual Zeon 2.8 GHZ 2 gigs of ram. These are gateway servers connecting a VMS network to a Windows network, Running McAfee Virus Scan Enterprise, Pathworks 32 v 7.4 (this software has actually caused some crashes, the decdnp.sys file getting hung). I am also getting lots of ntoskrnl.exe errors. Any help with this would be greatly appreciated. I have some full dumps, but they all seem to be corrupted.

This is from the faulting Pathworks 32 v7.4 module.

Loading Dump File [D:\PhilWoodellOnly\Mini033106-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: C:\WINDOWS\Symbols
Executable search path is:

Unable to load image \WINDOWS\system32\ntoskrnl.exe, Win32 error 2
Loading symbols for 80800000 ntoskrnl.exe -> ntoskrnl.exe
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
ModLoad: 80800000 80a75000 \WINDOWS\system32\ntoskrnl.exe
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af988
Debug session time: Fri Mar 31 14:07:26.679 2006 (GMT+0)
System Uptime: 57 days 17:07:19.860
Unable to load image \WINDOWS\system32\ntoskrnl.exe, Win32 error 2
Loading symbols for 80800000 ntoskrnl.exe -> ntoskrnl.exe
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
ModLoad: 80800000 80a75000 \WINDOWS\system32\ntoskrnl.exe
Loading Kernel Symbols
.ModLoad: 80a75000 80aa1000 \WINDOWS\system32\hal.dll
.ModLoad: f7707000 f770f000 \WINDOWS\system32\KDCOM.DLL
.ModLoad: f770f000 f7717000 \WINDOWS\system32\BOOTVID.dll
.ModLoad: f7432000 f7466000 ACPI.sys
.ModLoad: f7487000 f7490000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
.ModLoad: f741c000 f7432000 pci.sys
.ModLoad: f7497000 f74a6000 isapnp.sys
.ModLoad: f7717000 f771e000 pciide.sys
.ModLoad: f74a7000 f74b4000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
.ModLoad: f74b7000 f74c7000 MountMgr.sys
.ModLoad: f73f5000 f741c000 ftdisk.sys
.ModLoad: f771f000 f7726000 dmload.sys
.ModLoad: f73c9000 f73f5000 dmio.sys
.ModLoad: f739f000 f73c9000 volsnap.sys
.ModLoad: f74c7000 f74d2000 PartMgr.sys
.ModLoad: f7383000 f739f000 atapi.sys
.ModLoad: f74d7000 f74df440 perc2.sys
.ModLoad: f7364000 f7383000 \WINDOWS\system32\drivers\SCSIPORT.SYS
.ModLoad: f7352000 f73637c0 afamgt.sys
.ModLoad: f74e7000 f74f7000 disk.sys
.ModLoad: f733f000 f7352000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
.ModLoad: f731a000 f733f000 fltmgr.sys
.ModLoad: f74f7000 f7503000 Dfs.sys
.ModLoad: f72f3000 f731a000 KSecDD.sys
.ModLoad: f725e000 f72f3000 Ntfs.sys
.ModLoad: f7228000 f725e000 NDIS.sys
.ModLoad: f7209000 f7228000 Mup.sys
.ModLoad: f7507000 f7511000 dcdbas32.sys
.ModLoad: f7517000 f7521000 crcdisk.sys
.ModLoad: f7637000 f7646000 \SystemRoot\system32\DRIVERS\intelppm.sys
.ModLoad: f7697000 f76a5080 \SystemRoot\system32\DRIVERS\racser.sys
.ModLoad: f6c07000 f6c5ad80 \SystemRoot\system32\DRIVERS\ati2mpad.sys
.ModLoad: f6bec000 f6c07000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
.ModLoad: f7587000 f7590000 \SystemRoot\system32\DRIVERS\watchdog.sys
.ModLoad: f7557000 f7562000 \SystemRoot\system32\DRIVERS\fdc.sys
.ModLoad: f6bd9000 f6bec000 \SystemRoot\system32\DRIVERS\i8042prt.sys
.ModLoad: f76a7000 f76b1000 \SystemRoot\system32\DRIVERS\kbdclass.sys
.ModLoad: f6fd6000 f6fe0000 \SystemRoot\system32\DRIVERS\mouclass.sys
.ModLoad: f6bc4000 f6bd9000 \SystemRoot\system32\DRIVERS\serial.sys
.ModLoad: f7647000 f7651000 \SystemRoot\system32\DRIVERS\serenum.sys
.ModLoad: f6fb6000 f6fc4000 \SystemRoot\system32\DRIVERS\imapi.sys
.ModLoad: f6baf000 f6bc4000 \SystemRoot\system32\DRIVERS\cdrom.sys
.ModLoad: f6b9b000 f6baf000 \SystemRoot\system32\DRIVERS\redbook.sys
.ModLoad: f6b73000 f6b9b000 \SystemRoot\system32\DRIVERS\ks.sys
.ModLoad: f777f000 f7783400 \SystemRoot\system32\DRIVERS\usbohci.sys
.ModLoad: f6b49000 f6b73000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
.ModLoad: f6b1f000 f6b48b00 \SystemRoot\system32\DRIVERS\b57xp32.sys
.ModLoad: f77b7000 f77bf000 \SystemRoot\system32\DRIVERS\audstub.sys
.ModLoad: f778f000 f7797000 \SystemRoot\System32\Drivers\RootMdm.sys
.ModLoad: f7657000 f7664000 \SystemRoot\System32\Drivers\Modem.SYS
.ModLoad: f6b0a000 f6b1f000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
