1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Windows XP SP2 + mediaportal/mediaplayer [DUMP DATA]

Discussion in 'Windows XP' started by zeizei, 2006/04/18.

  1. 2006/04/18
    zeizei

    zeizei Inactive Thread Starter

    Joined:
    2006/04/18
    Messages:
    6
    Likes Received:
    0
    I have been struggling with my xp. I'm using it as my home theatre computer, but almost every time we are watching a movie it crashes. Sometimes it takes just 10minutes and crash, sometimes it crashes every 10 minutes and sometimes it's stable as rock :)

    I have driven memorytest and tried many different audio and video codecs. No help found.
    I have also followed temperatures and tested my computer without case. No help found.
    I have reinstalled windows. No help found.

    I'm using Shuttle Zen ST62K. I finally found these pages and following your instructions collecting dump data.

    Hopefully someone can help me. My family getting angry with me for chosing Windows XP instead of regular DVD/AVI player.

    Here are 2 memory dumps and 4 minidumps.

    thank you!

    ps. I also got a feeling that there might be more than one reason causing the BSOD.


    1. first one (memory dump)
    ---------

    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.6.0003.5
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\MEMORY.DMP]
    Kernel Summary Dump File: Only kernel address space is available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe -
    Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_gdr.050301-1519
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
    Debug session time: Tue Apr 18 19:04:58.187 2006 (GMT+3)
    System Uptime: 0 days 1:03:34.914
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe -
    Loading Kernel Symbols
    ........................................................................................................................
    Loading User Symbols
    PEB is paged out (Peb.Ldr = 7ffdd00c). Type ".hh dbgerr001" for details
    Loading unloaded module list
    ...............
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 50, {ffffffff, 0, ffffffff, 0}

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *************************************************************************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    *************************************************************************
    Probably caused by : memory_corruption

    Followup: memory_corruption
    ---------

    0: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    PAGE_FAULT_IN_NONPAGED_AREA (50)
    Invalid system memory was referenced. This cannot be protected by try-except,
    it must be protected by a Probe. Typically the address is just plain bad or it
    is pointing at freed memory.
    Arguments:
    Arg1: ffffffff, memory referenced.
    Arg2: 00000000, value 0 = read operation, 1 = write operation.
    Arg3: ffffffff, If non-zero, the instruction address which referenced the bad memory
    address.
    Arg4: 00000000, (reserved)

    Debugging Details:
    ------------------

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *************************************************************************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    *************************************************************************

    FAULTING_MODULE: 804d7000 nt

    DEBUG_FLR_IMAGE_TIMESTAMP: 0

    READ_ADDRESS: unable to get nt!MmSpecialPoolStart
    unable to get nt!MmSpecialPoolEnd
    unable to get nt!MmPoolCodeStart
    unable to get nt!MmPoolCodeEnd
    ffffffff

    FAULTING_IP:
    +ffffffffffffffff
    ffffffff ?? ???

    MM_INTERNAL_CODE: 0

    DEFAULT_BUCKET_ID: CODE_CORRUPTION

    BUGCHECK_STR: 0x50

    LAST_CONTROL_TRANSFER: from 80528ef8 to 805371aa

    FAILED_INSTRUCTION_ADDRESS:
    +ffffffffffffffff
    ffffffff ?? ???

    STACK_TEXT:
    WARNING: Stack unwind information not available. Following frames may be wrong.
    f22ffba0 80528ef8 00000050 ffffffff 00000000 nt!KeBugCheckEx+0x1b
    f22ffbf0 804e0944 00000000 ffffffff 00000000 nt!IoSetFileOrigin+0xc7c6
    f22ffc78 8057c481 856c06c0 00000000 00000000 nt!Kei386EoiHelper+0x271b
    f22ffcb0 8056c78f 006c06d8 00000000 856c06c0 nt!NtDuplicateToken+0x334
    f22ffccc 804e1957 856c06d8 00000000 00000574 nt!ObCreateObject+0x218
    f22ffcfc 8056e9bc e17e21e0 856c06d8 00000574 nt!ObfDereferenceObject+0x47
    f22ffd44 8056ea06 00000574 00000001 00000000 nt!ExfAcquirePushLockShared+0x49f
    f22ffd58 804dd99f 00000574 0271f630 7c90eb94 nt!NtClose+0x1d
    f22ffd64 7c90eb94 badb0d00 0271f5d0 00000000 nt!KiDeliverApc+0xb9e
    f22ffd68 badb0d00 0271f5d0 00000000 00000000 0x7c90eb94
    f22ffd6c 0271f5d0 00000000 00000000 00000000 0xbadb0d00
    f22ffd70 00000000 00000000 00000000 00000000 0x271f5d0


    STACK_COMMAND: kb

    CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
    !chkimg -lo 50 -d !nt
    804dcb22-804dcb33 18 bytes - nt!KiDispatchInterrupt+2c0 [ d8 0f 22 d8 c3 0f 20 e0:e0

    25 7f ff ff ff 0f 22 ]
    804dcb3a - nt!KiDispatchInterrupt+2d8 (+0x18) [ c3:00 ]
    804dda9d - nt!KiDeliverApc+c9c (+0xf63) [ 05:06 ]
    20 errors : !nt (804dcb22-804dda9d)

    MODULE_NAME: memory_corruption

    IMAGE_NAME: memory_corruption

    FOLLOWUP_NAME: memory_corruption

    MEMORY_CORRUPTOR: LARGE

    FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE

    BUCKET_ID: MEMORY_CORRUPTION_LARGE

    Followup: memory_corruption
    ---------

    eax=ffdff13c ebx=00000000 ecx=00000000 edx=804e131e esi=c03ffffc edi=806ffa4c
    eip=805371aa esp=f22ffb88 ebp=f22ffba0 iopl=0 nv up ei ng nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
    nt!KeBugCheckEx+0x1b:
    805371aa 5d pop ebp
    ChildEBP RetAddr Args to Child
    WARNING: Stack unwind information not available. Following frames may be wrong.
    f22ffba0 80528ef8 00000050 ffffffff 00000000 nt!KeBugCheckEx+0x1b
    f22ffbf0 804e0944 00000000 ffffffff 00000000 nt!IoSetFileOrigin+0xc7c6
    f22ffc78 8057c481 856c06c0 00000000 00000000 nt!Kei386EoiHelper+0x271b
    f22ffcb0 8056c78f 006c06d8 00000000 856c06c0 nt!NtDuplicateToken+0x334
    f22ffccc 804e1957 856c06d8 00000000 00000574 nt!ObCreateObject+0x218
    f22ffcfc 8056e9bc e17e21e0 856c06d8 00000574 nt!ObfDereferenceObject+0x47
    f22ffd44 8056ea06 00000574 00000001 00000000 nt!ExfAcquirePushLockShared+0x49f
    f22ffd58 804dd99f 00000574 0271f630 7c90eb94 nt!NtClose+0x1d
    f22ffd64 7c90eb94 badb0d00 0271f5d0 00000000 nt!KiDeliverApc+0xb9e
    f22ffd68 badb0d00 0271f5d0 00000000 00000000 0x7c90eb94
    f22ffd6c 0271f5d0 00000000 00000000 00000000 0xbadb0d00
    f22ffd70 00000000 00000000 00000000 00000000 0x271f5d0
    start end module name
    804d7000 806fd000 nt ntkrnlmp.exe Wed Mar 02 02:57:27 2005 (42250F77)
    806fd000 8071dd00 hal halmacpi.dll Wed Aug 04 08:59:09 2004 (41107B2D)
    bf800000 bf9c1180 win32k win32k.sys Thu Oct 06 03:05:44 2005 (43446A58)
    bf9c2000 bf9d3580 dxg dxg.sys Wed Aug 04 09:00:51 2004 (41107B93)
    bf9d4000 bfa33000 ati2dvag ati2dvag.dll Wed Aug 13 05:34:46 2003 (3F39A3C6)
    bfa33000 bfb30f60 ati3d2ag ati3d2ag.dll Wed Aug 13 05:01:07 2003 (3F399BE3)
    f1f82000 f1fabf00 kmixer kmixer.sys Wed Aug 04 09:07:46 2004 (41107D32)
    f1fac000 f1fc3480 dump_atapi dump_atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
    f2154000 f2176080 RDPWD RDPWD.SYS Fri Jun 10 02:52:39 2005 (42A8D647)
    f228f000 f22cf100 HTTP HTTP.sys Sat Oct 09 02:48:20 2004 (41672744)
    f2578000 f25c9300 srv srv.sys Tue May 10 03:17:49 2005 (427FFDAD)
    f261a000 f2646400 mrxdav mrxdav.sys Wed Aug 04 09:00:49 2004 (41107B91)
    f293e000 f2952400 wdmaud wdmaud.sys Wed Aug 04 09:15:03 2004 (41107EE7)
    f2abb000 f2ac9d80 sysaudio sysaudio.sys Wed Aug 04 09:15:54 2004 (41107F1A)
    f2bc3000 f2bc6280 ndisuio ndisuio.sys Wed Aug 04 09:03:10 2004 (41107C1E)
    f2cdb000 f2ceb280 Udfs Udfs.SYS Wed Aug 04 09:00:27 2004 (41107B7B)
    f2d8c000 f2dfa400 mrxsmb mrxsmb.sys Wed Jan 19 06:26:50 2005 (41EDE18A)
    f2e0f000 f2e11900 Dxapi Dxapi.sys Fri Aug 17 23:53:19 2001 (3B7D843F)
    f2e23000 f2e4da00 rdbss rdbss.sys Thu Oct 28 04:13:57 2004 (418047D5)
    f2e92000 f2e94f80 mouhid mouhid.sys Fri Aug 17 23:47:57 2001 (3B7D82FD)
    f2e96000 f2e99a00 kbdhid kbdhid.sys Wed Aug 04 08:58:33 2004 (41107B09)
    f2e9e000 f2ebfd00 afd afd.sys Wed Aug 04 09:14:13 2004 (41107EB5)
    f2ec0000 f2ee7c00 netbt netbt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
    f2ee8000 f2f08f00 ipnat ipnat.sys Thu Sep 30 01:28:36 2004 (415B3714)
    f2f09000 f2f60d80 tcpip tcpip.sys Fri Jan 13 04:28:12 2006 (43C7103C)
    f2f61000 f2f73400 ipsec ipsec.sys Wed Aug 04 09:14:27 2004 (41107EC3)
    f6fdc000 f700f200 update update.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f7010000 f7040100 rdpdr rdpdr.sys Wed Aug 04 09:01:10 2004 (41107BA6)
    f70e9000 f70f1d80 HIDCLASS HIDCLASS.SYS Wed Aug 04 09:08:18 2004 (41107D52)
    f70f9000 f7104600 IrBus IrBus.sys Wed Jan 11 02:48:57 2006 (43C455F9)
    f7109000 f7119e00 psched psched.sys Wed Aug 04 09:04:16 2004 (41107C60)
    f711a000 f7130680 ndiswan ndiswan.sys Wed Aug 04 09:14:30 2004 (41107EC6)
    f7131000 f7144900 parport parport.sys Wed Aug 04 08:59:04 2004 (41107B28)
    f7145000 f71a4980 ALCXSENS ALCXSENS.SYS Thu Oct 16 17:04:48 2003 (3F8EA580)
    f71a5000 f71c8980 portcls portcls.sys Wed Aug 04 09:15:47 2004 (41107F13)
    f71c9000 f723ae80 ALCXWDM ALCXWDM.SYS Thu Oct 09 13:52:06 2003 (3F853DD6)
    f723b000 f724c300 Rtlnicxp Rtlnicxp.sys Fri Jul 16 09:19:52 2004 (40F77388)
    f724d000 f726f680 ks ks.sys Wed Aug 04 09:15:20 2004 (41107EF8)
    f7270000 f7292e80 USBPORT USBPORT.SYS Wed Aug 04 09:08:34 2004 (41107D62)
    f7293000 f72a6780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 09:07:04 2004 (41107D08)
    f72a7000 f7343000 ati2mtag ati2mtag.sys Wed Aug 13 05:34:27 2003 (3F39A3B3)
    f7367000 f7369280 rasacd rasacd.sys Fri Aug 17 23:55:39 2001 (3B7D84CB)
    f738b000 f73a5580 Mup Mup.sys Wed Aug 04 09:15:20 2004 (41107EF8)
    f73a6000 f73d2a80 NDIS NDIS.sys Wed Aug 04 09:14:27 2004 (41107EC3)
    f73d3000 f745f480 Ntfs Ntfs.sys Wed Aug 04 09:15:06 2004 (41107EEA)
    f7460000 f7476780 KSecDD KSecDD.sys Wed Aug 04 08:59:45 2004 (41107B51)
    f7477000 f748c460 SymSnap SymSnap.sys Fri Aug 05 21:44:18 2005 (42F3B382)
    f748d000 f749ef00 sr sr.sys Wed Aug 04 09:06:22 2004 (41107CDE)
    f749f000 f74bd780 fltmgr fltmgr.sys Wed Aug 04 09:01:17 2004 (41107BAD)
    f74be000 f74d5480 atapi atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
    f74d6000 f74fb700 dmio dmio.sys Wed Aug 04 09:07:13 2004 (41107D11)
    f74fc000 f751a880 ftdisk ftdisk.sys Fri Aug 17 23:52:41 2001 (3B7D8419)
    f751b000 f752ba80 pci pci.sys Wed Aug 04 09:07:45 2004 (41107D31)
    f752c000 f7559d80 ACPI ACPI.sys Wed Aug 04 09:07:35 2004 (41107D27)
    f75a3000 f75abc00 isapnp isapnp.sys Fri Aug 17 23:58:01 2001 (3B7D8559)
    f75b3000 f75c1e80 ohci1394 ohci1394.sys Wed Aug 04 09:10:05 2004 (41107DBD)
    f75c3000 f75d0000 1394BUS 1394BUS.SYS Wed Aug 04 09:10:03 2004 (41107DBB)
    f75d3000 f75dd500 MountMgr MountMgr.sys Wed Aug 04 08:58:29 2004 (41107B05)
    f75e3000 f75ed880 sbp2port sbp2port.sys Wed Aug 04 08:59:54 2004 (41107B5A)
    f75f3000 f75ffc80 VolSnap VolSnap.sys Wed Aug 04 09:00:14 2004 (41107B6E)
    f7603000 f760be00 disk disk.sys Wed Aug 04 08:59:53 2004 (41107B59)
    f7613000 f761f200 CLASSPNP CLASSPNP.SYS Wed Aug 04 09:14:26 2004 (41107EC2)
    f7653000 f765b700 wanarp wanarp.sys Wed Aug 04 09:04:57 2004 (41107C89)
    f7663000 f766b700 netbios netbios.sys Wed Aug 04 09:03:19 2004 (41107C27)
    f7673000 f7681d80 arp1394 arp1394.sys Wed Aug 04 08:58:28 2004 (41107B04)
    f7693000 f769ca20 V2IMount V2IMount.SYS Sat Sep 10 03:43:27 2005 (43222C2F)
    f76a3000 f76ab880 Fips Fips.SYS Sat Aug 18 04:31:49 2001 (3B7DC585)
    f7703000 f770bd00 intelppm intelppm.sys Wed Aug 04 08:59:19 2004 (41107B37)
    f7713000 f771d380 imapi imapi.sys Wed Aug 04 09:00:12 2004 (41107B6C)
    f7723000 f772f180 cdrom cdrom.sys Wed Aug 04 08:59:52 2004 (41107B58)
    f7733000 f7741080 redbook redbook.sys Wed Aug 04 08:59:34 2004 (41107B46)
    f7743000 f7752180 nic1394 nic1394.sys Wed Aug 04 08:58:28 2004 (41107B04)
    f7753000 f7761b80 drmk drmk.sys Wed Aug 04 09:07:54 2004 (41107D3A)
    f7763000 f7772d80 serial serial.sys Wed Aug 04 09:15:51 2004 (41107F17)
    f7773000 f777f880 rasl2tp rasl2tp.sys Wed Aug 04 09:14:21 2004 (41107EBD)
    f7783000 f778d200 raspppoe raspppoe.sys Wed Aug 04 09:05:06 2004 (41107C92)
    f7793000 f779ed00 raspptp raspptp.sys Wed Aug 04 09:14:26 2004 (41107EC2)
    f77a3000 f77ab900 msgpc msgpc.sys Wed Aug 04 09:04:11 2004 (41107C5B)
    f77d3000 f77dcf00 termdd termdd.sys Wed Aug 04 08:58:52 2004 (41107B1C)
    f7803000 f780c480 NDProxy NDProxy.SYS Fri Aug 17 23:55:30 2001 (3B7D84C2)
    f7813000 f7821100 usbhub usbhub.sys Wed Aug 04 09:08:40 2004 (41107D68)
    f7823000 f7829200 PCIIDEX PCIIDEX.SYS Wed Aug 04 08:59:40 2004 (41107B4C)
    f782b000 f782f900 PartMgr PartMgr.sys Sat Aug 18 04:32:23 2001 (3B7DC5A7)
    f787b000 f787f720 PStrip PStrip.SYS Mon Nov 08 14:02:53 2004 (418F606D)
    f788b000 f7891000 symlcbrd symlcbrd.sys Fri Sep 03 04:56:06 2004 (4137CF36)
    f789b000 f789f280 usbohci usbohci.sys Wed Aug 04 09:08:34 2004 (41107D62)
    f78a3000 f78a9800 usbehci usbehci.sys Wed Aug 04 09:08:34 2004 (41107D62)
    f78ab000 f78b2000 GearAspiWDM GearAspiWDM.SYS Wed Feb 02 07:19:49 2005 (420062F5)
    f78b3000 f78b7880 TDI TDI.SYS Wed Aug 04 09:07:47 2004 (41107D33)
    f78bb000 f78bf580 ptilink ptilink.sys Fri Aug 17 23:49:53 2001 (3B7D8371)
    f78c3000 f78c7080 raspti raspti.sys Fri Aug 17 23:55:32 2001 (3B7D84C4)
    f78cb000 f78d1000 kbdclass kbdclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f78d3000 f78d8a00 mouclass mouclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f78f3000 f78f9180 HIDPARSE HIDPARSE.SYS Wed Aug 04 09:08:15 2004 (41107D4F)
    f78fb000 f7900200 vga vga.sys Wed Aug 04 09:07:06 2004 (41107D0A)
    f7903000 f7907a80 Msfs Msfs.SYS Wed Aug 04 09:00:37 2004 (41107B85)
    f790b000 f7912880 Npfs Npfs.SYS Wed Aug 04 09:00:38 2004 (41107B86)
    f7913000 f791a000 nvport nvport.sys Sat Feb 25 07:48:00 2006 (43FFEF90)
    f792b000 f792fb00 hidir hidir.sys Wed Jan 11 02:48:52 2006 (43C455F4)
    f794b000 f7950500 TDTCP TDTCP.SYS Wed Aug 04 08:58:52 2004 (41107B1C)
    f796b000 f796f500 watchdog watchdog.sys Wed Aug 04 09:07:32 2004 (41107D24)
    f79b3000 f79b6000 BOOTVID BOOTVID.dll Fri Aug 17 23:49:09 2001 (3B7D8345)
    f7a43000 f7a45680 pfc pfc.sys Sat Sep 28 01:53:07 2002 (3D94E153)
    f7a4b000 f7a4ec80 serenum serenum.sys Wed Aug 04 08:59:06 2004 (41107B2A)
    f7a4f000 f7a51580 ndistapi ndistapi.sys Fri Aug 17 23:55:29 2001 (3B7D84C1)
    f7a77000 f7a7ac80 mssmbios mssmbios.sys Wed Aug 04 09:07:47 2004 (41107D33)
    f7aa3000 f7aa4b80 kdcom kdcom.dll Fri Aug 17 23:49:10 2001 (3B7D8346)
    f7aa5000 f7aa6100 WMILIB WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
    f7aa7000 f7aa8700 dmload dmload.sys Fri Aug 17 23:58:15 2001 (3B7D8567)
    f7ac1000 f7ac2100 swenum swenum.sys Wed Aug 04 08:58:41 2004 (41107B11)
    f7ac3000 f7ac4280 USBD USBD.SYS Sat Aug 18 00:02:58 2001 (3B7D8682)
    f7ac5000 f7ac6f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 23:49:37 2001 (3B7D8361)
    f7ac7000 f7ac8080 Beep Beep.SYS Fri Aug 17 23:47:33 2001 (3B7D82E5)
    f7ac9000 f7aca080 mnmdd mnmdd.SYS Fri Aug 17 23:57:28 2001 (3B7D8538)
    f7acb000 f7acc080 RDPCDD RDPCDD.sys Fri Aug 17 23:46:56 2001 (3B7D82C0)
    f7adf000 f7ae0a80 ParVdm ParVdm.SYS Fri Aug 17 23:49:49 2001 (3B7D836D)
    f7af3000 f7af4100 dump_WMILIB dump_WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
    f7b6b000 f7b6bd00 pciide pciide.sys Fri Aug 17 23:51:49 2001 (3B7D83E5)
    f7ba1000 f7ba1c00 audstub audstub.sys Fri Aug 17 23:59:40 2001 (3B7D85BC)
    f7c31000 f7c31d00 dxgthk dxgthk.sys Fri Aug 17 23:53:12 2001 (3B7D8438)
    f7cd7000 f7cd7b80 Null Null.SYS Fri Aug 17 23:47:39 2001 (3B7D82EB)
     
