Windows XP Blue Screen Randomly

pstoh · 2007/05/23

My windows xp will BSOD randomly, my hardware specs are:
2 sata hd, 1 pata hd
abit kv8 max 3 mobo,
1 DVDRW ROM, 1 DVD ROM
Twinmos PC3200 1GB RAM

my user dump:

Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Documents and Settings\PSTOH\Desktop\user.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Comment: 'Dr. Watson generated MiniDump'
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
Windows XP Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: SingleUserTS
Debug session time: Mon May 21 21:55:48.000 2007 (GMT+8)
System Uptime: not available
Process Uptime: 0 days 0:00:27.000
....................................................................................................................................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(254.868): Access violation - code c0000005 (first/second chance not available)
eax=00000000 ebx=00000000 ecx=78134c5a edx=00220002 esi=0524eb20 edi=014e5e14
eip=010e11b7 esp=0012fbec ebp=0012fc04 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206
*** WARNING: Unable to verify timestamp for Dreamweaver2.exe
*** ERROR: Module load completed but symbols could not be loaded for Dreamweaver2.exe
Dreamweaver2+0x8e11b7:
010e11b7 8b4004 mov eax,dword ptr [eax+4] ds:0023:00000004=????????

My mini dump

Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Documents and Settings\PSTOH\Desktop\Mini052307-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055ab20
Debug session time: Wed May 23 00:29:25.593 2007 (GMT+8)
System Uptime: 0 days 2:26:48.157
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
.......................................................................................................................................
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000000A, {8281cd8, 2, 1, 804eb503}

ANALYSIS: Kernel with unknown size. Will force reload symbols with known size.
ANALYSIS: Force reload command: .reload /f ntoskrnl.exe=FFFFFFFF804D7000,214600,41108004
***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*** WARNING: Unable to verify timestamp for Fastfat.sys
*** ERROR: Module load completed but symbols could not be loaded for Fastfat.sys
*** WARNING: Unable to verify timestamp for SYMEVENT.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT.SYS
Probably caused by : SYMEVENT.SYS ( SYMEVENT+4e4c )

Followup: MachineOwner
---------

Please clarify, thanks.

Rockster2U · 2007/05/23

I'm not a dump reader/interpreter but it sure looks like one of your problems (next to the last line) is Norton related. You may want to uninstall and re-install your Norton product.

PeteC · 2007/05/23

Agree with Rockster, but you have a symbol problem for debugging. If you did not use our Dump Data Tool, please do so and note that it is best to be connected to the Internet during debugging to allow additional symbols to be downloaded if required.

pstoh · 2007/05/25

Thanks for the replies.

Ya, I did use the tool called Windbg for reading the dump file.

My pc still have sudden BSOD now and then with different code such as beginning with 0x00000050. And the dump generated usually are different, which sometimes indicated others program such as zonealarm, win32k, instead of symantec.

These make me hard to identify what is the real problem. My early suspect was the RAM faulty(Apacer DDR400 512MB), which I had replaced with current brand new twinmos ram, but problem still happen now and then. I've tried to format XP also. Perhaps it's my mobo problem, but I don't find any leakage capacitor as well.

noahdfear · 2007/05/25

While the debugging tools from MS are needed, you also need to download the debugwiz.zip tool from Pete's link, then run it to analyze the dump rather than using the Windbg that comes with the debugging tools.

pstoh · 2007/05/30

I encounter BSOD again, here is the mini dump

Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Documents and Settings\PSTOH\Desktop\11Mini053007-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
Debug session time: Wed May 30 21:10:22.656 2007 (GMT+8)
System Uptime: 0 days 3:35:52.225
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
..................................................................................................................................
Loading User Symbols
Loading unloaded module list
.................
Unable to load image NavEx15.Sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for NavEx15.Sys
*** ERROR: Module load completed but symbols could not be loaded for NavEx15.Sys
Unable to load image NAVENG.Sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for NAVENG.Sys
*** ERROR: Module load completed but symbols could not be loaded for NAVENG.Sys
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, a7eaa98a, 842ea884, 0}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*** WARNING: Unable to verify timestamp for SAVRT.SYS
*** ERROR: Module load completed but symbols could not be loaded for SAVRT.SYS
Probably caused by : hardware ( NavEx15+5998a )

Followup: MachineOwner
---------

the debug log:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Documents and Settings\PSTOH\Desktop\11Mini053007-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers

Please help to verify, it's really annoying to get random BSOD

By the way, I just reformat my pc. And I had use Norton Antivirus for past 2 yrs without any problem.

Thanks.

PeteC · 2007/05/30

These logs are incomplete and there is still a symbol problem - did you use the tool I posted above?

When you reformatted did you load the motherboard chipset drivers?

pstoh · 2007/05/30

sorry for not posting incomplete log as the my firewall had block it just now.

here is it:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Documents and Settings\PSTOH\Desktop\11Mini053007-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlpa.exe -
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_rtm.040803-2158
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
Debug session time: Wed May 30 21:10:22.656 2007 (GMT+8)
System Uptime: 0 days 3:35:52.225
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlpa.exe -
Loading Kernel Symbols
..................................................................................................................................
Loading User Symbols
Loading unloaded module list
.................
Unable to load image NavEx15.Sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for NavEx15.Sys
*** ERROR: Module load completed but symbols could not be loaded for NavEx15.Sys
Unable to load image NAVENG.Sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for NAVENG.Sys
*** ERROR: Module load completed but symbols could not be loaded for NAVENG.Sys
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, a7eaa98a, 842ea884, 0}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*** ERROR: Module load completed but symbols could not be loaded for SAVRT.SYS
Probably caused by : hardware ( NavEx15+5998a )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: a7eaa98a, The address that the exception occurred at
Arg3: 842ea884, Trap Frame
Arg4: 00000000

Debugging Details:
------------------

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

FAULTING_MODULE: 804d7000 nt

DEBUG_FLR_IMAGE_TIMESTAMP: 0

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
NavEx15+5998a
a7eaa98a 0800 or byte ptr [eax],al

TRAP_FRAME: 842ea884 -- (.trap 0xffffffff842ea884)
.trap 0xffffffff842ea884
ErrCode = 00000002
eax=6e6f631d ebx=00000000 ecx=842ea970 edx=e53f3008 esi=e2e4eb60 edi=e2dbb01c
eip=a7eaa98a esp=842ea8f8 ebp=842ea918 iopl=0 nv up ei pl nz na pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010207
NavEx15+0x5998a:
a7eaa98a 0800 or byte ptr [eax],al ds:0023:6e6f631d=??
.trap
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

MISALIGNED_IP:
NavEx15+5998a
a7eaa98a 0800 or byte ptr [eax],al

LAST_CONTROL_TRANSFER: from a7fc3dd2 to a7eaa98a

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
842ea918 a7fc3dd2 e2dbb01c e6cdc8b8 e53e1008 NavEx15+0x5998a
842ea988 a7fc12ec e505a008 e2908380 e6cdc8b8 NAVENG+0x3dd2
842ea9c4 a7fc1445 e2dbb01c e5bc3008 00000002 NAVENG+0x12ec
842eaa08 a7e9b214 e2dbb01c e1e03bd0 e6cdc8b8 NAVENG+0x1445
842eaaac a7e9b7c7 00000000 e1e03bd0 e6cdc8b8 NavEx15+0x4a214
842eab70 a7e9bc45 e2dbb01c e1e03bd0 e6cdc8b8 NavEx15+0x4a7c7
842eaba0 a7e9bc88 e2dbb01c e1e03bd0 e6cdc8b8 NavEx15+0x4ac45
842eabc8 a7e9bcf1 a7d82a80 e1e03bd0 e6cdc8b8 NavEx15+0x4ac88
842eac00 a7d5a77d a7d82a80 e1e03bd0 e6cdc8b8 NavEx15+0x4acf1
00000000 00000000 00000000 00000000 00000000 SAVRT+0x1177d