.ModLoad: f6fa6000 f6faf000 \SystemRoot\system32\DRIVERS\ndistapi.sys
.ModLoad: f6af0000 f6b0a000 \SystemRoot\system32\DRIVERS\ndiswan.sys
.ModLoad: f6e41000 f6e50000 \SystemRoot\system32\DRIVERS\raspppoe.sys
.ModLoad: f6add000 f6af0000 \SystemRoot\system32\DRIVERS\raspptp.sys
.ModLoad: f76f7000 f7702000 \SystemRoot\system32\DRIVERS\TDI.SYS
.ModLoad: f75a7000 f75b2000 \SystemRoot\system32\DRIVERS\ptilink.sys
.ModLoad: f7617000 f7620000 \SystemRoot\system32\DRIVERS\raspti.sys
.ModLoad: f6aa6000 f6add000 \SystemRoot\system32\DRIVERS\rdpdr.sys
.ModLoad: f6fe6000 f6ff5000 \SystemRoot\system32\DRIVERS\termdd.sys
.ModLoad: f79e5000 f79e6280 \SystemRoot\system32\DRIVERS\swenum.sys
.ModLoad: f6a66000 f6aa6000 \SystemRoot\system32\DRIVERS\update.sys
.ModLoad: f7667000 f7673000 \SystemRoot\system32\DRIVERS\dcdipm32.sys
.ModLoad: f6986000 f6994000 \SystemRoot\System32\Drivers\NDProxy.SYS
.ModLoad: f5e3d000 f5e51000 \SystemRoot\system32\DRIVERS\usbhub.sys
.ModLoad: f7a37000 f7a38580 \SystemRoot\system32\DRIVERS\USBD.SYS
.ModLoad: f5ff7000 f6001000 \SystemRoot\system32\DRIVERS\flpydisk.sys
.ModLoad: f77df000 f77e7000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
.ModLoad: f6ce7000 f6cee000 \SystemRoot\System32\Drivers\Null.SYS
.ModLoad: f6ccf000 f6cd6000 \SystemRoot\System32\Drivers\Beep.SYS
.ModLoad: f5ee1000 f5eed000 \SystemRoot\System32\drivers\vga.sys
.ModLoad: f6cb7000 f6cbf000 \SystemRoot\System32\Drivers\mnmdd.SYS
.ModLoad: f6cc7000 f6ccf000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
.ModLoad: f5ed1000 f5edc000 \SystemRoot\System32\Drivers\Msfs.SYS
.ModLoad: f5ec1000 f5ece000 \SystemRoot\System32\Drivers\Npfs.SYS
.ModLoad: f781f000 f7827000 \SystemRoot\system32\DRIVERS\rasacd.sys
.ModLoad: f5e04000 f5e1d000 \SystemRoot\system32\DRIVERS\ipsec.sys
.ModLoad: f5eb1000 f5ebf000 \SystemRoot\system32\DRIVERS\msgpc.sys
.ModLoad: f5da3000 f5e04000 \SystemRoot\system32\DRIVERS\tcpip.sys
.ModLoad: f5d72000 f5da3000 \SystemRoot\system32\DRIVERS\netbt.sys
.ModLoad: f5ea1000 f5eae000 \SystemRoot\system32\DRIVERS\wanarp.sys
.ModLoad: f5e61000 f5e6a000 \SystemRoot\System32\drivers\ws2ifsl.sys
.ModLoad: f5cbf000 f5ce9000 \SystemRoot\System32\drivers\afd.sys
.ModLoad: f5a9f000 f5aac000 \SystemRoot\system32\DRIVERS\netbios.sys
.ModLoad: f57df000 f580f000 \SystemRoot\system32\DRIVERS\rdbss.sys
.ModLoad: f5741000 f57b7000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
.ModLoad: f5686000 f5697000 \SystemRoot\System32\Drivers\Fips.SYS
.ModLoad: f7927000 f792ae40 \SystemRoot\System32\Drivers\ASPI32.SYS
.ModLoad: f3b42000 f3b57000 \SystemRoot\System32\Drivers\Cdfs.SYS
.ModLoad: f6e81000 f6e8b000 \SystemRoot\System32\Drivers\dump_diskdump.sys
.ModLoad: f3d9f000 f3da7440 \SystemRoot\System32\Drivers\dump_perc2.sys
.ModLoad: bf800000 bf9d0000 \SystemRoot\System32\win32k.sys
.ModLoad: f33c2000 f33cc000 \SystemRoot\System32\drivers\Dxapi.sys
.ModLoad: bf9d0000 bf9e6000 \SystemRoot\System32\drivers\dxg.sys
.ModLoad: f3c99000 f3ca0000 \SystemRoot\System32\drivers\dxgthk.sys
.ModLoad: bf9e6000 bfa3c680 \SystemRoot\System32\ati2drad.dll
.ModLoad: f6cbf000 f6cc7000 \SystemRoot\system32\DRIVERS\dmch.sys
.ModLoad: f77a7000 f77ab420 \SystemRoot\system32\DRIVERS\deccore.sys
.ModLoad: f2e79000 f2e82680 \SystemRoot\system32\DRIVERS\decndis.sys
.ModLoad: f5246000 f52489e0 \SystemRoot\system32\DRIVERS\decshow.sys
.ModLoad: f2e69000 f2e72000 \SystemRoot\system32\DRIVERS\ndisuio.sys
.ModLoad: f2e14000 f2e287e0 \SystemRoot\system32\DRIVERS\decdnp.sys
.ModLoad: f6d25000 f6d27ac0 \SystemRoot\system32\DRIVERS\deciocb.sys
.ModLoad: f2e59000 f2e670c0 \SystemRoot\system32\DRIVERS\decLAT.sys
.ModLoad: f2cc6000 f2d24000 \SystemRoot\system32\DRIVERS\srv.sys
.ModLoad: f31e1000 f320b000 \SystemRoot\System32\Drivers\Fastfat.SYS
.ModLoad: f33f1000 f3405440 \SystemRoot\system32\drivers\naiavf5x.sys
.ModLoad: f334f000 f3358000 \SystemRoot\system32\DRIVERS\asyncmac.sys
.ModLoad: f2f5a000 f2f65000 \SystemRoot\System32\Drivers\TDTCP.SYS
.ModLoad: bae1b000 bae48000 \SystemRoot\System32\Drivers\RDPWD.SYS
.ModLoad: f50c5000 f50c5c60 \??\C:\PROGRA~1\Dell\OPENMA~1\oldiags\packages\PORTACCESSOR.sys