    zeizei,
    #1
  2. 2006/04/18
    zeizei

    zeizei Inactive Thread Starter

    Joined:
    2006/04/18
    Messages:
    6
    Likes Received:
    0
    Unloaded modules:
    f2cc3000 f2cdb000 dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f28f1000 f291b000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7cdf000 f7ce0000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2a8b000 f2a98000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f291b000 f293e000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2a9b000 f2aa9000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7b35000 f7b37000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f755a000 f7582000 vidstub.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7683000 f768c000 processr.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7a9f000 f7aa3000 kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7643000 f7650000 i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f78eb000 f78f0000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7a9b000 f7a9e000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f78e3000 f78e8000 Flpydisk.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f78db000 f78e2000 Fdc.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt

    2. second one (minidump)
    -------------------
    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.6.0003.5
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini041706-13.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe -
    Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_gdr.050301-1519
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
    Debug session time: Mon Apr 17 22:51:29.375 2006 (GMT+3)
    System Uptime: 0 days 0:08:56.086
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe -
    Loading Kernel Symbols
    .......................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    ...............
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000008E, {c0000005, 80578ff6, f2d8dbc0, 0}

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *************************************************************************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    *************************************************************************
    Probably caused by : memory_corruption

    Followup: memory_corruption
    ---------

    0: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
    This is a very common bugcheck. Usually the exception address pinpoints
    the driver/function that caused the problem. Always note this address
    as well as the link date of the driver/image that contains this address.
    Some common problems are exception code 0x80000003. This means a hard
    coded breakpoint or assertion was hit, but this system was booted
    /NODEBUG. This is not supposed to happen as developers should never have
    hardcoded breakpoints in retail code, but ...
    If this happens, make sure a debugger gets connected, and the
    system is booted /DEBUG. This will let us see why this breakpoint is
    happening.
    Arguments:
    Arg1: c0000005, The exception code that was not handled
    Arg2: 80578ff6, The address that the exception occurred at
    Arg3: f2d8dbc0, Trap Frame
    Arg4: 00000000

    Debugging Details:
    ------------------

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *************************************************************************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    *************************************************************************

    FAULTING_MODULE: 804d7000 nt

    DEBUG_FLR_IMAGE_TIMESTAMP: 0

    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at

    "0x%08lx ". The memory could not be "%s ".

    FAULTING_IP:
    nt!SeSinglePrivilegeCheck+2a
    80578ff6 ff31 push dword ptr [ecx]

    TRAP_FRAME: f2d8dbc0 -- (.trap fffffffff2d8dbc0)
    .trap fffffffff2d8dbc0
    ErrCode = 00000000
    eax=e1a6a398 ebx=00a9fc38 ecx=00000007 edx=e1a6a39e esi=00000000 edi=f2d8dd28
    eip=80578ff6 esp=f2d8dc34 ebp=f2d8dc58 iopl=0 nv up ei ng nz na pe nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
    nt!SeSinglePrivilegeCheck+0x2a:
    80578ff6 ff31 push dword ptr [ecx] ds:0023:00000007=????????
    .trap
    Resetting default scope

    CUSTOMER_CRASH_COUNT: 13

    DEFAULT_BUCKET_ID: CODE_CORRUPTION

    BUGCHECK_STR: 0x8E

    LAST_CONTROL_TRANSFER: from 805791bc to 80578ff6

    STACK_TEXT:
    WARNING: Stack unwind information not available. Following frames may be wrong.
    f2d8dc58 805791bc 00000014 00000000 e19a4301 nt!SeSinglePrivilegeCheck+0x2a
    f2d8dd4c 804dd99f 00a9fc68 00000400 00a9fc38 nt!NtOpenProcess+0xe2
    f2d8dd64 7c90eb94 badb0d00 00a9fc1c 00000000 nt!KiDeliverApc+0xb9e
    f2d8dd68 badb0d00 00a9fc1c 00000000 00000000 0x7c90eb94
    f2d8dd6c 00a9fc1c 00000000 00000000 00000000 0xbadb0d00
    f2d8dd70 00000000 00000000 00000000 00000000 0xa9fc1c


    STACK_COMMAND: .bugcheck ; kb

    CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
    !chkimg -lo 50 -d !nt
    80578ff7 - nt!SeSinglePrivilegeCheck+2b [ 75:31 ]
    1 error : !nt (80578ff7)