STACK_COMMAND: kb

FOLLOWUP_IP:
NavEx15+5998a
a7eaa98a 0800 or byte ptr [eax],al

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: hardware

SYMBOL_NAME: NavEx15+5998a

MODULE_NAME: hardware

FAILURE_BUCKET_ID: IP_MISALIGNED_NavEx15.Sys

BUCKET_ID: IP_MISALIGNED_NavEx15.Sys

Followup: MachineOwner
---------

eax=6e6f631d ebx=00000000 ecx=842ea970 edx=e53f3008 esi=e2e4eb60 edi=e2dbb01c
eip=a7eaa98a esp=842ea8f8 ebp=842ea918 iopl=0 nv up ei pl nz na pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010207
NavEx15+0x5998a:
a7eaa98a 0800 or byte ptr [eax],al ds:0023:6e6f631d=??
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
842ea918 a7fc3dd2 e2dbb01c e6cdc8b8 e53e1008 NavEx15+0x5998a
842ea988 a7fc12ec e505a008 e2908380 e6cdc8b8 NAVENG+0x3dd2
842ea9c4 a7fc1445 e2dbb01c e5bc3008 00000002 NAVENG+0x12ec
842eaa08 a7e9b214 e2dbb01c e1e03bd0 e6cdc8b8 NAVENG+0x1445
842eaaac a7e9b7c7 00000000 e1e03bd0 e6cdc8b8 NavEx15+0x4a214
842eab70 a7e9bc45 e2dbb01c e1e03bd0 e6cdc8b8 NavEx15+0x4a7c7
842eaba0 a7e9bc88 e2dbb01c e1e03bd0 e6cdc8b8 NavEx15+0x4ac45
842eabc8 a7e9bcf1 a7d82a80 e1e03bd0 e6cdc8b8 NavEx15+0x4ac88
842eac00 a7d5a77d a7d82a80 e1e03bd0 e6cdc8b8 NavEx15+0x4acf1
00000000 00000000 00000000 00000000 00000000 SAVRT+0x1177d
start end module name
804d7000 806cd280 nt ntkrnlpa.exe Wed Aug 04 13:58:36 2004 (41107B0C)
806ce000 806ee380 hal halaacpi.dll Wed Aug 04 13:59:05 2004 (41107B29)
a7b50000 a7b90380 HTTP HTTP.sys Wed Aug 04 14:00:09 2004 (41107B69)
a7c55000 a7c57640 SYMREDRV SYMREDRV.SYS Fri Aug 16 08:40:15 2002 (3D5C49EF)
a7d49000 a7d89000 SAVRT SAVRT.SYS Fri Jul 26 13:10:27 2002 (3D40D9C3)
a7e51000 a7f1f820 NavEx15 NavEx15.Sys Fri Mar 16 13:14:23 2007 (45FA27AF)
a7fb0000 a7fbf900 Cdfs Cdfs.SYS Wed Aug 04 14:14:09 2004 (41107EB1)
a7fc0000 a7fd1440 NAVENG NAVENG.Sys Fri Mar 16 12:34:29 2007 (45FA1E55)
a7fd2000 a7fe2780 SYMEVENT SYMEVENT.SYS Thu Aug 08 09:29:51 2002 (3D51C98F)
a8123000 a8175180 srv srv.sys Wed Aug 04 14:14:44 2004 (41107ED4)
a819e000 a81af000 SAVRTPEL SAVRTPEL.SYS Fri Jul 26 13:10:31 2002 (3D40D9C7)
a81ff000 a822b400 mrxdav mrxdav.sys Wed Aug 04 14:00:49 2004 (41107B91)
a8422000 a8436400 wdmaud wdmaud.sys Wed Aug 04 14:15:03 2004 (41107EE7)
a865f000 a866dd80 sysaudio sysaudio.sys Wed Aug 04 14:15:54 2004 (41107F1A)
a8847000 a8871dc0 SYMTDI SYMTDI.SYS Fri Aug 16 08:40:03 2002 (3D5C49E3)
a8ab6000 a8ab9280 ndisuio ndisuio.sys Wed Aug 04 14:03:10 2004 (41107C1E)
aacca000 aacdcd00 dump_viasraid dump_viasraid.sys Thu Sep 04 16:15:18 2003 (3F56F496)
aad05000 aad28000 Fastfat Fastfat.SYS Wed Aug 04 14:14:15 2004 (41107EB7)
aad28000 aad96380 mrxsmb mrxsmb.sys Wed Aug 04 14:15:14 2004 (41107EF2)
aad97000 aadc2180 rdbss rdbss.sys Wed Aug 04 14:20:05 2004 (41108015)
aadc3000 aade4d00 afd afd.sys Wed Aug 04 14:14:13 2004 (41107EB5)
aaead000 aaf0bce0 vsdatant vsdatant.sys Fri Mar 09 14:29:37 2007 (45F0FED1)
aaf0c000 aaf2cf00 ipnat ipnat.sys Wed Aug 04 14:04:48 2004 (41107C80)
aaf2d000 aaf54c00 netbt netbt.sys Wed Aug 04 14:14:36 2004 (41107ECC)
aaf55000 aafaca80 tcpip tcpip.sys Wed Aug 04 14:14:39 2004 (41107ECF)
aafad000 aafbf400 ipsec ipsec.sys Wed Aug 04 14:14:27 2004 (41107EC3)
bf800000 bf9c0380 win32k win32k.sys Wed Aug 04 14:17:30 2004 (41107F7A)
bf9c1000 bf9d2580 dxg dxg.sys Wed Aug 04 14:00:51 2004 (41107B93)
bf9d3000 bfa18000 ati2dvag ati2dvag.dll Thu Mar 15 09:57:34 2007 (45F8A80E)
bfa18000 bfa6f000 ati2cqag ati2cqag.dll Thu Mar 15 09:10:27 2007 (45F89D03)
bfa6f000 bfabe000 atikvmag atikvmag.dll Thu Mar 15 09:16:14 2007 (45F89E5E)
bfabe000 bfd6e9c0 ati3duag ati3duag.dll Thu Mar 15 09:40:09 2007 (45F8A3F9)
bfd6f000 bfeb0380 ativvaxx ativvaxx.dll Thu Mar 15 09:29:47 2007 (45F8A18B)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 15:56:56 2004 (411096C8)
f6ca0000 f6ca2900 Dxapi Dxapi.sys Sat Aug 18 04:53:19 2001 (3B7D843F)
f6cc8000 f6cfb200 update update.sys Wed Aug 04 13:58:32 2004 (41107B08)
f6d14000 f6d17c80 serenum serenum.sys Wed Aug 04 13:59:06 2004 (41107B2A)
f6d24000 f6d54100 rdpdr rdpdr.sys Wed Aug 04 14:01:10 2004 (41107BA6)
f6df5000 f6e05e00 psched psched.sys Wed Aug 04 14:04:16 2004 (41107C60)
f6e06000 f6e1c680 ndiswan ndiswan.sys Wed Aug 04 14:14:30 2004 (41107EC6)
f6e1d000 f6e7fd00 ALCXSENS ALCXSENS.SYS Fri Aug 08 21:27:06 2003 (3F33A52A)
f6e80000 f6ea3980 portcls portcls.sys Wed Aug 04 14:15:47 2004 (41107F13)
f6ea4000 f6f132c0 ALCXWDM ALCXWDM.SYS Thu Sep 18 13:42:37 2003 (3F6945CD)
f6f14000 f6f36e80 USBPORT USBPORT.SYS Wed Aug 04 14:08:34 2004 (41107D62)
f6f37000 f6f59680 ks ks.sys Wed Aug 04 14:15:20 2004 (41107EF8)
f6f5a000 f6f7df80 EL2K_XP EL2K_XP.sys Wed Jun 04 06:48:12 2003 (3EDD25AC)
f6f7e000 f705b8c0 HCF_MSFT HCF_MSFT.sys Fri Jun 08 15:01:44 2001 (3B207858)
f705c000 f706f780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 14:07:04 2004 (41107D08)
f7070000 f7286000 ati2mtag ati2mtag.sys Thu Mar 15 09:57:14 2007 (45F8A7FA)
f729a000 f729dc80 mssmbios mssmbios.sys Wed Aug 04 14:07:47 2004 (41107D33)
f72a2000 f72a5780 dump_scsiport dump_scsiport.sys Wed Aug 04 13:59:51 2004 (41107B57)
f72ce000 f72e8580 Mup Mup.sys Wed Aug 04 14:15:20 2004 (41107EF8)
f72e9000 f72fd000 srescan srescan.sys Tue Jan 16 06:16:30 2007 (45ABFD3E)
f72fd000 f7329a80 NDIS NDIS.sys Wed Aug 04 14:14:27 2004 (41107EC3)
f732a000 f73b6480 Ntfs Ntfs.sys Wed Aug 04 14:15:06 2004 (41107EEA)
f73b7000 f73cd780 KSecDD KSecDD.sys Wed Aug 04 13:59:45 2004 (41107B51)
f73ce000 f73dff00 sr sr.sys Wed Aug 04 14:06:22 2004 (41107CDE)
f73e0000 f73fe780 fltMgr fltMgr.sys Wed Aug 04 14:01:17 2004 (41107BAD)
f73ff000 f7413d20 SI3114R SI3114R.sys Sat May 31 07:05:47 2003 (3ED7E3CB)
f7414000 f742b800 SCSIPORT SCSIPORT.SYS Wed Aug 04 13:59:39 2004 (41107B4B)
f742c000 f743ed00 viasraid viasraid.sys Thu Sep 04 16:15:18 2003 (3F56F496)
f743f000 f7456480 atapi atapi.sys Wed Aug 04 13:59:41 2004 (41107B4D)
f7457000 f747c700 dmio dmio.sys Wed Aug 04 14:07:13 2004 (41107D11)
f747d000 f749b880 ftdisk ftdisk.sys Sat Aug 18 04:52:41 2001 (3B7D8419)
f749c000 f74aca80 pci pci.sys Wed Aug 04 14:07:45 2004 (41107D31)
f74ad000 f74dad80 ACPI ACPI.sys Wed Aug 04 14:07:35 2004 (41107D27)
f75dc000 f75e4c00 isapnp isapnp.sys Sat Aug 18 04:58:01 2001 (3B7D8559)
f75ec000 f75fae80 ohci1394 ohci1394.sys Wed Aug 04 14:10:05 2004 (41107DBD)
f75fc000 f7609000 1394BUS 1394BUS.SYS Wed Aug 04 14:10:03 2004 (41107DBB)
f760c000 f7616500 MountMgr MountMgr.sys Wed Aug 04 13:58:29 2004 (41107B05)
f761c000 f7628c80 VolSnap VolSnap.sys Wed Aug 04 14:00:14 2004 (41107B6E)
f762c000 f7634e00 disk disk.sys Wed Aug 04 13:59:53 2004 (41107B59)
f763c000 f7648200 CLASSPNP CLASSPNP.SYS Wed Aug 04 14:14:26 2004 (41107EC2)
f764c000 f7654b80 PxHelp20 PxHelp20.sys Sat Feb 03 05:23:57 2007 (45C3ABED)
f765c000 f7667580 gagp30kx gagp30kx.sys Wed Aug 04 14:07:43 2004 (41107D2F)
f768c000 f769b000 AmdK8 AmdK8.sys Sun May 09 01:21:43 2004 (409D1727)
f769c000 f76a6380 imapi imapi.sys Wed Aug 04 14:00:12 2004 (41107B6C)
f76ac000 f76b8180 cdrom cdrom.sys Wed Aug 04 13:59:52 2004 (41107B58)
f76bc000 f76ca080 redbook redbook.sys Wed Aug 04 13:59:34 2004 (41107B46)
f76cc000 f76dab80 drmk drmk.sys Wed Aug 04 14:07:54 2004 (41107D3A)
f76dc000 f76e8e00 i8042prt i8042prt.sys Wed Aug 04 14:14:36 2004 (41107ECC)
f76ec000 f76f8880 rasl2tp rasl2tp.sys Wed Aug 04 14:14:21 2004 (41107EBD)
f76fc000 f7706200 raspppoe raspppoe.sys Wed Aug 04 14:05:06 2004 (41107C92)
f770c000 f7717d00 raspptp raspptp.sys Wed Aug 04 14:14:26 2004 (41107EC2)
f771c000 f7724900 msgpc msgpc.sys Wed Aug 04 14:04:11 2004 (41107C5B)
f772c000 f7735f00 termdd termdd.sys Wed Aug 04 13:58:52 2004 (41107B1C)
f773c000 f7745480 NDProxy NDProxy.SYS Sat Aug 18 04:55:30 2001 (3B7D84C2)
f778c000 f779a100 usbhub usbhub.sys Wed Aug 04 14:08:40 2004 (41107D68)
f77ac000 f77b4700 wanarp wanarp.sys Wed Aug 04 14:04:57 2004 (41107C89)
f77cc000 f77d4700 netbios netbios.sys Wed Aug 04 14:03:19 2004 (41107C27)
f77ec000 f77f4880 Fips Fips.SYS Sat Aug 18 09:31:49 2001 (3B7DC585)
f77fc000 f7804600 sbbotdi sbbotdi.sys Mon May 07 18:14:35 2007 (463EFC0B)
f780c000 f7816660 ser2pl ser2pl.sys Thu Mar 29 14:26:28 2001 (3AC2D594)
f785c000 f7862200 PCIIDEX PCIIDEX.SYS Wed Aug 04 13:59:40 2004 (41107B4C)
f7864000 f7868900 PartMgr PartMgr.sys Sat Aug 18 09:32:23 2001 (3B7DC5A7)
f786c000 f7872d00 viaagp1 viaagp1.sys Wed Jul 02 18:08:01 2003 (3F02AF01)
f789c000 f78a0080 raspti raspti.sys Sat Aug 18 04:55:32 2001 (3B7D84C4)
f78c4000 f78ca500 usbprint usbprint.sys Wed Aug 04 14:01:23 2004 (41107BB3)
f78d4000 f78d9000 usbuhci usbuhci.sys Wed Aug 04 14:08:34 2004 (41107D62)
f78fc000 f7902800 usbehci usbehci.sys Wed Aug 04 14:08:34 2004 (41107D62)
f7944000 f7945000 fdc fdc.sys unavailable (00000000)
f7954000 f7959a00 mouclass mouclass.sys Wed Aug 04 13:58:32 2004 (41107B08)
f795c000 f7961000 flpydisk flpydisk.sys Wed Aug 04 13:59:24 2004 (41107B3C)
f7964000 f796a000 kbdclass kbdclass.sys Wed Aug 04 13:58:32 2004 (41107B08)
f7984000 f7989200 vga vga.sys Wed Aug 04 14:07:06 2004 (41107D0A)
f7994000 f7998a80 Msfs Msfs.SYS Wed Aug 04 14:00:37 2004 (41107B85)
f79a4000 f79ab880 Npfs Npfs.SYS Wed Aug 04 14:00:38 2004 (41107B86)
f79ac000 f79b3580 Modem Modem.SYS Wed Aug 04 14:08:04 2004 (41107D44)
f79b4000 f79b8880 TDI TDI.SYS Wed Aug 04 14:07:47 2004 (41107D33)
f79c4000 f79c8500 watchdog watchdog.sys Wed Aug 04 14:07:32 2004 (41107D24)
f79dc000 f79e0580 ptilink ptilink.sys Sat Aug 18 04:49:53 2001 (3B7D8371)
f79ec000 f79ef000 BOOTVID BOOTVID.dll Sat Aug 18 04:49:09 2001 (3B7D8345)
f79f0000 f79f2780 SiWinAcc SiWinAcc.sys Tue Jun 10 06:29:18 2003 (3EE50A3E)
f7a8c000 f7a8e880 pfc pfc.sys Sat Apr 17 05:57:56 2004 (408056E4)
f7a9c000 f7a9e280 rasacd rasacd.sys Sat Aug 18 04:55:39 2001 (3B7D84CB)
f7ab8000 f7abaf80 fsvga fsvga.sys Sat Aug 18 04:57:21 2001 (3B7D8531)
f7ac0000 f7ac2580 ndistapi ndistapi.sys Sat Aug 18 04:55:29 2001 (3B7D84C1)
f7adc000 f7addb80 kdcom kdcom.dll Sat Aug 18 04:49:10 2001 (3B7D8346)
f7ade000 f7adf100 WMILIB WMILIB.SYS Sat Aug 18 05:07:23 2001 (3B7D878B)
f7ae0000 f7ae1500 viaide viaide.sys Wed Aug 04 13:59:42 2004 (41107B4E)
f7ae2000 f7ae3700 dmload dmload.sys Sat Aug 18 04:58:15 2001 (3B7D8567)
f7afa000 f7afb100 swenum swenum.sys Wed Aug 04 13:58:41 2004 (41107B11)
f7b20000 f7b21280 USBD USBD.SYS Sat Aug 18 05:02:58 2001 (3B7D8682)
f7b24000 f7b25f00 Fs_Rec Fs_Rec.SYS Sat Aug 18 04:49:37 2001 (3B7D8361)
f7b28000 f7b29080 Beep Beep.SYS Sat Aug 18 04:47:33 2001 (3B7D82E5)
f7b2c000 f7b2d080 mnmdd mnmdd.SYS Sat Aug 18 04:57:28 2001 (3B7D8538)
f7b30000 f7b31080 RDPCDD RDPCDD.sys Sat Aug 18 04:46:56 2001 (3B7D82C0)
f7ba4000 f7ba4bc0 Winflash Winflash.sys Tue Sep 17 12:55:05 2002 (3D86B5A9)
f7baa000 f7baab80 Null Null.SYS Sat Aug 18 04:47:39 2001 (3B7D82EB)
f7bd6000 f7bd6d00 dxgthk dxgthk.sys Sat Aug 18 04:53:12 2001 (3B7D8438)
f7ce7000 f7ce7c00 audstub audstub.sys Sat Aug 18 04:59:40 2001 (3B7D85BC)