Loading unloaded module list
...
Loading User Symbols
Loaded exts extension DLL
Loaded kext extension DLL
Loaded kdexts extension DLL
Loaded dbghelp extension DLL
Loaded ext extension DLL
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {0, 2, 1, f2e2230a}

Unable to load image \SystemRoot\system32\DRIVERS\decdnp.sys, Win32 error 2
Loading symbols for f2e14000 decdnp.sys -> decdnp.sys
*** WARNING: Unable to verify timestamp for decdnp.sys
*** ERROR: Module load completed but symbols could not be loaded for decdnp.sys
Loading symbols for f2e79000 decndis.sys -> decndis.sys
*** WARNING: Unable to verify timestamp for decndis.sys
*** ERROR: Module load completed but symbols could not be loaded for decndis.sys
Loading symbols for f7228000 NDIS.sys -> NDIS.sys
*** WARNING: Unable to verify timestamp for NDIS.sys
Unable to load image \SystemRoot\system32\DRIVERS\b57xp32.sys, Win32 error 2
Loading symbols for f6b1f000 b57xp32.sys -> b57xp32.sys
*** WARNING: Unable to verify timestamp for b57xp32.sys
Probably caused by : decdnp.sys ( decdnp+e30a )

Followup: MachineOwner

 

Hi,

Probably it is the software of decdnp.sys.

Refer the following case
http://forums1.itrc.hp.com/service/...60328&admit=-682735245+1144591385616+28353475

 

Thanks CPC2004, I figured it was dcnp.sys but wasn't 100%, this helps my case. Problem is we are flying satellite's on these systems and crashes are unaceptable...

Thanks Again.

Great forum by the way.

 

Use lmtn to get time stamp of the module list

Hi,

If you issue windbg subcommand lmtn, you will get the time stamp of all the loaded modules. Use the time stamp of the failing module and search it at google. If it is known problem, you will find the answer at google.

 

Thanks alot cpc2004.

I am new to debugging so I really appreciate the help.

Again great forum....