    MODULE_NAME: memory_corruption

    IMAGE_NAME: memory_corruption

    FOLLOWUP_NAME: memory_corruption

    MEMORY_CORRUPTOR: ONE_BYTE

    FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BYTE

    BUCKET_ID: MEMORY_CORRUPTION_ONE_BYTE

    Followup: memory_corruption
    ---------

    eax=e1a6a398 ebx=00a9fc38 ecx=00000007 edx=e1a6a39e esi=00000000 edi=f2d8dd28
    eip=80578ff6 esp=f2d8dc34 ebp=f2d8dc58 iopl=0 nv up ei ng nz na pe nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
    nt!SeSinglePrivilegeCheck+0x2a:
    80578ff6 ff31 push dword ptr [ecx] ds:0023:00000007=????????
    ChildEBP RetAddr Args to Child
    WARNING: Stack unwind information not available. Following frames may be wrong.
    f2d8dc58 805791bc 00000014 00000000 e19a4301 nt!SeSinglePrivilegeCheck+0x2a
    f2d8dd4c 804dd99f 00a9fc68 00000400 00a9fc38 nt!NtOpenProcess+0xe2
    f2d8dd64 7c90eb94 badb0d00 00a9fc1c 00000000 nt!KiDeliverApc+0xb9e
    f2d8dd68 badb0d00 00a9fc1c 00000000 00000000 0x7c90eb94
    f2d8dd6c 00a9fc1c 00000000 00000000 00000000 0xbadb0d00
    f2d8dd70 00000000 00000000 00000000 00000000 0xa9fc1c
    start end module name
    804d7000 806fd000 nt ntkrnlmp.exe Wed Mar 02 02:57:27 2005 (42250F77)
    806fd000 8071dd00 hal halmacpi.dll Wed Aug 04 08:59:09 2004 (41107B2D)
    bf800000 bf9c1180 win32k win32k.sys Thu Oct 06 03:05:44 2005 (43446A58)
    bf9c2000 bf9d3580 dxg dxg.sys Wed Aug 04 09:00:51 2004 (41107B93)
    bf9d4000 bfa33000 ati2dvag ati2dvag.dll Wed Aug 13 05:34:46 2003 (3F39A3C6)
    bfa33000 bfb30f60 ati3d2ag ati3d2ag.dll Wed Aug 13 05:01:07 2003 (3F399BE3)
    f20a0000 f20c9f00 kmixer kmixer.sys Wed Aug 04 09:07:46 2004 (41107D32)
    f21e4000 f2206080 RDPWD RDPWD.SYS Fri Jun 10 02:52:39 2005 (42A8D647)
    f2369000 f23a9100 HTTP HTTP.sys Sat Oct 09 02:48:20 2004 (41672744)
    f2842000 f2856400 wdmaud wdmaud.sys Wed Aug 04 09:15:03 2004 (41107EE7)
    f287f000 f28d0300 srv srv.sys Tue May 10 03:17:49 2005 (427FFDAD)
    f2949000 f2975400 mrxdav mrxdav.sys Wed Aug 04 09:00:49 2004 (41107B91)
    f2bbe000 f2bc1280 ndisuio ndisuio.sys Wed Aug 04 09:03:10 2004 (41107C1E)
    f2c86000 f2c94d80 sysaudio sysaudio.sys Wed Aug 04 09:15:54 2004 (41107F1A)
    f2cbe000 f2cd5480 dump_atapi dump_atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
    f2cd6000 f2ce6280 Udfs Udfs.SYS Wed Aug 04 09:00:27 2004 (41107B7B)
    f2d0f000 f2d7d400 mrxsmb mrxsmb.sys Wed Jan 19 06:26:50 2005 (41EDE18A)
    f2e1e000 f2e48a00 rdbss rdbss.sys Thu Oct 28 04:13:57 2004 (418047D5)
    f2e59000 f2e5b900 Dxapi Dxapi.sys Fri Aug 17 23:53:19 2001 (3B7D843F)
    f2e99000 f2ebad00 afd afd.sys Wed Aug 04 09:14:13 2004 (41107EB5)
    f2ebb000 f2ee2c00 netbt netbt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
    f2ee3000 f2f03f00 ipnat ipnat.sys Thu Sep 30 01:28:36 2004 (415B3714)
    f2f04000 f2f5bd80 tcpip tcpip.sys Fri Jan 13 04:28:12 2006 (43C7103C)
    f2f5c000 f2f6e400 ipsec ipsec.sys Wed Aug 04 09:14:27 2004 (41107EC3)
    f2f9b000 f2f9df80 mouhid mouhid.sys Fri Aug 17 23:47:57 2001 (3B7D82FD)
    f2f9f000 f2fa2a00 kbdhid kbdhid.sys Wed Aug 04 08:58:33 2004 (41107B09)
    f6fd7000 f700a200 update update.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f704a000 f707a100 rdpdr rdpdr.sys Wed Aug 04 09:01:10 2004 (41107BA6)
    f711b000 f712be00 psched psched.sys Wed Aug 04 09:04:16 2004 (41107C60)
    f712c000 f7142680 ndiswan ndiswan.sys Wed Aug 04 09:14:30 2004 (41107EC6)
    f7143000 f7156900 parport parport.sys Wed Aug 04 08:59:04 2004 (41107B28)
    f7157000 f71b6980 ALCXSENS ALCXSENS.SYS Thu Oct 16 17:04:48 2003 (3F8EA580)
    f71b7000 f71da980 portcls portcls.sys Wed Aug 04 09:15:47 2004 (41107F13)
    f71db000 f724ce80 ALCXWDM ALCXWDM.SYS Thu Oct 09 13:52:06 2003 (3F853DD6)
    f724d000 f726f680 ks ks.sys Wed Aug 04 09:15:20 2004 (41107EF8)
    f7270000 f7292e80 USBPORT USBPORT.SYS Wed Aug 04 09:08:34 2004 (41107D62)
    f7293000 f72a6780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 09:07:04 2004 (41107D08)
    f72a7000 f7343000 ati2mtag ati2mtag.sys Wed Aug 13 05:34:27 2003 (3F39A3B3)
    f738b000 f73a5580 Mup Mup.sys Wed Aug 04 09:15:20 2004 (41107EF8)
    f73a6000 f73d2a80 NDIS NDIS.sys Wed Aug 04 09:14:27 2004 (41107EC3)
    f73d3000 f745f480 Ntfs Ntfs.sys Wed Aug 04 09:15:06 2004 (41107EEA)
    f7460000 f7476780 KSecDD KSecDD.sys Wed Aug 04 08:59:45 2004 (41107B51)
    f7477000 f748c460 SymSnap SymSnap.sys Fri Aug 05 21:44:18 2005 (42F3B382)
    f748d000 f749ef00 sr sr.sys Wed Aug 04 09:06:22 2004 (41107CDE)
    f749f000 f74bd780 fltmgr fltmgr.sys Wed Aug 04 09:01:17 2004 (41107BAD)
    f74be000 f74d5480 atapi atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
    f74d6000 f74fb700 dmio dmio.sys Wed Aug 04 09:07:13 2004 (41107D11)
    f74fc000 f751a880 ftdisk ftdisk.sys Fri Aug 17 23:52:41 2001 (3B7D8419)
    f751b000 f752ba80 pci pci.sys Wed Aug 04 09:07:45 2004 (41107D31)
    f752c000 f7559d80 ACPI ACPI.sys Wed Aug 04 09:07:35 2004 (41107D27)
    f75a3000 f75abc00 isapnp isapnp.sys Fri Aug 17 23:58:01 2001 (3B7D8559)
    f75b3000 f75c1e80 ohci1394 ohci1394.sys Wed Aug 04 09:10:05 2004 (41107DBD)
    f75c3000 f75d0000 1394BUS 1394BUS.SYS Wed Aug 04 09:10:03 2004 (41107DBB)
    f75d3000 f75dd500 MountMgr MountMgr.sys Wed Aug 04 08:58:29 2004 (41107B05)
    f75e3000 f75ed880 sbp2port sbp2port.sys Wed Aug 04 08:59:54 2004 (41107B5A)
    f75f3000 f75ffc80 VolSnap VolSnap.sys Wed Aug 04 09:00:14 2004 (41107B6E)
    f7603000 f760be00 disk disk.sys Wed Aug 04 08:59:53 2004 (41107B59)
    f7613000 f761f200 CLASSPNP CLASSPNP.SYS Wed Aug 04 09:14:26 2004 (41107EC2)
    f7643000 f7651d80 arp1394 arp1394.sys Wed Aug 04 08:58:28 2004 (41107B04)
    f7663000 f766ca20 V2IMount V2IMount.SYS Sat Sep 10 03:43:27 2005 (43222C2F)
    f7683000 f768e600 IrBus IrBus.sys Wed Jan 11 02:48:57 2006 (43C455F9)
    f7693000 f769b880 Fips Fips.SYS Sat Aug 18 04:31:49 2001 (3B7DC585)
    f76a3000 f76abd80 HIDCLASS HIDCLASS.SYS Wed Aug 04 09:08:18 2004 (41107D52)
    f76f3000 f76fbd00 intelppm intelppm.sys Wed Aug 04 08:59:19 2004 (41107B37)
    f7703000 f770d380 imapi imapi.sys Wed Aug 04 09:00:12 2004 (41107B6C)
    f7713000 f771f180 cdrom cdrom.sys Wed Aug 04 08:59:52 2004 (41107B58)
    f7723000 f7731080 redbook redbook.sys Wed Aug 04 08:59:34 2004 (41107B46)
    f7733000 f7742180 nic1394 nic1394.sys Wed Aug 04 08:58:28 2004 (41107B04)
    f7743000 f7751b80 drmk drmk.sys Wed Aug 04 09:07:54 2004 (41107D3A)
    f7753000 f7762d80 serial serial.sys Wed Aug 04 09:15:51 2004 (41107F17)
    f7763000 f776f880 rasl2tp rasl2tp.sys Wed Aug 04 09:14:21 2004 (41107EBD)
    f7773000 f777d200 raspppoe raspppoe.sys Wed Aug 04 09:05:06 2004 (41107C92)
    f7783000 f778ed00 raspptp raspptp.sys Wed Aug 04 09:14:26 2004 (41107EC2)
    f7793000 f779b900 msgpc msgpc.sys Wed Aug 04 09:04:11 2004 (41107C5B)
    f77a3000 f77acf00 termdd termdd.sys Wed Aug 04 08:58:52 2004 (41107B1C)
    f77d3000 f77dc480 NDProxy NDProxy.SYS Fri Aug 17 23:55:30 2001 (3B7D84C2)
    f77e3000 f77f1100 usbhub usbhub.sys Wed Aug 04 09:08:40 2004 (41107D68)
    f7803000 f780b700 wanarp wanarp.sys Wed Aug 04 09:04:57 2004 (41107C89)
    f7813000 f781b700 netbios netbios.sys Wed Aug 04 09:03:19 2004 (41107C27)
    f7823000 f7829200 PCIIDEX PCIIDEX.SYS Wed Aug 04 08:59:40 2004 (41107B4C)
    f782b000 f782f900 PartMgr PartMgr.sys Sat Aug 18 04:32:23 2001 (3B7DC5A7)
    f788b000 f788f280 usbohci usbohci.sys Wed Aug 04 09:08:34 2004 (41107D62)
    f7893000 f7899800 usbehci usbehci.sys Wed Aug 04 09:08:34 2004 (41107D62)
    f789b000 f78a2000 GearAspiWDM GearAspiWDM.SYS Wed Feb 02 07:19:49 2005 (420062F5)
    f78a3000 f78a7880 TDI TDI.SYS Wed Aug 04 09:07:47 2004 (41107D33)
    f78ab000 f78af580 ptilink ptilink.sys Fri Aug 17 23:49:53 2001 (3B7D8371)
    f78b3000 f78b7080 raspti raspti.sys Fri Aug 17 23:55:32 2001 (3B7D84C4)
    f78bb000 f78c1000 kbdclass kbdclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f78c3000 f78c8a00 mouclass mouclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f78e3000 f78e9180 HIDPARSE HIDPARSE.SYS Wed Aug 04 09:08:15 2004 (41107D4F)
    f78eb000 f78f0200 vga vga.sys Wed Aug 04 09:07:06 2004 (41107D0A)
    f78f3000 f78f7a80 Msfs Msfs.SYS Wed Aug 04 09:00:37 2004 (41107B85)
    f78fb000 f7902880 Npfs Npfs.SYS Wed Aug 04 09:00:38 2004 (41107B86)
    f7903000 f790a000 nvport nvport.sys Sat Feb 25 07:48:00 2006 (43FFEF90)
    f791b000 f791fb00 hidir hidir.sys Wed Jan 11 02:48:52 2006 (43C455F4)
    f7953000 f7957500 watchdog watchdog.sys Wed Aug 04 09:07:32 2004 (41107D24)
    f795b000 f7960500 TDTCP TDTCP.SYS Wed Aug 04 08:58:52 2004 (41107B1C)
    f799b000 f799f720 PStrip PStrip.SYS Mon Nov 08 14:02:53 2004 (418F606D)
    f79ab000 f79b1000 symlcbrd symlcbrd.sys Fri Sep 03 04:56:06 2004 (4137CF36)
    f79b3000 f79b6000 BOOTVID BOOTVID.dll Fri Aug 17 23:49:09 2001 (3B7D8345)
    f7a3f000 f7a41680 pfc pfc.sys Sat Sep 28 01:53:07 2002 (3D94E153)
    f7a47000 f7a4ac80 serenum serenum.sys Wed Aug 04 08:59:06 2004 (41107B2A)
    f7a4b000 f7a4d580 ndistapi ndistapi.sys Fri Aug 17 23:55:29 2001 (3B7D84C1)
    f7a6b000 f7a6ec80 mssmbios mssmbios.sys Wed Aug 04 09:07:47 2004 (41107D33)
    f7a97000 f7a99280 rasacd rasacd.sys Fri Aug 17 23:55:39 2001 (3B7D84CB)
    f7aa3000 f7aa4b80 kdcom kdcom.dll Fri Aug 17 23:49:10 2001 (3B7D8346)
    f7aa5000 f7aa6100 WMILIB WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
    f7aa7000 f7aa8700 dmload dmload.sys Fri Aug 17 23:58:15 2001 (3B7D8567)
    f7abd000 f7abe100 swenum swenum.sys Wed Aug 04 08:58:41 2004 (41107B11)
    f7abf000 f7ac0280 USBD USBD.SYS Sat Aug 18 00:02:58 2001 (3B7D8682)
    f7ac1000 f7ac2f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 23:49:37 2001 (3B7D8361)
    f7ac3000 f7ac4080 Beep Beep.SYS Fri Aug 17 23:47:33 2001 (3B7D82E5)
    f7ac5000 f7ac6080 mnmdd mnmdd.SYS Fri Aug 17 23:57:28 2001 (3B7D8538)
    f7ac7000 f7ac8080 RDPCDD RDPCDD.sys Fri Aug 17 23:46:56 2001 (3B7D82C0)
    f7aeb000 f7aec100 dump_WMILIB dump_WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
    f7b23000 f7b24a80 ParVdm ParVdm.SYS Fri Aug 17 23:49:49 2001 (3B7D836D)
    f7b6b000 f7b6bd00 pciide pciide.sys Fri Aug 17 23:51:49 2001 (3B7D83E5)
    f7c55000 f7c55d00 dxgthk dxgthk.sys Fri Aug 17 23:53:12 2001 (3B7D8438)
    f7c5a000 f7c5ac00 audstub audstub.sys Fri Aug 17 23:59:40 2001 (3B7D85BC)
    f7cc2000 f7cc2b80 Null Null.SYS Fri Aug 17 23:47:39 2001 (3B7D82EB)
     
    zeizei,
    #2


  3. to hide this advert.

  4. 2006/04/18
    zeizei

    zeizei Inactive Thread Starter

    Joined:
    2006/04/18
    Messages:
    6
    Likes Received:
    0
    Unloaded modules:
    f20f2000 f211c000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2755000 f277f000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7cc9000 f7cca000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f281f000 f2842000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2c36000 f2c43000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2c56000 f2c64000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7b2b000 f7b2d000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f755a000 f7582000 vidstub.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7653000 f765c000 processr.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7a93000 f7a97000 kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f77f3000 f7800000 i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f78db000 f78e0000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7a8f000 f7a92000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f78d3000 f78d8000 Flpydisk.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f78cb000 f78d2000 Fdc.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt

    3. third one
    ---------------------------
    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.6.0003.5
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini041706-12.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe -
    Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_gdr.050301-1519
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
    Debug session time: Mon Apr 17 22:42:09.125 2006 (GMT+3)
    System Uptime: 0 days 0:09:12.832
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe -
    Loading Kernel Symbols
    .......................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    ..............
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000008E, {c0000005, 8055007f, f76e2b74, 0}

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *************************************************************************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    *************************************************************************
    Probably caused by : ntkrnlmp.exe ( nt!ExAllocatePoolWithTag+7a )

    Followup: MachineOwner
    ---------

    1: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
    This is a very common bugcheck. Usually the exception address pinpoints
    the driver/function that caused the problem. Always note this address
    as well as the link date of the driver/image that contains this address.
    Some common problems are exception code 0x80000003. This means a hard
    coded breakpoint or assertion was hit, but this system was booted
    /NODEBUG. This is not supposed to happen as developers should never have
    hardcoded breakpoints in retail code, but ...
    If this happens, make sure a debugger gets connected, and the
    system is booted /DEBUG. This will let us see why this breakpoint is
    happening.
    Arguments:
    Arg1: c0000005, The exception code that was not handled
    Arg2: 8055007f, The address that the exception occurred at
    Arg3: f76e2b74, Trap Frame
    Arg4: 00000000

    Debugging Details:
    ------------------

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *************************************************************************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    *************************************************************************

    MODULE_NAME: nt

    FAULTING_MODULE: 804d7000 nt

    DEBUG_FLR_IMAGE_TIMESTAMP: 42250f77

    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at

    "0x%08lx ". The memory could not be "%s ".

    FAULTING_IP:
    nt!ExAllocatePoolWithTag+7a
    8055007f 0f87ed060000 jnbe nt!ExFreePool+0x39e (80550772)

    TRAP_FRAME: f76e2b74 -- (.trap fffffffff76e2b74)
    .trap fffffffff76e2b74
    ErrCode = 00000002
    eax=00000000 ebx=805699c0 ecx=00000001 edx=0271f5bc esi=0000000d edi=00000000
    eip=8055007f esp=f76e2be8 ebp=f76e2c3c iopl=0 nv up ei ng nz na po cy
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010287
    nt!ExAllocatePoolWithTag+0x7a:
    8055007f 0f87ed060000 jnbe nt!ExFreePool+0x39e (80550772) [br=0]
    .trap
    Resetting default scope

    CUSTOMER_CRASH_COUNT: 12

    DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT

    BUGCHECK_STR: 0x8E

    LAST_CONTROL_TRANSFER: from 8057d140 to 8055007f

    STACK_TEXT:
    WARNING: Stack unwind information not available. Following frames may be wrong.
    f76e2c3c 8057d140 00000000 00000060 704f6f49 nt!ExAllocatePoolWithTag+0x7a
    f76e2ca8 8057d3a2 0271f62c 00100080 0271f5e0 nt!FsRtlCurrentBatchOplock+0x10f
    f76e2d04 8057d550 0271f62c 00100080 0271f5e0 nt!IoCreateFile+0x4f
    f76e2d44 804dd99f 0271f62c 00100080 0271f5e0 nt!NtOpenFile+0x27
    f76e2d64 7c90eb94 badb0d00 0271f5bc 00000000 nt!KiDeliverApc+0xb9e
    f76e2d68 badb0d00 0271f5bc 00000000 00000000 0x7c90eb94
    f76e2d6c 0271f5bc 00000000 00000000 00000000 0xbadb0d00
    f76e2d70 00000000 00000000 00000000 00000000 0x271f5bc


    STACK_COMMAND: .bugcheck ; kb

    FOLLOWUP_IP:
    nt!ExAllocatePoolWithTag+7a
    8055007f 0f87ed060000 jnbe nt!ExFreePool+0x39e (80550772)