Unloaded modules:
a750a000 a7534000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a750a000 a7534000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a7674000 a769e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a7674000 a769e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a7674000 a769e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a7946000 a7970000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a83d5000 a83ff000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7ca8000 f7ca9000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a863f000 a864c000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a83ff000 a8422000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a864f000 a865d000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7b62000 f7b64000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a8365000 a8375000 Serial.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
a81c3000 a81d7000 Parport.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f77dc000 f77e5000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7974000 f7979000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7a90000 f7a93000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

PeteC · 2007/05/30

The only thing I can see in this log is that both the faulting modules - SAVRT.SYS and NavEx15.Sys are part of Norton, but you did not answer my other question ...

When you reformatted did you load the motherboard chipset drivers?
Click to expand...

pstoh · 2007/05/30

sorry for that

But may I know what is the exactly meaning of "load the motherboard chipset drivers "??

I just do reformat normally, I use sata drive, which my mobo abit kv8-max3 require me to load the sata driver during installation. Others steps are just ordinary, delete whole partition then install the windows XP.

After that, I install all drivers including motherboad chipset, VIA driver, is this what you mean??

May I know do hardware failure cost software error, eg, symantec? Any software problem can be less worry, as long as I don't have to replace any hardware again

Sorry to bother again. And thanks again.

PeteC · 2007/05/31

After that, I install all drivers including motherboad chipset, VIA driver, is this what you mean??
Click to expand...

Yes, that's it

I think you have a problem with your Norton/Symantec software - I would uninstall it and see if the problem is resolved. Do you use any Norton products other than Norton Antivirus? Replace it temporarily with AVG Free

pstoh · 2007/05/31

Thanks for verification.

Before I try to install others Antivirus, can I know whether does AVG change the infected files with new name. I have use another kind of antivirus before which rename all my infected files(inculuding system files) with new name, and thi cause me cannot access windows.

Among free antivirus, AVG, Avast, and AVAST, which one is better?

Thanks again.

PeteC · 2007/05/31

Any file which is infected and which the AV cannot clean will be quarantined and put out of use. I do not know if AVG renames files which are infected as I have not picked up a virus for many years and only use AVG on my laptop which is rarely connected to the Internet. However I have not read of such problems on this Board.

A well protected system with the AV and firewall fully updated, along with a few other antimalware programs and sensible surfing should not be compromised.

You might like to read this ....

Keep your Computer free from Viruses, Trojans, Spyware and other Malware

AVG and Avast are both highly recommended on this Board.

pstoh · 2007/06/01

Sorry to bother again, I have uninstall my Norton and install with Antivir.
But I hit a BSOD again just now.

Here is my dump:
============

Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Documents and Settings\PSTOH\Desktop\Mini060107-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
Debug session time: Fri Jun 1 15:07:06.953 2007 (GMT+8)
System Uptime: 0 days 8:06:10.507
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
................................................................................................................................
Loading User Symbols
Loading unloaded module list
.............................
Unable to load image ati3duag.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ati3duag.dll
*** ERROR: Module load completed but symbols could not be loaded for ati3duag.dll
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, bfaeda94, a85488b4, 0}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

Probably caused by : ati3duag.dll ( ati3duag+2fa94 )

Followup: MachineOwner
---------

From Debugwiz
===========
Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Documents and Settings\PSTOH\Desktop\Mini060107-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlpa.exe -
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_rtm.040803-2158
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
Debug session time: Fri Jun 1 15:07:06.953 2007 (GMT+8)
System Uptime: 0 days 8:06:10.507
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlpa.exe -
Loading Kernel Symbols
................................................................................................................................
Loading User Symbols
Loading unloaded module list
.............................
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ati3duag.dll -
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, bfaeda94, a85488b4, 0}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

Probably caused by : ati3duag.dll ( ati3duag!vGDI3DAATextOut+19804 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: bfaeda94, The address that the exception occurred at
Arg3: a85488b4, Trap Frame
Arg4: 00000000

Debugging Details:
------------------

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

FAULTING_MODULE: 804d7000 nt

DEBUG_FLR_IMAGE_TIMESTAMP: 45f8a3f9

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
ati3duag!vGDI3DAATextOut+19804
bfaeda94 8d8630110000 lea eax,[esi+1130h]

TRAP_FRAME: a85488b4 -- (.trap 0xffffffffa85488b4)
.trap 0xffffffffa85488b4
ErrCode = 00000002
eax=a908e194 ebx=0000001f ecx=0000a60c edx=a908e19c esi=00000000 edi=8000a01f
eip=bfaeda94 esp=a8548928 ebp=00000000 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
ati3duag!vGDI3DAATextOut+0x19804:
bfaeda94 8d8630110000 lea eax,[esi+1130h]
.trap
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WRONG_SYMBOLS

BUGCHECK_STR: 0x8E

LAST_CONTROL_TRANSFER: from 00000000 to bfaeda94

STACK_TEXT:
00000000 00000000 00000000 00000000 00000000 ati3duag!vGDI3DAATextOut+0x19804

STACK_COMMAND: kb

FOLLOWUP_IP:
ati3duag!vGDI3DAATextOut+19804
bfaeda94 8d8630110000 lea eax,[esi+1130h]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: ati3duag!vGDI3DAATextOut+19804