    SYMBOL_STACK_INDEX: 0

    FOLLOWUP_NAME: MachineOwner

    SYMBOL_NAME: nt!ExAllocatePoolWithTag+7a

    IMAGE_NAME: ntkrnlmp.exe

    BUCKET_ID: WRONG_SYMBOLS

    Followup: MachineOwner
    ---------

    eax=00000000 ebx=805699c0 ecx=00000001 edx=0271f5bc esi=0000000d edi=00000000
    eip=8055007f esp=f76e2be8 ebp=f76e2c3c iopl=0 nv up ei ng nz na po cy
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010287
    nt!ExAllocatePoolWithTag+0x7a:
    8055007f 0f87ed060000 jnbe nt!ExFreePool+0x39e (80550772) [br=0]
    ChildEBP RetAddr Args to Child
    WARNING: Stack unwind information not available. Following frames may be wrong.
    f76e2c3c 8057d140 00000000 00000060 704f6f49 nt!ExAllocatePoolWithTag+0x7a
    f76e2ca8 8057d3a2 0271f62c 00100080 0271f5e0 nt!FsRtlCurrentBatchOplock+0x10f
    f76e2d04 8057d550 0271f62c 00100080 0271f5e0 nt!IoCreateFile+0x4f
    f76e2d44 804dd99f 0271f62c 00100080 0271f5e0 nt!NtOpenFile+0x27
    f76e2d64 7c90eb94 badb0d00 0271f5bc 00000000 nt!KiDeliverApc+0xb9e
    f76e2d68 badb0d00 0271f5bc 00000000 00000000 0x7c90eb94
    f76e2d6c 0271f5bc 00000000 00000000 00000000 0xbadb0d00
    f76e2d70 00000000 00000000 00000000 00000000 0x271f5bc
    start end module name
    804d7000 806fd000 nt ntkrnlmp.exe Wed Mar 02 02:57:27 2005 (42250F77)
    806fd000 8071dd00 hal halmacpi.dll Wed Aug 04 08:59:09 2004 (41107B2D)
    bf800000 bf9c1180 win32k win32k.sys Thu Oct 06 03:05:44 2005 (43446A58)
    bf9c2000 bf9d3580 dxg dxg.sys Wed Aug 04 09:00:51 2004 (41107B93)
    bf9d4000 bfa33000 ati2dvag ati2dvag.dll Wed Aug 13 05:34:46 2003 (3F39A3C6)
    bfa33000 bfb30f60 ati3d2ag ati3d2ag.dll Wed Aug 13 05:01:07 2003 (3F399BE3)
    f20ec000 f2115f00 kmixer kmixer.sys Wed Aug 04 09:07:46 2004 (41107D32)
    f222e000 f2250080 RDPWD RDPWD.SYS Fri Jun 10 02:52:39 2005 (42A8D647)
    f238b000 f23cb100 HTTP HTTP.sys Sat Oct 09 02:48:20 2004 (41672744)
    f286a000 f287e400 wdmaud wdmaud.sys Wed Aug 04 09:15:03 2004 (41107EE7)
    f287f000 f28d0300 srv srv.sys Tue May 10 03:17:49 2005 (427FFDAD)
    f29e9000 f2a15400 mrxdav mrxdav.sys Wed Aug 04 09:00:49 2004 (41107B91)
    f2aae000 f2abcd80 sysaudio sysaudio.sys Wed Aug 04 09:15:54 2004 (41107F1A)
    f2bb6000 f2bb9280 ndisuio ndisuio.sys Wed Aug 04 09:03:10 2004 (41107C1E)
    f2cbe000 f2cd5480 dump_atapi dump_atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
    f2cd6000 f2ce6280 Udfs Udfs.SYS Wed Aug 04 09:00:27 2004 (41107B7B)
    f2d0f000 f2d7d400 mrxsmb mrxsmb.sys Wed Jan 19 06:26:50 2005 (41EDE18A)
    f2e1e000 f2e48a00 rdbss rdbss.sys Thu Oct 28 04:13:57 2004 (418047D5)
    f2e99000 f2ebad00 afd afd.sys Wed Aug 04 09:14:13 2004 (41107EB5)
    f2ebb000 f2edbf00 ipnat ipnat.sys Thu Sep 30 01:28:36 2004 (415B3714)
    f2edc000 f2f03c00 netbt netbt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
    f2f04000 f2f5bd80 tcpip tcpip.sys Fri Jan 13 04:28:12 2006 (43C7103C)
    f2f5c000 f2f6e400 ipsec ipsec.sys Wed Aug 04 09:14:27 2004 (41107EC3)
    f2f9f000 f2fa1f80 mouhid mouhid.sys Fri Aug 17 23:47:57 2001 (3B7D82FD)
    f2fa3000 f2fa6a00 kbdhid kbdhid.sys Wed Aug 04 08:58:33 2004 (41107B09)
    f6fd7000 f700a200 update update.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f704a000 f707a100 rdpdr rdpdr.sys Wed Aug 04 09:01:10 2004 (41107BA6)
    f711b000 f712be00 psched psched.sys Wed Aug 04 09:04:16 2004 (41107C60)
    f712c000 f7142680 ndiswan ndiswan.sys Wed Aug 04 09:14:30 2004 (41107EC6)
    f7143000 f7156900 parport parport.sys Wed Aug 04 08:59:04 2004 (41107B28)
    f7157000 f71b6980 ALCXSENS ALCXSENS.SYS Thu Oct 16 17:04:48 2003 (3F8EA580)
    f71b7000 f71da980 portcls portcls.sys Wed Aug 04 09:15:47 2004 (41107F13)
    f71db000 f724ce80 ALCXWDM ALCXWDM.SYS Thu Oct 09 13:52:06 2003 (3F853DD6)
    f724d000 f726f680 ks ks.sys Wed Aug 04 09:15:20 2004 (41107EF8)
    f7270000 f7292e80 USBPORT USBPORT.SYS Wed Aug 04 09:08:34 2004 (41107D62)
    f7293000 f72a6780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 09:07:04 2004 (41107D08)
    f72a7000 f7343000 ati2mtag ati2mtag.sys Wed Aug 13 05:34:27 2003 (3F39A3B3)
    f738b000 f73a5580 Mup Mup.sys Wed Aug 04 09:15:20 2004 (41107EF8)
    f73a6000 f73d2a80 NDIS NDIS.sys Wed Aug 04 09:14:27 2004 (41107EC3)
    f73d3000 f745f480 Ntfs Ntfs.sys Wed Aug 04 09:15:06 2004 (41107EEA)
    f7460000 f7476780 KSecDD KSecDD.sys Wed Aug 04 08:59:45 2004 (41107B51)
    f7477000 f748c460 SymSnap SymSnap.sys Fri Aug 05 21:44:18 2005 (42F3B382)
    f748d000 f749ef00 sr sr.sys Wed Aug 04 09:06:22 2004 (41107CDE)
    f749f000 f74bd780 fltmgr fltmgr.sys Wed Aug 04 09:01:17 2004 (41107BAD)
    f74be000 f74d5480 atapi atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
    f74d6000 f74fb700 dmio dmio.sys Wed Aug 04 09:07:13 2004 (41107D11)
    f74fc000 f751a880 ftdisk ftdisk.sys Fri Aug 17 23:52:41 2001 (3B7D8419)
    f751b000 f752ba80 pci pci.sys Wed Aug 04 09:07:45 2004 (41107D31)
    f752c000 f7559d80 ACPI ACPI.sys Wed Aug 04 09:07:35 2004 (41107D27)
    f75a3000 f75abc00 isapnp isapnp.sys Fri Aug 17 23:58:01 2001 (3B7D8559)
    f75b3000 f75c1e80 ohci1394 ohci1394.sys Wed Aug 04 09:10:05 2004 (41107DBD)
    f75c3000 f75d0000 1394BUS 1394BUS.SYS Wed Aug 04 09:10:03 2004 (41107DBB)
    f75d3000 f75dd500 MountMgr MountMgr.sys Wed Aug 04 08:58:29 2004 (41107B05)
    f75e3000 f75ed880 sbp2port sbp2port.sys Wed Aug 04 08:59:54 2004 (41107B5A)
    f75f3000 f75ffc80 VolSnap VolSnap.sys Wed Aug 04 09:00:14 2004 (41107B6E)
    f7603000 f760be00 disk disk.sys Wed Aug 04 08:59:53 2004 (41107B59)
    f7613000 f761f200 CLASSPNP CLASSPNP.SYS Wed Aug 04 09:14:26 2004 (41107EC2)
    f7643000 f764b700 wanarp wanarp.sys Wed Aug 04 09:04:57 2004 (41107C89)
    f7653000 f765b700 netbios netbios.sys Wed Aug 04 09:03:19 2004 (41107C27)
    f7673000 f7681d80 arp1394 arp1394.sys Wed Aug 04 08:58:28 2004 (41107B04)
    f7683000 f768ca20 V2IMount V2IMount.SYS Sat Sep 10 03:43:27 2005 (43222C2F)
    f7693000 f769e600 IrBus IrBus.sys Wed Jan 11 02:48:57 2006 (43C455F9)
    f76a3000 f76ab880 Fips Fips.SYS Sat Aug 18 04:31:49 2001 (3B7DC585)
    f76b3000 f76bbd80 HIDCLASS HIDCLASS.SYS Wed Aug 04 09:08:18 2004 (41107D52)
    f7713000 f771bd00 intelppm intelppm.sys Wed Aug 04 08:59:19 2004 (41107B37)
    f7723000 f772d380 imapi imapi.sys Wed Aug 04 09:00:12 2004 (41107B6C)
    f7733000 f773f180 cdrom cdrom.sys Wed Aug 04 08:59:52 2004 (41107B58)
    f7743000 f7751080 redbook redbook.sys Wed Aug 04 08:59:34 2004 (41107B46)
    f7753000 f7762180 nic1394 nic1394.sys Wed Aug 04 08:58:28 2004 (41107B04)
    f7763000 f7771b80 drmk drmk.sys Wed Aug 04 09:07:54 2004 (41107D3A)
    f7773000 f7782d80 serial serial.sys Wed Aug 04 09:15:51 2004 (41107F17)
    f7783000 f778f880 rasl2tp rasl2tp.sys Wed Aug 04 09:14:21 2004 (41107EBD)
    f7793000 f779d200 raspppoe raspppoe.sys Wed Aug 04 09:05:06 2004 (41107C92)
    f77a3000 f77aed00 raspptp raspptp.sys Wed Aug 04 09:14:26 2004 (41107EC2)
    f77b3000 f77bb900 msgpc msgpc.sys Wed Aug 04 09:04:11 2004 (41107C5B)
    f77c3000 f77ccf00 termdd termdd.sys Wed Aug 04 08:58:52 2004 (41107B1C)
    f77f3000 f77fc480 NDProxy NDProxy.SYS Fri Aug 17 23:55:30 2001 (3B7D84C2)
    f7803000 f7811100 usbhub usbhub.sys Wed Aug 04 09:08:40 2004 (41107D68)
    f7823000 f7829200 PCIIDEX PCIIDEX.SYS Wed Aug 04 08:59:40 2004 (41107B4C)
    f782b000 f782f900 PartMgr PartMgr.sys Sat Aug 18 04:32:23 2001 (3B7DC5A7)
    f7883000 f7887280 usbohci usbohci.sys Wed Aug 04 09:08:34 2004 (41107D62)
    f788b000 f7891800 usbehci usbehci.sys Wed Aug 04 09:08:34 2004 (41107D62)
    f7893000 f789a000 GearAspiWDM GearAspiWDM.SYS Wed Feb 02 07:19:49 2005 (420062F5)
    f789b000 f789f880 TDI TDI.SYS Wed Aug 04 09:07:47 2004 (41107D33)
    f78a3000 f78a7580 ptilink ptilink.sys Fri Aug 17 23:49:53 2001 (3B7D8371)
    f78ab000 f78af080 raspti raspti.sys Fri Aug 17 23:55:32 2001 (3B7D84C4)
    f78b3000 f78b9000 kbdclass kbdclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f78bb000 f78c0a00 mouclass mouclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f78db000 f78e1180 HIDPARSE HIDPARSE.SYS Wed Aug 04 09:08:15 2004 (41107D4F)
    f78e3000 f78e8200 vga vga.sys Wed Aug 04 09:07:06 2004 (41107D0A)
    f78eb000 f78efa80 Msfs Msfs.SYS Wed Aug 04 09:00:37 2004 (41107B85)
    f78f3000 f78fa880 Npfs Npfs.SYS Wed Aug 04 09:00:38 2004 (41107B86)
    f78fb000 f7902000 nvport nvport.sys Sat Feb 25 07:48:00 2006 (43FFEF90)
    f790b000 f790fb00 hidir hidir.sys Wed Jan 11 02:48:52 2006 (43C455F4)
    f7913000 f7917500 watchdog watchdog.sys Wed Aug 04 09:07:32 2004 (41107D24)
    f792b000 f792f720 PStrip PStrip.SYS Mon Nov 08 14:02:53 2004 (418F606D)
    f7943000 f7949000 symlcbrd symlcbrd.sys Fri Sep 03 04:56:06 2004 (4137CF36)
    f79ab000 f79b0500 TDTCP TDTCP.SYS Wed Aug 04 08:58:52 2004 (41107B1C)
    f79b3000 f79b6000 BOOTVID BOOTVID.dll Fri Aug 17 23:49:09 2001 (3B7D8345)
    f7a43000 f7a45680 pfc pfc.sys Sat Sep 28 01:53:07 2002 (3D94E153)
    f7a4b000 f7a4ec80 serenum serenum.sys Wed Aug 04 08:59:06 2004 (41107B2A)
    f7a4f000 f7a51580 ndistapi ndistapi.sys Fri Aug 17 23:55:29 2001 (3B7D84C1)
    f7a6f000 f7a72c80 mssmbios mssmbios.sys Wed Aug 04 09:07:47 2004 (41107D33)
    f7a97000 f7a99900 Dxapi Dxapi.sys Fri Aug 17 23:53:19 2001 (3B7D843F)
    f7a9b000 f7a9d280 rasacd rasacd.sys Fri Aug 17 23:55:39 2001 (3B7D84CB)
    f7aa3000 f7aa4b80 kdcom kdcom.dll Fri Aug 17 23:49:10 2001 (3B7D8346)
    f7aa5000 f7aa6100 WMILIB WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
    f7aa7000 f7aa8700 dmload dmload.sys Fri Aug 17 23:58:15 2001 (3B7D8567)
    f7ab9000 f7aba100 swenum swenum.sys Wed Aug 04 08:58:41 2004 (41107B11)
    f7abb000 f7abc280 USBD USBD.SYS Sat Aug 18 00:02:58 2001 (3B7D8682)
    f7abd000 f7abef00 Fs_Rec Fs_Rec.SYS Fri Aug 17 23:49:37 2001 (3B7D8361)
    f7abf000 f7ac0080 Beep Beep.SYS Fri Aug 17 23:47:33 2001 (3B7D82E5)
    f7ac1000 f7ac2080 mnmdd mnmdd.SYS Fri Aug 17 23:57:28 2001 (3B7D8538)
    f7ac3000 f7ac4080 RDPCDD RDPCDD.sys Fri Aug 17 23:46:56 2001 (3B7D82C0)
    f7ac5000 f7ac6100 dump_WMILIB dump_WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
    f7adf000 f7ae0a80 ParVdm ParVdm.SYS Fri Aug 17 23:49:49 2001 (3B7D836D)
    f7b6b000 f7b6bd00 pciide pciide.sys Fri Aug 17 23:51:49 2001 (3B7D83E5)
    f7c01000 f7c01d00 dxgthk dxgthk.sys Fri Aug 17 23:53:12 2001 (3B7D8438)
    f7c40000 f7c40c00 audstub audstub.sys Fri Aug 17 23:59:40 2001 (3B7D85BC)
    f7ca8000 f7ca8b80 Null Null.SYS Fri Aug 17 23:47:39 2001 (3B7D82EB)
     
    zeizei,
    #3
  5. 2006/04/18
    zeizei

    zeizei Inactive Thread Starter

    Joined:
    2006/04/18
    Messages:
    6
    Likes Received:
    0
    Unloaded modules:
    f27f5000 f281f000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7bf3000 f7bf4000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f76d3000 f76e0000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2a8e000 f2a9c000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2847000 f286a000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7ae9000 f7aeb000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f755a000 f7582000 vidstub.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7663000 f766c000 processr.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7a97000 f7a9b000 kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7813000 f7820000 i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f78d3000 f78d8000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7a93000 f7a96000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f78cb000 f78d0000 Flpydisk.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f78c3000 f78ca000 Fdc.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt