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: ati3duag

IMAGE_NAME: ati3duag.dll

BUCKET_ID: WRONG_SYMBOLS

Followup: MachineOwner
---------

eax=a908e194 ebx=0000001f ecx=0000a60c edx=a908e19c esi=00000000 edi=8000a01f
eip=bfaeda94 esp=a8548928 ebp=00000000 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
ati3duag!vGDI3DAATextOut+0x19804:
bfaeda94 8d8630110000 lea eax,[esi+1130h]
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 00000000 00000000 00000000 ati3duag!vGDI3DAATextOut+0x19804
start end module name
804d7000 806cd280 nt ntkrnlpa.exe Wed Aug 04 13:58:36 2004 (41107B0C)
806ce000 806ee380 hal halaacpi.dll Wed Aug 04 13:59:05 2004 (41107B29)
a797a000 a79a3f00 kmixer kmixer.sys Wed Aug 04 14:07:46 2004 (41107D32)
a7db8000 a7df8380 HTTP HTTP.sys Wed Aug 04 14:00:09 2004 (41107B69)
a8141000 a8193180 srv srv.sys Wed Aug 04 14:14:44 2004 (41107ED4)
a826d000 a8299400 mrxdav mrxdav.sys Wed Aug 04 14:00:49 2004 (41107B91)
a830c000 a831f000 avgntflt avgntflt.sys Fri Apr 27 22:31:25 2007 (4632093D)
a8420000 a842f900 Cdfs Cdfs.SYS Wed Aug 04 14:14:09 2004 (41107EB1)
a84ed000 a8501400 wdmaud wdmaud.sys Wed Aug 04 14:15:03 2004 (41107EE7)
a866a000 a8678d80 sysaudio sysaudio.sys Wed Aug 04 14:15:54 2004 (41107F1A)
aacca000 aacdcd00 dump_viasraid dump_viasraid.sys Thu Sep 04 16:15:18 2003 (3F56F496)
aad05000 aad28000 Fastfat Fastfat.SYS Wed Aug 04 14:14:15 2004 (41107EB7)
aad28000 aad96380 mrxsmb mrxsmb.sys Wed Aug 04 14:15:14 2004 (41107EF2)
aad97000 aadc2180 rdbss rdbss.sys Wed Aug 04 14:20:05 2004 (41108015)
aadeb000 aae0cd00 afd afd.sys Wed Aug 04 14:14:13 2004 (41107EB5)
aaead000 aaf0bce0 vsdatant vsdatant.sys Fri Mar 09 14:29:37 2007 (45F0FED1)
aaf0c000 aaf2cf00 ipnat ipnat.sys Wed Aug 04 14:04:48 2004 (41107C80)
aaf2d000 aaf54c00 netbt netbt.sys Wed Aug 04 14:14:36 2004 (41107ECC)
aaf55000 aafaca80 tcpip tcpip.sys Wed Aug 04 14:14:39 2004 (41107ECF)
aafad000 aafbf400 ipsec ipsec.sys Wed Aug 04 14:14:27 2004 (41107EC3)
bf800000 bf9c0380 win32k win32k.sys Wed Aug 04 14:17:30 2004 (41107F7A)
bf9c1000 bf9d2580 dxg dxg.sys Wed Aug 04 14:00:51 2004 (41107B93)
bf9d3000 bfa18000 ati2dvag ati2dvag.dll Thu Mar 15 09:57:34 2007 (45F8A80E)
bfa18000 bfa6f000 ati2cqag ati2cqag.dll Thu Mar 15 09:10:27 2007 (45F89D03)
bfa6f000 bfabe000 atikvmag atikvmag.dll Thu Mar 15 09:16:14 2007 (45F89E5E)
bfabe000 bfd6e9c0 ati3duag ati3duag.dll Thu Mar 15 09:40:09 2007 (45F8A3F9)
bfd6f000 bfeb0380 ativvaxx ativvaxx.dll Thu Mar 15 09:29:47 2007 (45F8A18B)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 15:56:56 2004 (411096C8)
f6cac000 f6cae900 Dxapi Dxapi.sys Sat Aug 18 04:53:19 2001 (3B7D843F)
f6cc8000 f6cfb200 update update.sys Wed Aug 04 13:58:32 2004 (41107B08)
f6d08000 f6d0b780 dump_scsiport dump_scsiport.sys Wed Aug 04 13:59:51 2004 (41107B57)
f6d1c000 f6d1fc80 serenum serenum.sys Wed Aug 04 13:59:06 2004 (41107B2A)
f6d24000 f6d54100 rdpdr rdpdr.sys Wed Aug 04 14:01:10 2004 (41107BA6)
f6d95000 f6d9d600 sbbotdi sbbotdi.sys Mon May 07 18:14:35 2007 (463EFC0B)
f6df5000 f6e05e00 psched psched.sys Wed Aug 04 14:04:16 2004 (41107C60)
f6e06000 f6e1c680 ndiswan ndiswan.sys Wed Aug 04 14:14:30 2004 (41107EC6)
f6e1d000 f6e7fd00 ALCXSENS ALCXSENS.SYS Fri Aug 08 21:27:06 2003 (3F33A52A)
f6e80000 f6ea3980 portcls portcls.sys Wed Aug 04 14:15:47 2004 (41107F13)
f6ea4000 f6f132c0 ALCXWDM ALCXWDM.SYS Thu Sep 18 13:42:37 2003 (3F6945CD)
f6f14000 f6f36e80 USBPORT USBPORT.SYS Wed Aug 04 14:08:34 2004 (41107D62)
f6f37000 f6f59680 ks ks.sys Wed Aug 04 14:15:20 2004 (41107EF8)
f6f5a000 f6f7df80 EL2K_XP EL2K_XP.sys Wed Jun 04 06:48:12 2003 (3EDD25AC)
f6f7e000 f705b8c0 HCF_MSFT HCF_MSFT.sys Fri Jun 08 15:01:44 2001 (3B207858)
f705c000 f706f780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 14:07:04 2004 (41107D08)
f7070000 f7286000 ati2mtag ati2mtag.sys Thu Mar 15 09:57:14 2007 (45F8A7FA)
f729e000 f72a1c80 mssmbios mssmbios.sys Wed Aug 04 14:07:47 2004 (41107D33)
f72ce000 f72e8580 Mup Mup.sys Wed Aug 04 14:15:20 2004 (41107EF8)
f72e9000 f72fd000 srescan srescan.sys Tue Jan 16 06:16:30 2007 (45ABFD3E)
f72fd000 f7329a80 NDIS NDIS.sys Wed Aug 04 14:14:27 2004 (41107EC3)
f732a000 f73b6480 Ntfs Ntfs.sys Wed Aug 04 14:15:06 2004 (41107EEA)
f73b7000 f73cd780 KSecDD KSecDD.sys Wed Aug 04 13:59:45 2004 (41107B51)
f73ce000 f73dff00 sr sr.sys Wed Aug 04 14:06:22 2004 (41107CDE)
f73e0000 f73fe780 fltMgr fltMgr.sys Wed Aug 04 14:01:17 2004 (41107BAD)
f73ff000 f7413d20 SI3114R SI3114R.sys Sat May 31 07:05:47 2003 (3ED7E3CB)
f7414000 f742b800 SCSIPORT SCSIPORT.SYS Wed Aug 04 13:59:39 2004 (41107B4B)
f742c000 f743ed00 viasraid viasraid.sys Thu Sep 04 16:15:18 2003 (3F56F496)
f743f000 f7456480 atapi atapi.sys Wed Aug 04 13:59:41 2004 (41107B4D)
f7457000 f747c700 dmio dmio.sys Wed Aug 04 14:07:13 2004 (41107D11)
f747d000 f749b880 ftdisk ftdisk.sys Sat Aug 18 04:52:41 2001 (3B7D8419)
f749c000 f74aca80 pci pci.sys Wed Aug 04 14:07:45 2004 (41107D31)
f74ad000 f74dad80 ACPI ACPI.sys Wed Aug 04 14:07:35 2004 (41107D27)
f75dc000 f75e4c00 isapnp isapnp.sys Sat Aug 18 04:58:01 2001 (3B7D8559)
f75ec000 f75fae80 ohci1394 ohci1394.sys Wed Aug 04 14:10:05 2004 (41107DBD)
f75fc000 f7609000 1394BUS 1394BUS.SYS Wed Aug 04 14:10:03 2004 (41107DBB)
f760c000 f7616500 MountMgr MountMgr.sys Wed Aug 04 13:58:29 2004 (41107B05)
f761c000 f7628c80 VolSnap VolSnap.sys Wed Aug 04 14:00:14 2004 (41107B6E)
f762c000 f7634e00 disk disk.sys Wed Aug 04 13:59:53 2004 (41107B59)
f763c000 f7648200 CLASSPNP CLASSPNP.SYS Wed Aug 04 14:14:26 2004 (41107EC2)
f764c000 f7654b80 PxHelp20 PxHelp20.sys Sat Feb 03 05:23:57 2007 (45C3ABED)
f765c000 f7667580 gagp30kx gagp30kx.sys Wed Aug 04 14:07:43 2004 (41107D2F)
f768c000 f769b000 AmdK8 AmdK8.sys Sun May 09 01:21:43 2004 (409D1727)
f769c000 f76a6380 imapi imapi.sys Wed Aug 04 14:00:12 2004 (41107B6C)
f76ac000 f76b8180 cdrom cdrom.sys Wed Aug 04 13:59:52 2004 (41107B58)
f76bc000 f76ca080 redbook redbook.sys Wed Aug 04 13:59:34 2004 (41107B46)
f76cc000 f76dab80 drmk drmk.sys Wed Aug 04 14:07:54 2004 (41107D3A)
f76dc000 f76e8e00 i8042prt i8042prt.sys Wed Aug 04 14:14:36 2004 (41107ECC)
f76ec000 f76f8880 rasl2tp rasl2tp.sys Wed Aug 04 14:14:21 2004 (41107EBD)
f76fc000 f7706200 raspppoe raspppoe.sys Wed Aug 04 14:05:06 2004 (41107C92)
f770c000 f7717d00 raspptp raspptp.sys Wed Aug 04 14:14:26 2004 (41107EC2)
f771c000 f7724900 msgpc msgpc.sys Wed Aug 04 14:04:11 2004 (41107C5B)
f772c000 f7735f00 termdd termdd.sys Wed Aug 04 13:58:52 2004 (41107B1C)
f773c000 f7745480 NDProxy NDProxy.SYS Sat Aug 18 04:55:30 2001 (3B7D84C2)
f778c000 f779a100 usbhub usbhub.sys Wed Aug 04 14:08:40 2004 (41107D68)
f77ac000 f77b4700 wanarp wanarp.sys Wed Aug 04 14:04:57 2004 (41107C89)
f77cc000 f77d4700 netbios netbios.sys Wed Aug 04 14:03:19 2004 (41107C27)
f77ec000 f77f4880 Fips Fips.SYS Sat Aug 18 09:31:49 2001 (3B7DC585)
f77fc000 f7805400 avipbb avipbb.sys Tue Mar 20 00:41:09 2007 (45FEBD25)
f782c000 f7836660 ser2pl ser2pl.sys Thu Mar 29 14:26:28 2001 (3AC2D594)
f785c000 f7862200 PCIIDEX PCIIDEX.SYS Wed Aug 04 13:59:40 2004 (41107B4C)
f7864000 f7868900 PartMgr PartMgr.sys Sat Aug 18 09:32:23 2001 (3B7DC5A7)
f786c000 f7872d00 viaagp1 viaagp1.sys Wed Jul 02 18:08:01 2003 (3F02AF01)
f78c4000 f78c9000 usbuhci usbuhci.sys Wed Aug 04 14:08:34 2004 (41107D62)
f78cc000 f78d2500 usbprint usbprint.sys Wed Aug 04 14:01:23 2004 (41107BB3)
f78dc000 f78e0500 watchdog watchdog.sys Wed Aug 04 14:07:32 2004 (41107D24)
f78ec000 f78f2800 usbehci usbehci.sys Wed Aug 04 14:08:34 2004 (41107D62)
f7934000 f7935000 fdc fdc.sys unavailable (00000000)
f793c000 f7941000 flpydisk flpydisk.sys Wed Aug 04 13:59:24 2004 (41107B3C)
f7944000 f7949a00 mouclass mouclass.sys Wed Aug 04 13:58:32 2004 (41107B08)
f7954000 f795a000 kbdclass kbdclass.sys Wed Aug 04 13:58:32 2004 (41107B08)
f795c000 f7961880 ssmdrv ssmdrv.sys Wed Feb 28 23:43:23 2007 (45E5A31B)
f796c000 f7971200 vga vga.sys Wed Aug 04 14:07:06 2004 (41107D0A)
f797c000 f7980a80 Msfs Msfs.SYS Wed Aug 04 14:00:37 2004 (41107B85)
f798c000 f7993880 Npfs Npfs.SYS Wed Aug 04 14:00:38 2004 (41107B86)
f799c000 f79a3580 Modem Modem.SYS Wed Aug 04 14:08:04 2004 (41107D44)
f79a4000 f79a8880 TDI TDI.SYS Wed Aug 04 14:07:47 2004 (41107D33)
f79cc000 f79d0580 ptilink ptilink.sys Sat Aug 18 04:49:53 2001 (3B7D8371)
f79dc000 f79e0080 raspti raspti.sys Sat Aug 18 04:55:32 2001 (3B7D84C4)
f79ec000 f79ef000 BOOTVID BOOTVID.dll Sat Aug 18 04:49:09 2001 (3B7D8345)
f79f0000 f79f2780 SiWinAcc SiWinAcc.sys Tue Jun 10 06:29:18 2003 (3EE50A3E)
f7a04000 f7a07280 ndisuio ndisuio.sys Wed Aug 04 14:03:10 2004 (41107C1E)
f7a88000 f7a8a880 pfc pfc.sys Sat Apr 17 05:57:56 2004 (408056E4)
f7a98000 f7a9a280 rasacd rasacd.sys Sat Aug 18 04:55:39 2001 (3B7D84CB)
f7ab4000 f7ab6f80 fsvga fsvga.sys Sat Aug 18 04:57:21 2001 (3B7D8531)
f7abc000 f7abe580 ndistapi ndistapi.sys Sat Aug 18 04:55:29 2001 (3B7D84C1)
f7adc000 f7addb80 kdcom kdcom.dll Sat Aug 18 04:49:10 2001 (3B7D8346)
f7ade000 f7adf100 WMILIB WMILIB.SYS Sat Aug 18 05:07:23 2001 (3B7D878B)
f7ae0000 f7ae1500 viaide viaide.sys Wed Aug 04 13:59:42 2004 (41107B4E)
f7ae2000 f7ae3700 dmload dmload.sys Sat Aug 18 04:58:15 2001 (3B7D8567)
f7afa000 f7afb100 swenum swenum.sys Wed Aug 04 13:58:41 2004 (41107B11)
f7b20000 f7b21280 USBD USBD.SYS Sat Aug 18 05:02:58 2001 (3B7D8682)
f7b24000 f7b25f00 Fs_Rec Fs_Rec.SYS Sat Aug 18 04:49:37 2001 (3B7D8361)
f7b28000 f7b29080 Beep Beep.SYS Sat Aug 18 04:47:33 2001 (3B7D82E5)
f7b2c000 f7b2d080 mnmdd mnmdd.SYS Sat Aug 18 04:57:28 2001 (3B7D8538)
f7b30000 f7b31080 RDPCDD RDPCDD.sys Sat Aug 18 04:46:56 2001 (3B7D82C0)
f7b38000 f7b39800 avgio avgio.sys Thu Feb 22 22:57:32 2007 (45DDAF5C)
f7ba4000 f7ba4bc0 Winflash Winflash.sys Tue Sep 17 12:55:05 2002 (3D86B5A9)
f7bfe000 f7bfeb80 Null Null.SYS Sat Aug 18 04:47:39 2001 (3B7D82EB)
f7c5f000 f7c5fd00 dxgthk dxgthk.sys Sat Aug 18 04:53:12 2001 (3B7D8438)
f7d32000 f7d32c00 audstub audstub.sys Sat Aug 18 04:59:40 2001 (3B7D85BC)

Unloaded modules:
a797a000 a79a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a797a000 a79a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a797a000 a79a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a797a000 a79a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7b3a000 f7b3c000 kerneld.wnt
Timestamp: unavailable (00000000)
Checksum: 00000000
a797a000 a79a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a797a000 a79a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a797a000 a79a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a797a000 a79a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a797a000 a79a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a797a000 a79a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a797a000 a79a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a797a000 a79a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a797a000 a79a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a797a000 a79a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a797a000 a79a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a7b84000 a7bae000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a7bd6000 a7c00000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a84a0000 a84ca000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7cf5000 f7cf6000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a84ca000 a84ed000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a869a000 a86a7000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a852a000 a8538000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7afc000 f7afe000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a8a22000 a8a32000 Serial.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
a8231000 a8245000 Parport.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f77dc000 f77e5000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f795c000 f7961000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7a8c000 f7a8f000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

If looking at the dump and logs, it seems that the problem this time is my ATI problem, but I've install latest version of driver.

Please verify, thanks again.

PeteC · 2007/06/01

It looks like your ATi drivers are the source of the problem here - the latest are not always the best.

I cannot help you n detail with ATi as I have used only Matrox and now nVidia graphics.

pstoh · 2007/06/01

I have use thic pc very fine without any problem for past 2 years. Then I start to get the BSOD randomly even I reformat it.

what is the source of these BSOD actually, while we solve one, then it come out another one. The dump is different everytime, sometime firewall, sometimes antivirus, now driver. The weird thing is I use the same hardware and software all these time, why problem start to come out now?

Are there any solution to solve BSOD once and for all. Perhaps replace all hardware ?

Thanks for your guide.

PeteC · 2007/06/01

Check out the hardware .....

Examine the motherboard for any bulging capacitors (small silver cylinders}

Check out your RAM using Windows Memory Diagnostic Tool or Memtest - full tests.

Download the hard drive diagnostic software from the manufacturer's web site and run it.

Let us know the results. please.

pstoh · 2007/06/02

I had Examine the motherboard, not found bulging capacitors.

I had Check out RAM using Memtest - full tests for several full circle without error, it's my new ram.

I had use hdtune to fully scan through my hardisk and found no problem.

I uninstall newest ati driver and install using the driver from CD come with the card itself.

And I just encounter another BSOD now

Dump
====

Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Documents and Settings\PSTOH\Desktop\Mini060207-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
Debug session time: Sat Jun 2 13:41:11.125 2007 (GMT+8)
System Uptime: 0 days 4:57:14.674
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
............................................................................................................................
Loading User Symbols
Loading unloaded module list
..............
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000000A, {56085d8b, 2, 0, 8051f52c}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : win32k.sys ( win32k+b785 )

Followup: MachineOwner
---------

Logs
===

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Documents and Settings\PSTOH\Desktop\Mini060207-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlpa.exe -
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_rtm.040803-2158
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
Debug session time: Sat Jun 2 13:41:11.125 2007 (GMT+8)
System Uptime: 0 days 4:57:14.674
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlpa.exe -
Loading Kernel Symbols
............................................................................................................................
Loading User Symbols
Loading unloaded module list
..............
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000000A, {56085d8b, 2, 0, 8051f52c}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

Probably caused by : win32k.sys ( win32k!SURFREF::bDeleteSurface+12 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 56085d8b, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 8051f52c, address which referenced memory

Debugging Details:
------------------

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

MODULE_NAME: win32k

FAULTING_MODULE: 804d7000 nt

DEBUG_FLR_IMAGE_TIMESTAMP: 41107f7a

READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPoolCodeStart
unable to get nt!MmPoolCodeEnd
56085d8b

CURRENT_IRQL: 2

FAULTING_IP:
nt!MmTrimAllSystemPagableMemory+9e00
8051f52c 53 push ebx

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WRONG_SYMBOLS

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 8051f090 to 8051f52c

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
a1f15ab4 8051f090 c000a000 01400000 00000000 nt!MmTrimAllSystemPagableMemory+0x9e00
a1f15b78 80516641 00000000 01400fff 00000000 nt!MmTrimAllSystemPagableMemory+0x9964
a1f15b94 805a7308 01400000 01400fff a1f15c54 nt!MmTrimAllSystemPagableMemory+0xf15
a1f15c3c 8053c808 ffffffff a1f15d1c a1f15d28 nt!NtFreeVirtualMemory+0x42e
a1f15c54 804fd901 badb0d00 a1f15ccc a1f15d08 nt!KeReleaseInStackQueuedSpinLockFromDpcLevel+0xb14
a1f15d20 bf80b785 00000000 00000000 a1f15d44 nt!ZwFreeVirtualMemory+0x11
a1f15d30 bf810086 00000000 00000000 e3338a78 win32k!SURFREF::bDeleteSurface+0x12
a1f15d44 bf81015f 650504f4 0012f7d0 a1f15d64 win32k!bDeleteSurface+0x20
a1f15d58 8053c808 650504f4 0012f7e4 7c90eb94 win32k!NtGdiDeleteObjectApp+0x74
a1f15d64 7c90eb94 badb0d00 0012f7cc 00000000 nt!KeReleaseInStackQueuedSpinLockFromDpcLevel+0xb14
a1f15d68 badb0d00 0012f7cc 00000000 00000000 0x7c90eb94
a1f15d6c 0012f7cc 00000000 00000000 00000000 0xbadb0d00
a1f15d70 00000000 00000000 00000000 00000000 0x12f7cc

STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!SURFREF::bDeleteSurface+12
bf80b785 85c0 test eax,eax