    4. fourth one (minidump)
    ------------------------------

    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.6.0003.5
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini041706-11.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe -
    Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_gdr.050301-1519
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
    Debug session time: Mon Apr 17 22:22:10.140 2006 (GMT+3)
    System Uptime: 0 days 0:32:39.848
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe -
    Loading Kernel Symbols
    ........................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    ................
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 10000050, {f0458d10, 0, 80578ff6, 0}

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *************************************************************************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    *************************************************************************
    Probably caused by : memory_corruption

    Followup: memory_corruption
    ---------

    0: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    PAGE_FAULT_IN_NONPAGED_AREA (50)
    Invalid system memory was referenced. This cannot be protected by try-except,
    it must be protected by a Probe. Typically the address is just plain bad or it
    is pointing at freed memory.
    Arguments:
    Arg1: f0458d10, memory referenced.
    Arg2: 00000000, value 0 = read operation, 1 = write operation.
    Arg3: 80578ff6, If non-zero, the instruction address which referenced the bad memory
    address.
    Arg4: 00000000, (reserved)

    Debugging Details:
    ------------------

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *************************************************************************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    *************************************************************************

    FAULTING_MODULE: 804d7000 nt

    DEBUG_FLR_IMAGE_TIMESTAMP: 0

    READ_ADDRESS: unable to get nt!MmSpecialPoolStart
    unable to get nt!MmSpecialPoolEnd
    unable to get nt!MmPoolCodeStart
    unable to get nt!MmPoolCodeEnd
    f0458d10

    FAULTING_IP:
    nt!SeSinglePrivilegeCheck+2a
    80578ff6 ff35108d45f0 push dword ptr [f0458d10]

    MM_INTERNAL_CODE: 0

    CUSTOMER_CRASH_COUNT: 11

    DEFAULT_BUCKET_ID: CODE_CORRUPTION

    BUGCHECK_STR: 0x50

    LAST_CONTROL_TRANSFER: from 805791bc to 80578ff6

    STACK_TEXT:
    WARNING: Stack unwind information not available. Following frames may be wrong.
    f2db3c58 805791bc 00000014 00000000 e19be601 nt!SeSinglePrivilegeCheck+0x2a
    f2db3d4c 804dd99f 00a9fc68 00000400 00a9fc38 nt!NtOpenProcess+0xe2
    f2db3d64 7c90eb94 badb0d00 00a9fc1c 00000000 nt!KiDeliverApc+0xb9e
    f2db3d68 badb0d00 00a9fc1c 00000000 00000000 0x7c90eb94
    f2db3d6c 00a9fc1c 00000000 00000000 00000000 0xbadb0d00
    f2db3d70 00000000 00000000 00000000 00000000 0xa9fc1c


    STACK_COMMAND: .bugcheck ; kb

    CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
    !chkimg -lo 50 -d !nt
    80578ff7 - nt!SeSinglePrivilegeCheck+2b [ 75:35 ]
    1 error : !nt (80578ff7)

    MODULE_NAME: memory_corruption

    IMAGE_NAME: memory_corruption

    FOLLOWUP_NAME: memory_corruption

    MEMORY_CORRUPTOR: ONE_BIT

    FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT

    BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT

    Followup: memory_corruption
    ---------

    eax=e1a97c68 ebx=00a9fc38 ecx=e1a97c6f edx=e1a97c68 esi=00000000 edi=f2db3d28
    eip=80578ff6 esp=f2db3c34 ebp=f2db3c58 iopl=0 nv up ei ng nz na pe nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
    nt!SeSinglePrivilegeCheck+0x2a:
    80578ff6 ff35108d45f0 push dword ptr [f0458d10] ds:0023:f0458d10=????????
    ChildEBP RetAddr Args to Child
    WARNING: Stack unwind information not available. Following frames may be wrong.
    f2db3c58 805791bc 00000014 00000000 e19be601 nt!SeSinglePrivilegeCheck+0x2a
    f2db3d4c 804dd99f 00a9fc68 00000400 00a9fc38 nt!NtOpenProcess+0xe2
    f2db3d64 7c90eb94 badb0d00 00a9fc1c 00000000 nt!KiDeliverApc+0xb9e
    f2db3d68 badb0d00 00a9fc1c 00000000 00000000 0x7c90eb94
    f2db3d6c 00a9fc1c 00000000 00000000 00000000 0xbadb0d00
    f2db3d70 00000000 00000000 00000000 00000000 0xa9fc1c
    start end module name
    804d7000 806fd000 nt ntkrnlmp.exe Wed Mar 02 02:57:27 2005 (42250F77)
    806fd000 8071dd00 hal halmacpi.dll Wed Aug 04 08:59:09 2004 (41107B2D)
    bf800000 bf9c1180 win32k win32k.sys Thu Oct 06 03:05:44 2005 (43446A58)
    bf9c2000 bf9d3580 dxg dxg.sys Wed Aug 04 09:00:51 2004 (41107B93)
    bf9d4000 bfa33000 ati2dvag ati2dvag.dll Wed Aug 13 05:34:46 2003 (3F39A3C6)
    bfa33000 bfb30f60 ati3d2ag ati3d2ag.dll Wed Aug 13 05:01:07 2003 (3F399BE3)
    f1e89000 f1eb2f00 kmixer kmixer.sys Wed Aug 04 09:07:46 2004 (41107D32)
    f1edb000 f1efd080 RDPWD RDPWD.SYS Fri Jun 10 02:52:39 2005 (42A8D647)
    f20de000 f211e100 HTTP HTTP.sys Sat Oct 09 02:48:20 2004 (41672744)
    f2287000 f22d8300 srv srv.sys Tue May 10 03:17:49 2005 (427FFDAD)
    f23c3000 f23ef400 mrxdav mrxdav.sys Wed Aug 04 09:00:49 2004 (41107B91)
    f26cf000 f26e3400 wdmaud wdmaud.sys Wed Aug 04 09:15:03 2004 (41107EE7)
    f27d4000 f27e2d80 sysaudio sysaudio.sys Wed Aug 04 09:15:54 2004 (41107F1A)
    f2bac000 f2baf280 ndisuio ndisuio.sys Wed Aug 04 09:03:10 2004 (41107C1E)
    f2cac000 f2cc3480 dump_atapi dump_atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
    f2cc4000 f2cd4280 Udfs Udfs.SYS Wed Aug 04 09:00:27 2004 (41107B7B)
    f2cd5000 f2d43400 mrxsmb mrxsmb.sys Wed Jan 19 06:26:50 2005 (41EDE18A)
    f2e0c000 f2e36a00 rdbss rdbss.sys Thu Oct 28 04:13:57 2004 (418047D5)
    f2e83000 f2e85900 Dxapi Dxapi.sys Fri Aug 17 23:53:19 2001 (3B7D843F)
    f2e87000 f2ea8d00 afd afd.sys Wed Aug 04 09:14:13 2004 (41107EB5)
    f2ea9000 f2ec9f00 ipnat ipnat.sys Thu Sep 30 01:28:36 2004 (415B3714)
    f2eca000 f2ef1c00 netbt netbt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
    f2ef2000 f2f49d80 tcpip tcpip.sys Fri Jan 13 04:28:12 2006 (43C7103C)
    f2f4a000 f2f5c400 ipsec ipsec.sys Wed Aug 04 09:14:27 2004 (41107EC3)
    f2f91000 f2f93f80 mouhid mouhid.sys Fri Aug 17 23:47:57 2001 (3B7D82FD)
    f2f95000 f2f98a00 kbdhid kbdhid.sys Wed Aug 04 08:58:33 2004 (41107B09)
    f6fc5000 f6ff8200 update update.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f7038000 f7068100 rdpdr rdpdr.sys Wed Aug 04 09:01:10 2004 (41107BA6)
    f7109000 f7119e00 psched psched.sys Wed Aug 04 09:04:16 2004 (41107C60)
    f711a000 f7130680 ndiswan ndiswan.sys Wed Aug 04 09:14:30 2004 (41107EC6)
    f7131000 f7144900 parport parport.sys Wed Aug 04 08:59:04 2004 (41107B28)
    f7145000 f71a4980 ALCXSENS ALCXSENS.SYS Thu Oct 16 17:04:48 2003 (3F8EA580)
    f71a5000 f71c8980 portcls portcls.sys Wed Aug 04 09:15:47 2004 (41107F13)
    f71c9000 f723ae80 ALCXWDM ALCXWDM.SYS Thu Oct 09 13:52:06 2003 (3F853DD6)
    f723b000 f724c300 Rtlnicxp Rtlnicxp.sys Fri Jul 16 09:19:52 2004 (40F77388)
    f724d000 f726f680 ks ks.sys Wed Aug 04 09:15:20 2004 (41107EF8)
    f7270000 f7292e80 USBPORT USBPORT.SYS Wed Aug 04 09:08:34 2004 (41107D62)
    f7293000 f72a6780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 09:07:04 2004 (41107D08)
    f72a7000 f7343000 ati2mtag ati2mtag.sys Wed Aug 13 05:34:27 2003 (3F39A3B3)
    f735f000 f7361280 rasacd rasacd.sys Fri Aug 17 23:55:39 2001 (3B7D84CB)
    f738b000 f73a5580 Mup Mup.sys Wed Aug 04 09:15:20 2004 (41107EF8)
    f73a6000 f73d2a80 NDIS NDIS.sys Wed Aug 04 09:14:27 2004 (41107EC3)
    f73d3000 f745f480 Ntfs Ntfs.sys Wed Aug 04 09:15:06 2004 (41107EEA)
    f7460000 f7476780 KSecDD KSecDD.sys Wed Aug 04 08:59:45 2004 (41107B51)
    f7477000 f748c460 SymSnap SymSnap.sys Fri Aug 05 21:44:18 2005 (42F3B382)
    f748d000 f749ef00 sr sr.sys Wed Aug 04 09:06:22 2004 (41107CDE)
    f749f000 f74bd780 fltmgr fltmgr.sys Wed Aug 04 09:01:17 2004 (41107BAD)
    f74be000 f74d5480 atapi atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
    f74d6000 f74fb700 dmio dmio.sys Wed Aug 04 09:07:13 2004 (41107D11)
    f74fc000 f751a880 ftdisk ftdisk.sys Fri Aug 17 23:52:41 2001 (3B7D8419)
    f751b000 f752ba80 pci pci.sys Wed Aug 04 09:07:45 2004 (41107D31)
    f752c000 f7559d80 ACPI ACPI.sys Wed Aug 04 09:07:35 2004 (41107D27)
    f75a3000 f75abc00 isapnp isapnp.sys Fri Aug 17 23:58:01 2001 (3B7D8559)
    f75b3000 f75c1e80 ohci1394 ohci1394.sys Wed Aug 04 09:10:05 2004 (41107DBD)
    f75c3000 f75d0000 1394BUS 1394BUS.SYS Wed Aug 04 09:10:03 2004 (41107DBB)
    f75d3000 f75dd500 MountMgr MountMgr.sys Wed Aug 04 08:58:29 2004 (41107B05)
    f75e3000 f75ed880 sbp2port sbp2port.sys Wed Aug 04 08:59:54 2004 (41107B5A)
    f75f3000 f75ffc80 VolSnap VolSnap.sys Wed Aug 04 09:00:14 2004 (41107B6E)
    f7603000 f760be00 disk disk.sys Wed Aug 04 08:59:53 2004 (41107B59)
    f7613000 f761f200 CLASSPNP CLASSPNP.SYS Wed Aug 04 09:14:26 2004 (41107EC2)
    f7693000 f769bd00 intelppm intelppm.sys Wed Aug 04 08:59:19 2004 (41107B37)
    f76a3000 f76ad380 imapi imapi.sys Wed Aug 04 09:00:12 2004 (41107B6C)
    f76b3000 f76bf180 cdrom cdrom.sys Wed Aug 04 08:59:52 2004 (41107B58)
    f76c3000 f76d1080 redbook redbook.sys Wed Aug 04 08:59:34 2004 (41107B46)
    f76d3000 f76e2180 nic1394 nic1394.sys Wed Aug 04 08:58:28 2004 (41107B04)
    f76e3000 f76f1b80 drmk drmk.sys Wed Aug 04 09:07:54 2004 (41107D3A)
    f76f3000 f7702d80 serial serial.sys Wed Aug 04 09:15:51 2004 (41107F17)
    f7703000 f770f880 rasl2tp rasl2tp.sys Wed Aug 04 09:14:21 2004 (41107EBD)
    f7713000 f771d200 raspppoe raspppoe.sys Wed Aug 04 09:05:06 2004 (41107C92)
    f7723000 f772ed00 raspptp raspptp.sys Wed Aug 04 09:14:26 2004 (41107EC2)
    f7733000 f773b900 msgpc msgpc.sys Wed Aug 04 09:04:11 2004 (41107C5B)
    f7743000 f774cf00 termdd termdd.sys Wed Aug 04 08:58:52 2004 (41107B1C)
    f7773000 f777c480 NDProxy NDProxy.SYS Fri Aug 17 23:55:30 2001 (3B7D84C2)
    f7783000 f7791100 usbhub usbhub.sys Wed Aug 04 09:08:40 2004 (41107D68)
    f77a3000 f77ab700 wanarp wanarp.sys Wed Aug 04 09:04:57 2004 (41107C89)
    f77b3000 f77bb700 netbios netbios.sys Wed Aug 04 09:03:19 2004 (41107C27)
    f77d3000 f77e1d80 arp1394 arp1394.sys Wed Aug 04 08:58:28 2004 (41107B04)
    f77e3000 f77eca20 V2IMount V2IMount.SYS Sat Sep 10 03:43:27 2005 (43222C2F)
    f77f3000 f77fe600 IrBus IrBus.sys Wed Jan 11 02:48:57 2006 (43C455F9)
    f7803000 f780b880 Fips Fips.SYS Sat Aug 18 04:31:49 2001 (3B7DC585)
    f7813000 f781bd80 HIDCLASS HIDCLASS.SYS Wed Aug 04 09:08:18 2004 (41107D52)
    f7823000 f7829200 PCIIDEX PCIIDEX.SYS Wed Aug 04 08:59:40 2004 (41107B4C)
    f782b000 f782f900 PartMgr PartMgr.sys Sat Aug 18 04:32:23 2001 (3B7DC5A7)
    f7853000 f7858500 TDTCP TDTCP.SYS Wed Aug 04 08:58:52 2004 (41107B1C)
    f78ab000 f78af280 usbohci usbohci.sys Wed Aug 04 09:08:34 2004 (41107D62)
    f78b3000 f78b9800 usbehci usbehci.sys Wed Aug 04 09:08:34 2004 (41107D62)
    f78bb000 f78c2000 GearAspiWDM GearAspiWDM.SYS Wed Feb 02 07:19:49 2005 (420062F5)
    f78c3000 f78c7880 TDI TDI.SYS Wed Aug 04 09:07:47 2004 (41107D33)
    f78cb000 f78cf580 ptilink ptilink.sys Fri Aug 17 23:49:53 2001 (3B7D8371)
    f78d3000 f78d7080 raspti raspti.sys Fri Aug 17 23:55:32 2001 (3B7D84C4)
    f78db000 f78e1000 kbdclass kbdclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f78e3000 f78e8a00 mouclass mouclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f7903000 f7909180 HIDPARSE HIDPARSE.SYS Wed Aug 04 09:08:15 2004 (41107D4F)
    f790b000 f7910200 vga vga.sys Wed Aug 04 09:07:06 2004 (41107D0A)
    f7913000 f7917a80 Msfs Msfs.SYS Wed Aug 04 09:00:37 2004 (41107B85)
    f791b000 f7922880 Npfs Npfs.SYS Wed Aug 04 09:00:38 2004 (41107B86)
    f7923000 f792a000 nvport nvport.sys Sat Feb 25 07:48:00 2006 (43FFEF90)
    f7933000 f7937b00 hidir hidir.sys Wed Jan 11 02:48:52 2006 (43C455F4)
    f793b000 f793f500 watchdog watchdog.sys Wed Aug 04 09:07:32 2004 (41107D24)
    f7993000 f7997720 PStrip PStrip.SYS Mon Nov 08 14:02:53 2004 (418F606D)
    f799b000 f79a1000 symlcbrd symlcbrd.sys Fri Sep 03 04:56:06 2004 (4137CF36)
    f79b3000 f79b6000 BOOTVID BOOTVID.dll Fri Aug 17 23:49:09 2001 (3B7D8345)
    f7a53000 f7a55680 pfc pfc.sys Sat Sep 28 01:53:07 2002 (3D94E153)
    f7a5b000 f7a5ec80 serenum serenum.sys Wed Aug 04 08:59:06 2004 (41107B2A)
    f7a5f000 f7a61580 ndistapi ndistapi.sys Fri Aug 17 23:55:29 2001 (3B7D84C1)
    f7a7f000 f7a82c80 mssmbios mssmbios.sys Wed Aug 04 09:07:47 2004 (41107D33)
    f7aa3000 f7aa4b80 kdcom kdcom.dll Fri Aug 17 23:49:10 2001 (3B7D8346)
    f7aa5000 f7aa6100 WMILIB WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
    f7aa7000 f7aa8700 dmload dmload.sys Fri Aug 17 23:58:15 2001 (3B7D8567)
    f7ab3000 f7ab4100 swenum swenum.sys Wed Aug 04 08:58:41 2004 (41107B11)
    f7ab5000 f7ab6280 USBD USBD.SYS Sat Aug 18 00:02:58 2001 (3B7D8682)
    f7ab7000 f7ab8f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 23:49:37 2001 (3B7D8361)
    f7ab9000 f7aba080 Beep Beep.SYS Fri Aug 17 23:47:33 2001 (3B7D82E5)
    f7abb000 f7abc080 mnmdd mnmdd.SYS Fri Aug 17 23:57:28 2001 (3B7D8538)
    f7abd000 f7abe080 RDPCDD RDPCDD.sys Fri Aug 17 23:46:56 2001 (3B7D82C0)
    f7ac3000 f7ac4100 dump_WMILIB dump_WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
    f7b57000 f7b58a80 ParVdm ParVdm.SYS Fri Aug 17 23:49:49 2001 (3B7D836D)
    f7b6b000 f7b6bd00 pciide pciide.sys Fri Aug 17 23:51:49 2001 (3B7D83E5)
    f7c26000 f7c26d00 dxgthk dxgthk.sys Fri Aug 17 23:53:12 2001 (3B7D8438)
    f7c35000 f7c35c00 audstub audstub.sys Fri Aug 17 23:59:40 2001 (3B7D85BC)
    f7c97000 f7c97b80 Null Null.SYS Fri Aug 17 23:47:39 2001 (3B7D82EB)
     