SYMBOL_STACK_INDEX: 6

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: win32k.sys

SYMBOL_NAME: win32k!SURFREF::bDeleteSurface+12

BUCKET_ID: WRONG_SYMBOLS

Followup: MachineOwner
---------

eax=85882020 ebx=00000000 ecx=01400000 edx=c0883000 esi=ec8b55ff edi=03ffffff
eip=8051f52c esp=a1f15a74 ebp=a1f15ab4 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
nt!MmTrimAllSystemPagableMemory+0x9e00:
8051f52c 53 push ebx
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
a1f15ab4 8051f090 c000a000 01400000 00000000 nt!MmTrimAllSystemPagableMemory+0x9e00
a1f15b78 80516641 00000000 01400fff 00000000 nt!MmTrimAllSystemPagableMemory+0x9964
a1f15b94 805a7308 01400000 01400fff a1f15c54 nt!MmTrimAllSystemPagableMemory+0xf15
a1f15c3c 8053c808 ffffffff a1f15d1c a1f15d28 nt!NtFreeVirtualMemory+0x42e
a1f15c54 804fd901 badb0d00 a1f15ccc a1f15d08 nt!KeReleaseInStackQueuedSpinLockFromDpcLevel+0xb14
a1f15d20 bf80b785 00000000 00000000 a1f15d44 nt!ZwFreeVirtualMemory+0x11
a1f15d30 bf810086 00000000 00000000 e3338a78 win32k!SURFREF::bDeleteSurface+0x12 (FPO: [Non-Fpo])
a1f15d44 bf81015f 650504f4 0012f7d0 a1f15d64 win32k!bDeleteSurface+0x20 (FPO: [Non-Fpo])
a1f15d58 8053c808 650504f4 0012f7e4 7c90eb94 win32k!NtGdiDeleteObjectApp+0x74 (FPO: [Non-Fpo])
a1f15d64 7c90eb94 badb0d00 0012f7cc 00000000 nt!KeReleaseInStackQueuedSpinLockFromDpcLevel+0xb14
a1f15d68 badb0d00 0012f7cc 00000000 00000000 0x7c90eb94
a1f15d6c 0012f7cc 00000000 00000000 00000000 0xbadb0d00
a1f15d70 00000000 00000000 00000000 00000000 0x12f7cc
start end module name
804d7000 806cd280 nt ntkrnlpa.exe Wed Aug 04 13:58:36 2004 (41107B0C)
806ce000 806ee380 hal halaacpi.dll Wed Aug 04 13:59:05 2004 (41107B29)
a2047000 a2087380 HTTP HTTP.sys Wed Aug 04 14:00:09 2004 (41107B69)
a20b8000 a20c7900 Cdfs Cdfs.SYS Wed Aug 04 14:14:09 2004 (41107EB1)
a2330000 a2382180 srv srv.sys Wed Aug 04 14:14:44 2004 (41107ED4)
a245c000 a2488400 mrxdav mrxdav.sys Wed Aug 04 14:00:49 2004 (41107B91)
a259b000 a25ae000 avgntflt avgntflt.sys Fri Apr 27 22:31:25 2007 (4632093D)
a2715000 a2729400 wdmaud wdmaud.sys Wed Aug 04 14:15:03 2004 (41107EE7)
a286a000 a2878d80 sysaudio sysaudio.sys Wed Aug 04 14:15:54 2004 (41107F1A)
a2b66000 a2b69280 ndisuio ndisuio.sys Wed Aug 04 14:03:10 2004 (41107C1E)
a2cca000 a2cdcd00 dump_viasraid dump_viasraid.sys Thu Sep 04 16:15:18 2003 (3F56F496)
a2d05000 a2d28000 Fastfat Fastfat.SYS Wed Aug 04 14:14:15 2004 (41107EB7)
a2d28000 a2d96380 mrxsmb mrxsmb.sys Wed Aug 04 14:15:14 2004 (41107EF2)
a2d97000 a2dc2180 rdbss rdbss.sys Wed Aug 04 14:20:05 2004 (41108015)
a2dc3000 a2de4d00 afd afd.sys Wed Aug 04 14:14:13 2004 (41107EB5)
a2ead000 a2f0bce0 vsdatant vsdatant.sys Fri Mar 09 14:29:37 2007 (45F0FED1)
a2f0c000 a2f2cf00 ipnat ipnat.sys Wed Aug 04 14:04:48 2004 (41107C80)
a2f2d000 a2f54c00 netbt netbt.sys Wed Aug 04 14:14:36 2004 (41107ECC)
a2f55000 a2faca80 tcpip tcpip.sys Wed Aug 04 14:14:39 2004 (41107ECF)
a2fad000 a2fbf400 ipsec ipsec.sys Wed Aug 04 14:14:27 2004 (41107EC3)
bf800000 bf9c0380 win32k win32k.sys Wed Aug 04 14:17:30 2004 (41107F7A)
bf9c1000 bf9d2580 dxg dxg.sys Wed Aug 04 14:00:51 2004 (41107B93)
bf9d3000 bfa32000 ati2dvag ati2dvag.dll Sat Sep 13 10:43:23 2003 (3F62844B)
bfa32000 bfb49180 ati3duag ati3duag.dll Sat Sep 13 10:23:50 2003 (3F627FB6)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 15:56:56 2004 (411096C8)
f6e22000 f6e25780 dump_scsiport dump_scsiport.sys Wed Aug 04 13:59:51 2004 (41107B57)
f6e2e000 f6e61200 update update.sys Wed Aug 04 13:58:32 2004 (41107B08)
f6e82000 f6e85c80 serenum serenum.sys Wed Aug 04 13:59:06 2004 (41107B2A)
f6e8a000 f6eba100 rdpdr rdpdr.sys Wed Aug 04 14:01:10 2004 (41107BA6)
f6f5b000 f6f6be00 psched psched.sys Wed Aug 04 14:04:16 2004 (41107C60)
f6f6c000 f6f82680 ndiswan ndiswan.sys Wed Aug 04 14:14:30 2004 (41107EC6)
f6f83000 f6fe5d00 ALCXSENS ALCXSENS.SYS Fri Aug 08 21:27:06 2003 (3F33A52A)
f6fe6000 f7009980 portcls portcls.sys Wed Aug 04 14:15:47 2004 (41107F13)
f700a000 f70792c0 ALCXWDM ALCXWDM.SYS Thu Sep 18 13:42:37 2003 (3F6945CD)
f707a000 f709ce80 USBPORT USBPORT.SYS Wed Aug 04 14:08:34 2004 (41107D62)
f709d000 f70bf680 ks ks.sys Wed Aug 04 14:15:20 2004 (41107EF8)
f70c0000 f70e3f80 EL2K_XP EL2K_XP.sys Wed Jun 04 06:48:12 2003 (3EDD25AC)
f70e4000 f71c18c0 HCF_MSFT HCF_MSFT.sys Fri Jun 08 15:01:44 2001 (3B207858)
f71c2000 f71d5780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 14:07:04 2004 (41107D08)
f71d6000 f7286000 ati2mtag ati2mtag.sys Sat Sep 13 10:43:03 2003 (3F628437)
f72a2000 f72a4580 ndistapi ndistapi.sys Sat Aug 18 04:55:29 2001 (3B7D84C1)
f72aa000 f72acf80 fsvga fsvga.sys Sat Aug 18 04:57:21 2001 (3B7D8531)
f72ce000 f72e8580 Mup Mup.sys Wed Aug 04 14:15:20 2004 (41107EF8)
f72e9000 f72fd000 srescan srescan.sys Tue Jan 16 06:16:30 2007 (45ABFD3E)
f72fd000 f7329a80 NDIS NDIS.sys Wed Aug 04 14:14:27 2004 (41107EC3)
f732a000 f73b6480 Ntfs Ntfs.sys Wed Aug 04 14:15:06 2004 (41107EEA)
f73b7000 f73cd780 KSecDD KSecDD.sys Wed Aug 04 13:59:45 2004 (41107B51)
f73ce000 f73dff00 sr sr.sys Wed Aug 04 14:06:22 2004 (41107CDE)
f73e0000 f73fe780 fltMgr fltMgr.sys Wed Aug 04 14:01:17 2004 (41107BAD)
f73ff000 f7413d20 SI3114R SI3114R.sys Sat May 31 07:05:47 2003 (3ED7E3CB)
f7414000 f742b800 SCSIPORT SCSIPORT.SYS Wed Aug 04 13:59:39 2004 (41107B4B)
f742c000 f743ed00 viasraid viasraid.sys Thu Sep 04 16:15:18 2003 (3F56F496)
f743f000 f7456480 atapi atapi.sys Wed Aug 04 13:59:41 2004 (41107B4D)
f7457000 f747c700 dmio dmio.sys Wed Aug 04 14:07:13 2004 (41107D11)
f747d000 f749b880 ftdisk ftdisk.sys Sat Aug 18 04:52:41 2001 (3B7D8419)
f749c000 f74aca80 pci pci.sys Wed Aug 04 14:07:45 2004 (41107D31)
f74ad000 f74dad80 ACPI ACPI.sys Wed Aug 04 14:07:35 2004 (41107D27)
f75dc000 f75e4c00 isapnp isapnp.sys Sat Aug 18 04:58:01 2001 (3B7D8559)
f75ec000 f75fae80 ohci1394 ohci1394.sys Wed Aug 04 14:10:05 2004 (41107DBD)
f75fc000 f7609000 1394BUS 1394BUS.SYS Wed Aug 04 14:10:03 2004 (41107DBB)
f760c000 f7616500 MountMgr MountMgr.sys Wed Aug 04 13:58:29 2004 (41107B05)
f761c000 f7628c80 VolSnap VolSnap.sys Wed Aug 04 14:00:14 2004 (41107B6E)
f762c000 f7634e00 disk disk.sys Wed Aug 04 13:59:53 2004 (41107B59)
f763c000 f7648200 CLASSPNP CLASSPNP.SYS Wed Aug 04 14:14:26 2004 (41107EC2)
f764c000 f7654b80 PxHelp20 PxHelp20.sys Sat Feb 03 05:23:57 2007 (45C3ABED)
f765c000 f7667580 gagp30kx gagp30kx.sys Wed Aug 04 14:07:43 2004 (41107D2F)
f768c000 f769b000 AmdK8 AmdK8.sys Sun May 09 01:21:43 2004 (409D1727)
f769c000 f76a6380 imapi imapi.sys Wed Aug 04 14:00:12 2004 (41107B6C)
f76ac000 f76b8180 cdrom cdrom.sys Wed Aug 04 13:59:52 2004 (41107B58)
f76bc000 f76ca080 redbook redbook.sys Wed Aug 04 13:59:34 2004 (41107B46)
f76cc000 f76dab80 drmk drmk.sys Wed Aug 04 14:07:54 2004 (41107D3A)
f76dc000 f76e8e00 i8042prt i8042prt.sys Wed Aug 04 14:14:36 2004 (41107ECC)
f76ec000 f76f8880 rasl2tp rasl2tp.sys Wed Aug 04 14:14:21 2004 (41107EBD)
f76fc000 f7706200 raspppoe raspppoe.sys Wed Aug 04 14:05:06 2004 (41107C92)
f770c000 f7717d00 raspptp raspptp.sys Wed Aug 04 14:14:26 2004 (41107EC2)
f771c000 f7724900 msgpc msgpc.sys Wed Aug 04 14:04:11 2004 (41107C5B)
f772c000 f7735f00 termdd termdd.sys Wed Aug 04 13:58:52 2004 (41107B1C)
f773c000 f7745480 NDProxy NDProxy.SYS Sat Aug 18 04:55:30 2001 (3B7D84C2)
f778c000 f779a100 usbhub usbhub.sys Wed Aug 04 14:08:40 2004 (41107D68)
f77ac000 f77b4700 wanarp wanarp.sys Wed Aug 04 14:04:57 2004 (41107C89)
f77cc000 f77d4700 netbios netbios.sys Wed Aug 04 14:03:19 2004 (41107C27)
f77ec000 f77f4880 Fips Fips.SYS Sat Aug 18 09:31:49 2001 (3B7DC585)
f77fc000 f7805400 avipbb avipbb.sys Tue Mar 20 00:41:09 2007 (45FEBD25)
f782c000 f7836660 ser2pl ser2pl.sys Thu Mar 29 14:26:28 2001 (3AC2D594)
f784c000 f7854600 sbbotdi sbbotdi.sys Mon May 07 18:14:35 2007 (463EFC0B)
f785c000 f7862200 PCIIDEX PCIIDEX.SYS Wed Aug 04 13:59:40 2004 (41107B4C)
f7864000 f7868900 PartMgr PartMgr.sys Sat Aug 18 09:32:23 2001 (3B7DC5A7)
f786c000 f7872d00 viaagp1 viaagp1.sys Wed Jul 02 18:08:01 2003 (3F02AF01)
f78a4000 f78a8a80 Msfs Msfs.SYS Wed Aug 04 14:00:37 2004 (41107B85)
f78b4000 f78bb880 Npfs Npfs.SYS Wed Aug 04 14:00:38 2004 (41107B86)
f78c4000 f78cb580 Modem Modem.SYS Wed Aug 04 14:08:04 2004 (41107D44)
f78cc000 f78d0880 TDI TDI.SYS Wed Aug 04 14:07:47 2004 (41107D33)
f78f4000 f78f8580 ptilink ptilink.sys Sat Aug 18 04:49:53 2001 (3B7D8371)
f7904000 f7908080 raspti raspti.sys Sat Aug 18 04:55:32 2001 (3B7D84C4)
f793c000 f7941000 usbuhci usbuhci.sys Wed Aug 04 14:08:34 2004 (41107D62)
f7944000 f794a500 usbprint usbprint.sys Wed Aug 04 14:01:23 2004 (41107BB3)
f794c000 f7950500 watchdog watchdog.sys Wed Aug 04 14:07:32 2004 (41107D24)
f7964000 f796a800 usbehci usbehci.sys Wed Aug 04 14:08:34 2004 (41107D62)
f79ac000 f79ad000 fdc fdc.sys unavailable (00000000)
f79b4000 f79b9000 flpydisk flpydisk.sys Wed Aug 04 13:59:24 2004 (41107B3C)
f79bc000 f79c1a00 mouclass mouclass.sys Wed Aug 04 13:58:32 2004 (41107B08)
f79cc000 f79d2000 kbdclass kbdclass.sys Wed Aug 04 13:58:32 2004 (41107B08)
f79d4000 f79d9880 ssmdrv ssmdrv.sys Wed Feb 28 23:43:23 2007 (45E5A31B)
f79e4000 f79e9200 vga vga.sys Wed Aug 04 14:07:06 2004 (41107D0A)
f79ec000 f79ef000 BOOTVID BOOTVID.dll Sat Aug 18 04:49:09 2001 (3B7D8345)
f79f0000 f79f2780 SiWinAcc SiWinAcc.sys Tue Jun 10 06:29:18 2003 (3EE50A3E)
f7a7c000 f7a7fc80 mssmbios mssmbios.sys Wed Aug 04 14:07:47 2004 (41107D33)
f7aac000 f7aae900 Dxapi Dxapi.sys Sat Aug 18 04:53:19 2001 (3B7D843F)
f7ab0000 f7ab2880 pfc pfc.sys Sat Apr 17 05:57:56 2004 (408056E4)
f7ac0000 f7ac2280 rasacd rasacd.sys Sat Aug 18 04:55:39 2001 (3B7D84CB)
f7adc000 f7addb80 kdcom kdcom.dll Sat Aug 18 04:49:10 2001 (3B7D8346)
f7ade000 f7adf100 WMILIB WMILIB.SYS Sat Aug 18 05:07:23 2001 (3B7D878B)
f7ae0000 f7ae1500 viaide viaide.sys Wed Aug 04 13:59:42 2004 (41107B4E)
f7ae2000 f7ae3700 dmload dmload.sys Sat Aug 18 04:58:15 2001 (3B7D8567)
f7af4000 f7af5100 swenum swenum.sys Wed Aug 04 13:58:41 2004 (41107B11)
f7b1a000 f7b1b280 USBD USBD.SYS Sat Aug 18 05:02:58 2001 (3B7D8682)
f7b1e000 f7b1ff00 Fs_Rec Fs_Rec.SYS Sat Aug 18 04:49:37 2001 (3B7D8361)
f7b22000 f7b23080 Beep Beep.SYS Sat Aug 18 04:47:33 2001 (3B7D82E5)
f7b26000 f7b27080 mnmdd mnmdd.SYS Sat Aug 18 04:57:28 2001 (3B7D8538)
f7b2a000 f7b2b080 RDPCDD RDPCDD.sys Sat Aug 18 04:46:56 2001 (3B7D82C0)
f7b32000 f7b33800 avgio avgio.sys Thu Feb 22 22:57:32 2007 (45DDAF5C)
f7ba4000 f7ba4bc0 Winflash Winflash.sys Tue Sep 17 12:55:05 2002 (3D86B5A9)
f7ba5000 f7ba5c00 audstub audstub.sys Sat Aug 18 04:59:40 2001 (3B7D85BC)
f7c00000 f7c00b80 Null Null.SYS Sat Aug 18 04:47:39 2001 (3B7D82EB)
f7c5e000 f7c5ed00 dxgthk dxgthk.sys Sat Aug 18 04:53:12 2001 (3B7D8438)