    zeizei,
    #4
  6. 2006/04/18
    zeizei

    zeizei Inactive Thread Starter

    Joined:
    2006/04/18
    Messages:
    6
    Likes Received:
    0
    5. fifth one (minidump)
    --------------------
    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.6.0003.5
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini041706-03.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe -
    Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_gdr.050301-1519
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
    Debug session time: Mon Apr 17 01:00:18.343 2006 (GMT+3)
    System Uptime: 0 days 0:03:57.048
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe -
    Loading Kernel Symbols
    ..............................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    .................
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 10000050, {f1dabec8, 1, f2f6476c, 0}

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *************************************************************************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    *************************************************************************
    Unable to load image avgtdi.sys, Win32 error 2
    *** WARNING: Unable to verify timestamp for avgtdi.sys
    *** ERROR: Module load completed but symbols could not be loaded for avgtdi.sys
    Probably caused by : avgtdi.sys ( avgtdi+88b )

    Followup: MachineOwner
    ---------

    0: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    PAGE_FAULT_IN_NONPAGED_AREA (50)
    Invalid system memory was referenced. This cannot be protected by try-except,
    it must be protected by a Probe. Typically the address is just plain bad or it
    is pointing at freed memory.
    Arguments:
    Arg1: f1dabec8, memory referenced.
    Arg2: 00000001, value 0 = read operation, 1 = write operation.
    Arg3: f2f6476c, If non-zero, the instruction address which referenced the bad memory
    address.
    Arg4: 00000000, (reserved)

    Debugging Details:
    ------------------

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *************************************************************************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    *************************************************************************

    MODULE_NAME: avgtdi

    FAULTING_MODULE: 804d7000 nt

    DEBUG_FLR_IMAGE_TIMESTAMP: 431a4222

    WRITE_ADDRESS: unable to get nt!MmSpecialPoolStart
    unable to get nt!MmSpecialPoolEnd
    unable to get nt!MmPoolCodeStart
    unable to get nt!MmPoolCodeEnd
    f1dabec8

    FAULTING_IP:
    tcpip!TcpipStackBacktraceTable+8c
    f2f6476c c8243585 enter 0x3524,0x85

    MM_INTERNAL_CODE: 0

    CUSTOMER_CRASH_COUNT: 3

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0x50

    LAST_CONTROL_TRANSFER: from 85290026 to f2f6476c

    STACK_TEXT:
    f1db293c 85290026 856a2c70 f1db2a1c f1db2960 tcpip!TcpipStackBacktraceTable+0x8c
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    f1db2a1c f2f2294a 8521f008 856a2c70 85362008 0x85290026
    f1db2a40 f2f229b0 00db2a64 85362180 85298118 tcpip!TdiSendDatagram+0xd5
    f1db2a78 f2f21308 85362008 853620c0 85362008 tcpip!UDPSendDatagram+0x4f
    f1db2a94 f7b6788b 853dbaf0 85362008 85362180 tcpip!TCPDispatchInternalDeviceControl+0xff
    f1db2b10 f2eb2bce 80566eb4 0012f170 f2eb2bce avgtdi+0x88b
    f1db2c5c 80587013 8529a2b8 00000001 0012f040 afd!AfdFastIoDeviceControl+0x2a7
    f1db2d00 8058709e 000008fc 00000408 00000000 nt!NtQuerySystemInformation+0x1b44
    f1db2d34 804dd99f 000008fc 00000408 00000000 nt!NtDeviceIoControlFile+0x2a
    f1db2d64 7c90eb94 badb0d00 0012f004 00000000 nt!KiDeliverApc+0xb9e
    f1db2d68 badb0d00 0012f004 00000000 00000000 0x7c90eb94
    f1db2d6c 0012f004 00000000 00000000 00000000 0xbadb0d00
    f1db2d70 00000000 00000000 00000000 00000000 0x12f004


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    avgtdi+88b
    f7b6788b ?? ???

    SYMBOL_STACK_INDEX: 5

    FOLLOWUP_NAME: MachineOwner

    SYMBOL_NAME: avgtdi+88b

    IMAGE_NAME: avgtdi.sys

    BUCKET_ID: WRONG_SYMBOLS

    Followup: MachineOwner
    ---------

    eax=8529ab19 ebx=8521f009 ecx=0000001d edx=f1db29b8 esi=856a2c70 edi=85290027
    eip=f2f6476c esp=f1daf404 ebp=f1db293c iopl=0 nv up ei ng nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
    tcpip!TcpipStackBacktraceTable+0x8c:
    f2f6476c c8243585 enter 0x3524,0x85
    ChildEBP RetAddr Args to Child
    f1db293c 85290026 856a2c70 f1db2a1c f1db2960 tcpip!TcpipStackBacktraceTable+0x8c
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    f1db2a1c f2f2294a 8521f008 856a2c70 85362008 0x85290026
    f1db2a40 f2f229b0 00db2a64 85362180 85298118 tcpip!TdiSendDatagram+0xd5 (FPO: [Non-Fpo])
    f1db2a78 f2f21308 85362008 853620c0 85362008 tcpip!UDPSendDatagram+0x4f (FPO: [Non-Fpo])
    f1db2a94 f7b6788b 853dbaf0 85362008 85362180 tcpip!TCPDispatchInternalDeviceControl+0xff

    (FPO: [Non-Fpo])
    f1db2b10 f2eb2bce 80566eb4 0012f170 f2eb2bce avgtdi+0x88b
    f1db2c5c 80587013 8529a2b8 00000001 0012f040 afd!AfdFastIoDeviceControl+0x2a7 (FPO:

    [Non-Fpo])
    f1db2d00 8058709e 000008fc 00000408 00000000 nt!NtQuerySystemInformation+0x1b44
    f1db2d34 804dd99f 000008fc 00000408 00000000 nt!NtDeviceIoControlFile+0x2a
    f1db2d64 7c90eb94 badb0d00 0012f004 00000000 nt!KiDeliverApc+0xb9e
    f1db2d68 badb0d00 0012f004 00000000 00000000 0x7c90eb94
    f1db2d6c 0012f004 00000000 00000000 00000000 0xbadb0d00
    f1db2d70 00000000 00000000 00000000 00000000 0x12f004
    start end module name
    804d7000 806fd000 nt ntkrnlmp.exe Wed Mar 02 02:57:27 2005 (42250F77)
    806fd000 8071dd00 hal halmacpi.dll Wed Aug 04 08:59:09 2004 (41107B2D)
    bf800000 bf9c1180 win32k win32k.sys Thu Oct 06 03:05:44 2005 (43446A58)
    bf9c2000 bf9d3580 dxg dxg.sys Wed Aug 04 09:00:51 2004 (41107B93)
    bf9d4000 bfa33000 ati2dvag ati2dvag.dll Wed Aug 13 05:34:46 2003 (3F39A3C6)
    bfa33000 bfb30f60 ati3d2ag ati3d2ag.dll Wed Aug 13 05:01:07 2003 (3F399BE3)
    f1c5a000 f1c83f00 kmixer kmixer.sys Wed Aug 04 09:07:46 2004 (41107D32)
    f1c84000 f1ca6c80 aec aec.sys Fri Feb 13 17:20:15 2004 (402CEB2F)
    f1ca7000 f1cc9080 RDPWD RDPWD.SYS Fri Jun 10 02:52:39 2005 (42A8D647)
    f208f000 f20cf100 HTTP HTTP.sys Sat Oct 09 02:48:20 2004 (41672744)
    f2456000 f246a400 wdmaud wdmaud.sys Wed Aug 04 09:15:03 2004 (41107EE7)
    f253b000 f2549d80 sysaudio sysaudio.sys Wed Aug 04 09:15:54 2004 (41107F1A)
    f255b000 f25ac300 srv srv.sys Tue May 10 03:17:49 2005 (427FFDAD)
    f2715000 f2741400 mrxdav mrxdav.sys Wed Aug 04 09:00:49 2004 (41107B91)
    f2b06000 f2b09280 ndisuio ndisuio.sys Wed Aug 04 09:03:10 2004 (41107C1E)
    f2c1a000 f2c31480 dump_atapi dump_atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
    f2c32000 f2c42280 Udfs Udfs.SYS Wed Aug 04 09:00:27 2004 (41107B7B)
    f2c43000 f2cfd6e0 avg7core avg7core.sys Thu Feb 23 02:40:43 2006 (43FD048B)
    f2cfe000 f2d6c400 mrxsmb mrxsmb.sys Wed Jan 19 06:26:50 2005 (41EDE18A)
    f2d91000 f2d93900 Dxapi Dxapi.sys Fri Aug 17 23:53:19 2001 (3B7D843F)
    f2d95000 f2dbfa00 rdbss rdbss.sys Thu Oct 28 04:13:57 2004 (418047D5)
    f2e0c000 f2e0ef80 mouhid mouhid.sys Fri Aug 17 23:47:57 2001 (3B7D82FD)
    f2eb0000 f2ed1d00 afd afd.sys Wed Aug 04 09:14:13 2004 (41107EB5)
    f2ed2000 f2ef2f00 ipnat ipnat.sys Thu Sep 30 01:28:36 2004 (415B3714)
    f2ef3000 f2f1ac00 netbt netbt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
    f2f1b000 f2f72d80 tcpip tcpip.sys Fri Jan 13 04:28:12 2006 (43C7103C)
    f2f73000 f2f85400 ipsec ipsec.sys Wed Aug 04 09:14:27 2004 (41107EC3)
    f6fee000 f7021200 update update.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f7022000 f7052100 rdpdr rdpdr.sys Wed Aug 04 09:01:10 2004 (41107BA6)
    f707b000 f708be00 psched psched.sys Wed Aug 04 09:04:16 2004 (41107C60)
    f710c000 f7114d80 HIDCLASS HIDCLASS.SYS Wed Aug 04 09:08:18 2004 (41107D52)
    f711c000 f7127600 IrBus IrBus.sys Wed Jan 11 02:48:57 2006 (43C455F9)
    f712c000 f7142680 ndiswan ndiswan.sys Wed Aug 04 09:14:30 2004 (41107EC6)
    f7143000 f7156900 parport parport.sys Wed Aug 04 08:59:04 2004 (41107B28)
    f7157000 f71b6980 ALCXSENS ALCXSENS.SYS Thu Oct 16 17:04:48 2003 (3F8EA580)
    f71b7000 f71da980 portcls portcls.sys Wed Aug 04 09:15:47 2004 (41107F13)
    f71db000 f724ce80 ALCXWDM ALCXWDM.SYS Thu Oct 09 13:52:06 2003 (3F853DD6)
    f724d000 f726f680 ks ks.sys Wed Aug 04 09:15:20 2004 (41107EF8)
    f7270000 f7292e80 USBPORT USBPORT.SYS Wed Aug 04 09:08:34 2004 (41107D62)
    f7293000 f72a6780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 09:07:04 2004 (41107D08)
    f72a7000 f7343000 ati2mtag ati2mtag.sys Wed Aug 13 05:34:27 2003 (3F39A3B3)
    f7357000 f7359280 rasacd rasacd.sys Fri Aug 17 23:55:39 2001 (3B7D84CB)
    f735b000 f735ea00 kbdhid kbdhid.sys Wed Aug 04 08:58:33 2004 (41107B09)
    f738b000 f73a5580 Mup Mup.sys Wed Aug 04 09:15:20 2004 (41107EF8)
    f73a6000 f73d2a80 NDIS NDIS.sys Wed Aug 04 09:14:27 2004 (41107EC3)
    f73d3000 f745f480 Ntfs Ntfs.sys Wed Aug 04 09:15:06 2004 (41107EEA)
    f7460000 f7476780 KSecDD KSecDD.sys Wed Aug 04 08:59:45 2004 (41107B51)
    f7477000 f748c460 SymSnap SymSnap.sys Fri Aug 05 21:44:18 2005 (42F3B382)
    f748d000 f749ef00 sr sr.sys Wed Aug 04 09:06:22 2004 (41107CDE)
    f749f000 f74bd780 fltmgr fltmgr.sys Wed Aug 04 09:01:17 2004 (41107BAD)
    f74be000 f74d5480 atapi atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
    f74d6000 f74fb700 dmio dmio.sys Wed Aug 04 09:07:13 2004 (41107D11)
    f74fc000 f751a880 ftdisk ftdisk.sys Fri Aug 17 23:52:41 2001 (3B7D8419)
    f751b000 f752ba80 pci pci.sys Wed Aug 04 09:07:45 2004 (41107D31)
    f752c000 f7559d80 ACPI ACPI.sys Wed Aug 04 09:07:35 2004 (41107D27)
    f75a3000 f75abc00 isapnp isapnp.sys Fri Aug 17 23:58:01 2001 (3B7D8559)
    f75b3000 f75c1e80 ohci1394 ohci1394.sys Wed Aug 04 09:10:05 2004 (41107DBD)
    f75c3000 f75d0000 1394BUS 1394BUS.SYS Wed Aug 04 09:10:03 2004 (41107DBB)
    f75d3000 f75dd500 MountMgr MountMgr.sys Wed Aug 04 08:58:29 2004 (41107B05)
    f75e3000 f75ed880 sbp2port sbp2port.sys Wed Aug 04 08:59:54 2004 (41107B5A)
    f75f3000 f75ffc80 VolSnap VolSnap.sys Wed Aug 04 09:00:14 2004 (41107B6E)
    f7603000 f760be00 disk disk.sys Wed Aug 04 08:59:53 2004 (41107B59)
    f7613000 f761f200 CLASSPNP CLASSPNP.SYS Wed Aug 04 09:14:26 2004 (41107EC2)
    f7653000 f765b700 wanarp wanarp.sys Wed Aug 04 09:04:57 2004 (41107C89)
    f7663000 f766b700 netbios netbios.sys Wed Aug 04 09:03:19 2004 (41107C27)
    f7683000 f7691d80 arp1394 arp1394.sys Wed Aug 04 08:58:28 2004 (41107B04)
    f7693000 f769ca20 V2IMount V2IMount.SYS Sat Sep 10 03:43:27 2005 (43222C2F)
    f76a3000 f76ab880 Fips Fips.SYS Sat Aug 18 04:31:49 2001 (3B7DC585)
    f76f3000 f76fbd00 intelppm intelppm.sys Wed Aug 04 08:59:19 2004 (41107B37)
    f7703000 f770d380 imapi imapi.sys Wed Aug 04 09:00:12 2004 (41107B6C)
    f7713000 f771f180 cdrom cdrom.sys Wed Aug 04 08:59:52 2004 (41107B58)
    f7723000 f7731080 redbook redbook.sys Wed Aug 04 08:59:34 2004 (41107B46)
    f7733000 f773e100 R8139n51 R8139n51.SYS Mon Dec 31 10:12:37 2001 (3C301DF5)
    f7743000 f7752180 nic1394 nic1394.sys Wed Aug 04 08:58:28 2004 (41107B04)
    f7753000 f7761b80 drmk drmk.sys Wed Aug 04 09:07:54 2004 (41107D3A)
    f7763000 f7772d80 serial serial.sys Wed Aug 04 09:15:51 2004 (41107F17)
    f7773000 f777f880 rasl2tp rasl2tp.sys Wed Aug 04 09:14:21 2004 (41107EBD)
    f7783000 f778d200 raspppoe raspppoe.sys Wed Aug 04 09:05:06 2004 (41107C92)
    f7793000 f779ed00 raspptp raspptp.sys Wed Aug 04 09:14:26 2004 (41107EC2)
    f77a3000 f77ab900 msgpc msgpc.sys Wed Aug 04 09:04:11 2004 (41107C5B)
    f77d3000 f77dcf00 termdd termdd.sys Wed Aug 04 08:58:52 2004 (41107B1C)
    f7803000 f780c480 NDProxy NDProxy.SYS Fri Aug 17 23:55:30 2001 (3B7D84C2)
    f7813000 f7821100 usbhub usbhub.sys Wed Aug 04 09:08:40 2004 (41107D68)
    f7823000 f7829200 PCIIDEX PCIIDEX.SYS Wed Aug 04 08:59:40 2004 (41107B4C)
    f782b000 f782f900 PartMgr PartMgr.sys Sat Aug 18 04:32:23 2001 (3B7DC5A7)
    f7863000 f7868500 TDTCP TDTCP.SYS Wed Aug 04 08:58:52 2004 (41107B1C)
    f789b000 f789f720 PStrip PStrip.SYS Mon Nov 08 14:02:53 2004 (418F606D)
    f78a3000 f78a7280 usbohci usbohci.sys Wed Aug 04 09:08:34 2004 (41107D62)
    f78ab000 f78b1800 usbehci usbehci.sys Wed Aug 04 09:08:34 2004 (41107D62)
    f78b3000 f78ba000 GearAspiWDM GearAspiWDM.SYS Wed Feb 02 07:19:49 2005 (420062F5)
    f78bb000 f78bf880 TDI TDI.SYS Wed Aug 04 09:07:47 2004 (41107D33)
    f78c3000 f78c7580 ptilink ptilink.sys Fri Aug 17 23:49:53 2001 (3B7D8371)
    f78cb000 f78cf080 raspti raspti.sys Fri Aug 17 23:55:32 2001 (3B7D84C4)
    f78d3000 f78d9000 kbdclass kbdclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f78db000 f78e0a00 mouclass mouclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f78e3000 f78e9000 symlcbrd symlcbrd.sys Fri Sep 03 04:56:06 2004 (4137CF36)
    f78fb000 f7901180 HIDPARSE HIDPARSE.SYS Wed Aug 04 09:08:15 2004 (41107D4F)
    f7903000 f7908200 vga vga.sys Wed Aug 04 09:07:06 2004 (41107D0A)
    f790b000 f790fa80 Msfs Msfs.SYS Wed Aug 04 09:00:37 2004 (41107B85)
    f7913000 f791a880 Npfs Npfs.SYS Wed Aug 04 09:00:38 2004 (41107B86)
    f791b000 f7922000 nvport nvport.sys Sat Feb 25 07:48:00 2006 (43FFEF90)
    f793b000 f7941c80 avg7rsxp avg7rsxp.sys Thu Feb 23 02:40:37 2006 (43FD0485)
    f7943000 f7947b00 hidir hidir.sys Wed Jan 11 02:48:52 2006 (43C455F4)
    f798b000 f798f500 watchdog watchdog.sys Wed Aug 04 09:07:32 2004 (41107D24)
    f79b3000 f79b6000 BOOTVID BOOTVID.dll Fri Aug 17 23:49:09 2001 (3B7D8345)
    f7a4f000 f7a51680 pfc pfc.sys Sat Sep 28 01:53:07 2002 (3D94E153)
    f7a57000 f7a5ac80 serenum serenum.sys Wed Aug 04 08:59:06 2004 (41107B2A)
    f7a5b000 f7a5d580 ndistapi ndistapi.sys Fri Aug 17 23:55:29 2001 (3B7D84C1)
    f7a83000 f7a86c80 mssmbios mssmbios.sys Wed Aug 04 09:07:47 2004 (41107D33)
    f7aa3000 f7aa4b80 kdcom kdcom.dll Fri Aug 17 23:49:10 2001 (3B7D8346)
    f7aa5000 f7aa6100 WMILIB WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
    f7aa7000 f7aa8700 dmload dmload.sys Fri Aug 17 23:58:15 2001 (3B7D8567)
    f7ab1000 f7ab2d80 MSKSSRV MSKSSRV.sys Wed Aug 04 08:58:39 2004 (41107B0F)
    f7ac5000 f7ac6100 swenum swenum.sys Wed Aug 04 08:58:41 2004 (41107B11)
    f7ac7000 f7ac8280 USBD USBD.SYS Sat Aug 18 00:02:58 2001 (3B7D8682)
    f7ac9000 f7acaf00 Fs_Rec Fs_Rec.SYS Fri Aug 17 23:49:37 2001 (3B7D8361)
    f7acb000 f7acc080 Beep Beep.SYS Fri Aug 17 23:47:33 2001 (3B7D82E5)
    f7acd000 f7ace080 mnmdd mnmdd.SYS Fri Aug 17 23:57:28 2001 (3B7D8538)
    f7acf000 f7ad0080 RDPCDD RDPCDD.sys Fri Aug 17 23:46:56 2001 (3B7D82C0)
    f7ae3000 f7ae40c0 avg7rsw avg7rsw.sys Mon Sep 19 03:09:31 2005 (432E01BB)
    f7aff000 f7b00100 dump_WMILIB dump_WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
    f7b65000 f7b66a80 ParVdm ParVdm.SYS Fri Aug 17 23:49:49 2001 (3B7D836D)
    f7b67000 f7b68380 avgtdi avgtdi.sys Sun Sep 04 03:38:58 2005 (431A4222)
    f7b6b000 f7b6bd00 pciide pciide.sys Fri Aug 17 23:51:49 2001 (3B7D83E5)
    f7b6d000 f7b6dc00 audstub audstub.sys Fri Aug 17 23:59:40 2001 (3B7D85BC)
    f7bec000 f7becb80 Null Null.SYS Fri Aug 17 23:47:39 2001 (3B7D82EB)
    f7c78000 f7c78d00 dxgthk dxgthk.sys Fri Aug 17 23:53:12 2001 (3B7D8438)
     
    zeizei,
    #5
  7. 2006/04/18
    zeizei

    zeizei Inactive Thread Starter

    Joined:
    2006/04/18
    Messages:
    6
    Likes Received:
    0
    6. sixth one (memory dump)
    --------------------

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe -
    Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_gdr.050301-1519
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
    Debug session time: Tue Apr 18 20:46:17.390 2006 (GMT+3)
    System Uptime: 0 days 1:39:01.105
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe -
    Loading Kernel Symbols
    ........................................................................................................................
    Loading User Symbols
    PEB is paged out (Peb.Ldr = 7ffde00c). Type ".hh dbgerr001" for details
    Loading unloaded module list
    ..............
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 8E, {c0000005, 8055007f, f214cb74, 0}

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *************************************************************************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    *************************************************************************
    Probably caused by : memory_corruption

    Followup: memory_corruption
    ---------

    1: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    KERNEL_MODE_EXCEPTION_NOT_HANDLED (8e)
    This is a very common bugcheck. Usually the exception address pinpoints
    the driver/function that caused the problem. Always note this address
    as well as the link date of the driver/image that contains this address.
    Some common problems are exception code 0x80000003. This means a hard
    coded breakpoint or assertion was hit, but this system was booted
    /NODEBUG. This is not supposed to happen as developers should never have
    hardcoded breakpoints in retail code, but ...
    If this happens, make sure a debugger gets connected, and the
    system is booted /DEBUG. This will let us see why this breakpoint is
    happening.
    Arguments:
    Arg1: c0000005, The exception code that was not handled
    Arg2: 8055007f, The address that the exception occurred at
    Arg3: f214cb74, Trap Frame
    Arg4: 00000000

    Debugging Details:
    ------------------

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *************************************************************************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    *************************************************************************

    FAULTING_MODULE: 804d7000 nt

    DEBUG_FLR_IMAGE_TIMESTAMP: 0

    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at

    "0x%08lx ". The memory could not be "%s ".

    FAULTING_IP:
    nt!ExAllocatePoolWithTag+7a
    8055007f 0f87ed060000 jnbe nt!ExFreePool+0x39e (80550772)

    TRAP_FRAME: f214cb74 -- (.trap fffffffff214cb74)
    .trap fffffffff214cb74
    ErrCode = 00000002
    eax=00000000 ebx=805699c0 ecx=00000001 edx=0269f5bc esi=0000000d edi=00000000
    eip=8055007f esp=f214cbe8 ebp=f214cc3c iopl=0 nv up ei ng nz na po cy
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010287
    nt!ExAllocatePoolWithTag+0x7a:
    8055007f 0f87ed060000 jnbe nt!ExFreePool+0x39e (80550772) [br=0]
    .trap
    Resetting default scope

    DEFAULT_BUCKET_ID: CODE_CORRUPTION

    BUGCHECK_STR: 0x8E

    LAST_CONTROL_TRANSFER: from 8052202d to 805371aa

    STACK_TEXT:
    WARNING: Stack unwind information not available. Following frames may be wrong.
    f214c73c 8052202d 0000008e c0000005 8055007f nt!KeBugCheckEx+0x1b
    f214cb04 804de403 f214cb20 00000000 f214cb74 nt!IoSetFileOrigin+0x58fb
    f214cbf4 804e20c3 00000000 852ba868 00000000 nt!Kei386EoiHelper+0x1da
    f214cc3c 8057d140 00000000 00000060 704f6f49 nt!KeSetEvent+0x3a
    f214cca8 8057d3a2 0269f62c 00100080 0269f5e0 nt!FsRtlCurrentBatchOplock+0x10f
    f214cd04 8057d550 0269f62c 00100080 0269f5e0 nt!IoCreateFile+0x4f
    f214cd44 804dd99f 0269f62c 00100080 0269f5e0 nt!NtOpenFile+0x27
    f214cd64 7c90eb94 badb0d00 0269f5bc 00000000 nt!KiDeliverApc+0xb9e
    f214cd68 badb0d00 0269f5bc 00000000 00000000 0x7c90eb94
    f214cd6c 0269f5bc 00000000 00000000 00000000 0xbadb0d00
    f214cd70 00000000 00000000 00000000 00000000 0x269f5bc


    STACK_COMMAND: .bugcheck ; kb

    CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
    !chkimg -lo 50 -d !nt
    804dcb22-804dcb33 18 bytes - nt!KiDispatchInterrupt+2c0 [ d8 0f 22 d8 c3 0f 20 e0:e0

    25 7f ff ff ff 0f 22 ]
    804dcb3a - nt!KiDispatchInterrupt+2d8 (+0x18) [ c3:00 ]
    804dda9d - nt!KiDeliverApc+c9c (+0xf63) [ 05:06 ]
    20 errors : !nt (804dcb22-804dda9d)