Unloaded modules:
a1bf1000 a1c1b000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a1bf1000 a1c1b000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a1e4b000 a1e75000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a26c8000 a26f2000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7c16000 f7c17000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a2b42000 a2b4f000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a26f2000 a2715000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a272a000 a2738000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7b4c000 f7b4e000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a24d2000 a24e2000 Serial.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
a23fe000 a2412000 Parport.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f77dc000 f77e5000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79d4000 f79d9000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7ab4000 f7ab7000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

This time I beg something deal with win32k. May I know what is my problem this time. Thanks once again.

PeteC · 2007/06/03

I think you have a hardware problem, but I do not have the knowledge to analyse the logs in any detail.

One thing I would suggest is to unplug all cables and plug them in again, remove each plug in card and reseat it, do the same with the memory modules. The computer must be powered down of course

If you can run the computer with only the drive with the operating system on it connected and get no blue screens, this would point to a problem with the other drives.

Beyond that I have no other ideas

pstoh · 2007/06/03

I'll try to follow your advise.

I really appreciate all your posts and help, Pete. Thanks again,

Log in or Sign up

Windows XP Blue Screen Randomly

pstoh Inactive Thread Starter

Rockster2U Geek Member

PeteC SuperGeek Staff

pstoh Inactive Thread Starter

noahdfear Inactive

pstoh Inactive Thread Starter

PeteC SuperGeek Staff

pstoh Inactive Thread Starter

PeteC SuperGeek Staff

pstoh Inactive Thread Starter

PeteC SuperGeek Staff

pstoh Inactive Thread Starter

PeteC SuperGeek Staff

pstoh Inactive Thread Starter

PeteC SuperGeek Staff

pstoh Inactive Thread Starter

PeteC SuperGeek Staff

pstoh Inactive Thread Starter

PeteC SuperGeek Staff

pstoh Inactive Thread Starter

Share This Page

Log in or Sign up

Windows XP Blue Screen Randomly

pstoh Inactive Thread Starter

Rockster2U Geek Member

PeteC SuperGeek Staff

pstoh Inactive Thread Starter

noahdfear Inactive

pstoh Inactive Thread Starter

PeteC SuperGeek Staff

pstoh Inactive Thread Starter

PeteC SuperGeek Staff

pstoh Inactive Thread Starter

PeteC SuperGeek Staff

pstoh Inactive Thread Starter

PeteC SuperGeek Staff

pstoh Inactive Thread Starter

PeteC SuperGeek Staff

pstoh Inactive Thread Starter

PeteC SuperGeek Staff

pstoh Inactive Thread Starter

PeteC SuperGeek Staff

pstoh Inactive Thread Starter

Share This Page

Useful Searches