    MODULE_NAME: memory_corruption

    IMAGE_NAME: memory_corruption

    FOLLOWUP_NAME: memory_corruption

    MEMORY_CORRUPTOR: LARGE

    FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE

    BUCKET_ID: MEMORY_CORRUPTION_LARGE

    Followup: memory_corruption
    ---------

    eax=f783313c ebx=8055007f ecx=00000000 edx=804dc0f4 esi=f214cb20 edi=00000000
    eip=805371aa esp=f214c724 ebp=f214c73c iopl=0 nv up ei ng nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
    nt!KeBugCheckEx+0x1b:
    805371aa 5d pop ebp
    ChildEBP RetAddr Args to Child
    WARNING: Stack unwind information not available. Following frames may be wrong.
    f214c73c 8052202d 0000008e c0000005 8055007f nt!KeBugCheckEx+0x1b
    f214cb04 804de403 f214cb20 00000000 f214cb74 nt!IoSetFileOrigin+0x58fb
    f214cbf4 804e20c3 00000000 852ba868 00000000 nt!Kei386EoiHelper+0x1da
    f214cc3c 8057d140 00000000 00000060 704f6f49 nt!KeSetEvent+0x3a
    f214cca8 8057d3a2 0269f62c 00100080 0269f5e0 nt!FsRtlCurrentBatchOplock+0x10f
    f214cd04 8057d550 0269f62c 00100080 0269f5e0 nt!IoCreateFile+0x4f
    f214cd44 804dd99f 0269f62c 00100080 0269f5e0 nt!NtOpenFile+0x27
    f214cd64 7c90eb94 badb0d00 0269f5bc 00000000 nt!KiDeliverApc+0xb9e
    f214cd68 badb0d00 0269f5bc 00000000 00000000 0x7c90eb94
    f214cd6c 0269f5bc 00000000 00000000 00000000 0xbadb0d00
    f214cd70 00000000 00000000 00000000 00000000 0x269f5bc
    start end module name
    804d7000 806fd000 nt ntkrnlmp.exe Wed Mar 02 02:57:27 2005 (42250F77)
    806fd000 8071dd00 hal halmacpi.dll Wed Aug 04 08:59:09 2004 (41107B2D)
    bf800000 bf9c1180 win32k win32k.sys Thu Oct 06 03:05:44 2005 (43446A58)
    bf9c2000 bf9d3580 dxg dxg.sys Wed Aug 04 09:00:51 2004 (41107B93)
    bf9d4000 bfa33000 ati2dvag ati2dvag.dll Wed Aug 13 05:34:46 2003 (3F39A3C6)
    bfa33000 bfb30f60 ati3d2ag ati3d2ag.dll Wed Aug 13 05:01:07 2003 (3F399BE3)
    f1ffb000 f2024f00 kmixer kmixer.sys Wed Aug 04 09:07:46 2004 (41107D32)
    f21dd000 f21ff080 RDPWD RDPWD.SYS Fri Jun 10 02:52:39 2005 (42A8D647)
    f2318000 f2358100 HTTP HTTP.sys Sat Oct 09 02:48:20 2004 (41672744)
    f2561000 f25b2300 srv srv.sys Tue May 10 03:17:49 2005 (427FFDAD)
    f2603000 f262f400 mrxdav mrxdav.sys Wed Aug 04 09:00:49 2004 (41107B91)
    f2927000 f293b400 wdmaud wdmaud.sys Wed Aug 04 09:15:03 2004 (41107EE7)
    f2a8c000 f2a9ad80 sysaudio sysaudio.sys Wed Aug 04 09:15:54 2004 (41107F1A)
    f2ba8000 f2bab280 ndisuio ndisuio.sys Wed Aug 04 09:03:10 2004 (41107C1E)
    f2cac000 f2cc3480 dump_atapi dump_atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
    f2cc4000 f2cd4280 Udfs Udfs.SYS Wed Aug 04 09:00:27 2004 (41107B7B)
    f2cd5000 f2d43400 mrxsmb mrxsmb.sys Wed Jan 19 06:26:50 2005 (41EDE18A)
    f2d58000 f2d5a900 Dxapi Dxapi.sys Fri Aug 17 23:53:19 2001 (3B7D843F)
    f2e0c000 f2e36a00 rdbss rdbss.sys Thu Oct 28 04:13:57 2004 (418047D5)
    f2e87000 f2ea8d00 afd afd.sys Wed Aug 04 09:14:13 2004 (41107EB5)
    f2ea9000 f2ed0c00 netbt netbt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
    f2ed1000 f2ef1f00 ipnat ipnat.sys Thu Sep 30 01:28:36 2004 (415B3714)
    f2ef2000 f2f49d80 tcpip tcpip.sys Fri Jan 13 04:28:12 2006 (43C7103C)
    f2f4a000 f2f5c400 ipsec ipsec.sys Wed Aug 04 09:14:27 2004 (41107EC3)
    f2f89000 f2f8bf80 mouhid mouhid.sys Fri Aug 17 23:47:57 2001 (3B7D82FD)
    f2f8d000 f2f90a00 kbdhid kbdhid.sys Wed Aug 04 08:58:33 2004 (41107B09)
    f6fc5000 f6ff8200 update update.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f7038000 f7068100 rdpdr rdpdr.sys Wed Aug 04 09:01:10 2004 (41107BA6)
    f7109000 f7119e00 psched psched.sys Wed Aug 04 09:04:16 2004 (41107C60)
    f711a000 f7130680 ndiswan ndiswan.sys Wed Aug 04 09:14:30 2004 (41107EC6)
    f7131000 f7144900 parport parport.sys Wed Aug 04 08:59:04 2004 (41107B28)
    f7145000 f71a4980 ALCXSENS ALCXSENS.SYS Thu Oct 16 17:04:48 2003 (3F8EA580)
    f71a5000 f71c8980 portcls portcls.sys Wed Aug 04 09:15:47 2004 (41107F13)
    f71c9000 f723ae80 ALCXWDM ALCXWDM.SYS Thu Oct 09 13:52:06 2003 (3F853DD6)
    f723b000 f724c300 Rtlnicxp Rtlnicxp.sys Fri Jul 16 09:19:52 2004 (40F77388)
    f724d000 f726f680 ks ks.sys Wed Aug 04 09:15:20 2004 (41107EF8)
    f7270000 f7292e80 USBPORT USBPORT.SYS Wed Aug 04 09:08:34 2004 (41107D62)
    f7293000 f72a6780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 09:07:04 2004 (41107D08)
    f72a7000 f7343000 ati2mtag ati2mtag.sys Wed Aug 13 05:34:27 2003 (3F39A3B3)
    f738b000 f73a5580 Mup Mup.sys Wed Aug 04 09:15:20 2004 (41107EF8)
    f73a6000 f73d2a80 NDIS NDIS.sys Wed Aug 04 09:14:27 2004 (41107EC3)
    f73d3000 f745f480 Ntfs Ntfs.sys Wed Aug 04 09:15:06 2004 (41107EEA)
    f7460000 f7476780 KSecDD KSecDD.sys Wed Aug 04 08:59:45 2004 (41107B51)
    f7477000 f748c460 SymSnap SymSnap.sys Fri Aug 05 21:44:18 2005 (42F3B382)
    f748d000 f749ef00 sr sr.sys Wed Aug 04 09:06:22 2004 (41107CDE)
    f749f000 f74bd780 fltmgr fltmgr.sys Wed Aug 04 09:01:17 2004 (41107BAD)
    f74be000 f74d5480 atapi atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
    f74d6000 f74fb700 dmio dmio.sys Wed Aug 04 09:07:13 2004 (41107D11)
    f74fc000 f751a880 ftdisk ftdisk.sys Fri Aug 17 23:52:41 2001 (3B7D8419)
    f751b000 f752ba80 pci pci.sys Wed Aug 04 09:07:45 2004 (41107D31)
    f752c000 f7559d80 ACPI ACPI.sys Wed Aug 04 09:07:35 2004 (41107D27)
    f75a3000 f75abc00 isapnp isapnp.sys Fri Aug 17 23:58:01 2001 (3B7D8559)
    f75b3000 f75c1e80 ohci1394 ohci1394.sys Wed Aug 04 09:10:05 2004 (41107DBD)
    f75c3000 f75d0000 1394BUS 1394BUS.SYS Wed Aug 04 09:10:03 2004 (41107DBB)
    f75d3000 f75dd500 MountMgr MountMgr.sys Wed Aug 04 08:58:29 2004 (41107B05)
    f75e3000 f75ed880 sbp2port sbp2port.sys Wed Aug 04 08:59:54 2004 (41107B5A)
    f75f3000 f75ffc80 VolSnap VolSnap.sys Wed Aug 04 09:00:14 2004 (41107B6E)
    f7603000 f760be00 disk disk.sys Wed Aug 04 08:59:53 2004 (41107B59)
    f7613000 f761f200 CLASSPNP CLASSPNP.SYS Wed Aug 04 09:14:26 2004 (41107EC2)
    f7643000 f7651d80 arp1394 arp1394.sys Wed Aug 04 08:58:28 2004 (41107B04)
    f7663000 f766ca20 V2IMount V2IMount.SYS Sat Sep 10 03:43:27 2005 (43222C2F)
    f7693000 f769e600 IrBus IrBus.sys Wed Jan 11 02:48:57 2006 (43C455F9)
    f76a3000 f76ab880 Fips Fips.SYS Sat Aug 18 04:31:49 2001 (3B7DC585)
    f76b3000 f76bbd80 HIDCLASS HIDCLASS.SYS Wed Aug 04 09:08:18 2004 (41107D52)
    f76f3000 f76fbd00 intelppm intelppm.sys Wed Aug 04 08:59:19 2004 (41107B37)
    f7703000 f770d380 imapi imapi.sys Wed Aug 04 09:00:12 2004 (41107B6C)
    f7713000 f771f180 cdrom cdrom.sys Wed Aug 04 08:59:52 2004 (41107B58)
    f7723000 f7731080 redbook redbook.sys Wed Aug 04 08:59:34 2004 (41107B46)
    f7733000 f7742180 nic1394 nic1394.sys Wed Aug 04 08:58:28 2004 (41107B04)
    f7743000 f7751b80 drmk drmk.sys Wed Aug 04 09:07:54 2004 (41107D3A)
    f7753000 f7762d80 serial serial.sys Wed Aug 04 09:15:51 2004 (41107F17)
    f7763000 f776f880 rasl2tp rasl2tp.sys Wed Aug 04 09:14:21 2004 (41107EBD)
    f7773000 f777d200 raspppoe raspppoe.sys Wed Aug 04 09:05:06 2004 (41107C92)
    f7783000 f778ed00 raspptp raspptp.sys Wed Aug 04 09:14:26 2004 (41107EC2)
    f7793000 f779b900 msgpc msgpc.sys Wed Aug 04 09:04:11 2004 (41107C5B)
    f77a3000 f77acf00 termdd termdd.sys Wed Aug 04 08:58:52 2004 (41107B1C)
    f77d3000 f77dc480 NDProxy NDProxy.SYS Fri Aug 17 23:55:30 2001 (3B7D84C2)
    f77e3000 f77f1100 usbhub usbhub.sys Wed Aug 04 09:08:40 2004 (41107D68)
    f7803000 f780b700 wanarp wanarp.sys Wed Aug 04 09:04:57 2004 (41107C89)
    f7813000 f781b700 netbios netbios.sys Wed Aug 04 09:03:19 2004 (41107C27)
    f7823000 f7829200 PCIIDEX PCIIDEX.SYS Wed Aug 04 08:59:40 2004 (41107B4C)
    f782b000 f782f900 PartMgr PartMgr.sys Sat Aug 18 04:32:23 2001 (3B7DC5A7)
    f785b000 f785f720 PStrip PStrip.SYS Mon Nov 08 14:02:53 2004 (418F606D)
    f7863000 f7869000 symlcbrd symlcbrd.sys Fri Sep 03 04:56:06 2004 (4137CF36)
    f7893000 f7897280 usbohci usbohci.sys Wed Aug 04 09:08:34 2004 (41107D62)
    f789b000 f78a1800 usbehci usbehci.sys Wed Aug 04 09:08:34 2004 (41107D62)
    f78a3000 f78aa000 GearAspiWDM GearAspiWDM.SYS Wed Feb 02 07:19:49 2005 (420062F5)
    f78ab000 f78af880 TDI TDI.SYS Wed Aug 04 09:07:47 2004 (41107D33)
    f78b3000 f78b7580 ptilink ptilink.sys Fri Aug 17 23:49:53 2001 (3B7D8371)
    f78bb000 f78bf080 raspti raspti.sys Fri Aug 17 23:55:32 2001 (3B7D84C4)
    f78c3000 f78c9000 kbdclass kbdclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f78cb000 f78d0a00 mouclass mouclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
    f78e3000 f78e8500 TDTCP TDTCP.SYS Wed Aug 04 08:58:52 2004 (41107B1C)
    f78eb000 f78f1180 HIDPARSE HIDPARSE.SYS Wed Aug 04 09:08:15 2004 (41107D4F)
    f78f3000 f78f8200 vga vga.sys Wed Aug 04 09:07:06 2004 (41107D0A)
    f78fb000 f78ffa80 Msfs Msfs.SYS Wed Aug 04 09:00:37 2004 (41107B85)
    f7903000 f790a880 Npfs Npfs.SYS Wed Aug 04 09:00:38 2004 (41107B86)
    f790b000 f7912000 nvport nvport.sys Sat Feb 25 07:48:00 2006 (43FFEF90)
    f7913000 f7917b00 hidir hidir.sys Wed Jan 11 02:48:52 2006 (43C455F4)
    f7973000 f7977500 watchdog watchdog.sys Wed Aug 04 09:07:32 2004 (41107D24)
    f79b3000 f79b6000 BOOTVID BOOTVID.dll Fri Aug 17 23:49:09 2001 (3B7D8345)
    f7a47000 f7a49680 pfc pfc.sys Sat Sep 28 01:53:07 2002 (3D94E153)
    f7a4f000 f7a52c80 serenum serenum.sys Wed Aug 04 08:59:06 2004 (41107B2A)
    f7a53000 f7a55580 ndistapi ndistapi.sys Fri Aug 17 23:55:29 2001 (3B7D84C1)
    f7a6f000 f7a72c80 mssmbios mssmbios.sys Wed Aug 04 09:07:47 2004 (41107D33)
    f7a9f000 f7aa1280 rasacd rasacd.sys Fri Aug 17 23:55:39 2001 (3B7D84CB)
    f7aa3000 f7aa4b80 kdcom kdcom.dll Fri Aug 17 23:49:10 2001 (3B7D8346)
    f7aa5000 f7aa6100 WMILIB WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
    f7aa7000 f7aa8700 dmload dmload.sys Fri Aug 17 23:58:15 2001 (3B7D8567)
    f7ab3000 f7ab4a80 ParVdm ParVdm.SYS Fri Aug 17 23:49:49 2001 (3B7D836D)
    f7ab7000 f7ab8100 swenum swenum.sys Wed Aug 04 08:58:41 2004 (41107B11)
    f7ab9000 f7aba280 USBD USBD.SYS Sat Aug 18 00:02:58 2001 (3B7D8682)
    f7abb000 f7abcf00 Fs_Rec Fs_Rec.SYS Fri Aug 17 23:49:37 2001 (3B7D8361)
    f7abd000 f7abe080 Beep Beep.SYS Fri Aug 17 23:47:33 2001 (3B7D82E5)
    f7abf000 f7ac0080 mnmdd mnmdd.SYS Fri Aug 17 23:57:28 2001 (3B7D8538)
    f7ac1000 f7ac2080 RDPCDD RDPCDD.sys Fri Aug 17 23:46:56 2001 (3B7D82C0)
    f7af1000 f7af2100 dump_WMILIB dump_WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
    f7b6b000 f7b6bd00 pciide pciide.sys Fri Aug 17 23:51:49 2001 (3B7D83E5)
    f7bc0000 f7bc0c00 audstub audstub.sys Fri Aug 17 23:59:40 2001 (3B7D85BC)
    f7c28000 f7c28b80 Null Null.SYS Fri Aug 17 23:47:39 2001 (3B7D82EB)
    f7c4a000 f7c4ad00 dxgthk dxgthk.sys Fri Aug 17 23:53:12 2001 (3B7D8438)

    Unloaded modules:
    f28da000 f2904000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7b89000 f7b8a000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2c74000 f2c81000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f2904000 f2927000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f77f3000 f7801000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7b2d000 f7b2f000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f755a000 f7582000 vidstub.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7653000 f765c000 processr.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7a9b000 f7a9f000 kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f77f3000 f7800000 i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f78e3000 f78e8000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7a97000 f7a9a000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f78db000 f78e0000 Flpydisk.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f78d3000 f78da000 Fdc.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
     
    zeizei,
    #6

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...