WinXP random restarts without BSOD

Firts of all sorry for my english but I'm italian.
I've found this forum while searching on the web something that could help me, so I've installed debugwiz and tried to analyze the logs but I really can't understand them, plus they seems to be always different...
Well, my XP is often restarting, I've disabled the "auto restart" option but it's still restarting without a BSOD.
At a first time I thought it was a problem with the operating system, I had the computer really messed up with a lot of software installation/disinstallation so I've decided to format and start with a clean machine... I quickly realized that the problem was not the operating system since the pc restarts also with nothing but xp installed... I've tried different things: tested the ram, changed the bios of the mobo, changed the network card, updated some drivers... nothing, the computer is always instable.
Finillay I've landed here and got some logs of the minidump thing, so if someone could help me I'll post them.
Thanks so much for the attention,
Danilo

 

I think I'm starting to cry... or throwing the pc outside the window!
I was just analyzing the minidumps with debugwiz to post here the logs and the machine restarted... no BSOD as usual but a cool news... after the normal screen of the mobo, press this to enter setup..., XP doesn't start at all, the only thing I have is a black screen...
Now I've putted in the Ubuntu live cd so I can connect to the Internet and post the only two logs I got before the "final crash "...
Hope they can help to find a solution...
Bye
Danilo

 

Opened log file 'c:\debuglog.txt'



Microsoft (R) Windows Debugger Version 6.6.0007.5

Copyright (c) Microsoft Corporation. All rights reserved.





Loading Dump File [C:\WINDOWS\Minidump\Mini081707-01.dmp]

Mini Kernel Dump File: Only registers and stack trace are available



Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers

Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible

Product: WinNt, suite: TerminalServer SingleUserTS

Built by: 2600.xpsp_sp2_rtm.040803-2158

Kernel base = 0x804d7000 PsLoadedModuleList = 0x805644a0

Debug session time: Fri Aug 17 13:39:37.359 2007 (GMT+2)

System Uptime: 0 days 0:15:09.062

Loading Kernel Symbols

.............................................................................................................

Loading User Symbols

Loading unloaded module list

.........

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************



Use !analyze -v to get detailed debugging information.



BugCheck 1000007F, {8, f7717d70, 0, 0}



Probably caused by : win32k.sys ( win32k!SURFACE::bDeleteSurface+188 )



Followup: MachineOwner

---------



1: kd> !analyze -v;r;kv;lmtn;.logclose;q

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************



UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)

This means a trap occurred in kernel mode, and it's a trap of a kind

that the kernel isn't allowed to have/catch (bound trap) or that

is always instant death (double fault). The first number in the

bugcheck params is the number of the trap (8 = double fault, etc)

Consult an Intel x86 family manual to learn more about what these

traps are. Here is a *portion* of those codes:

If kv shows a taskGate

use .tss on the part before the colon, then kv.

Else if kv shows a trapframe

use .trap on that value

Else

.trap on the appropriate frame will show where the trap was taken

(on x86, this will be the ebp that goes with the procedure KiTrap)

Endif

kb will then show the corrected stack.

Arguments:

Arg1: 00000008, EXCEPTION_DOUBLE_FAULT

Arg2: f7717d70

Arg3: 00000000

Arg4: 00000000



Debugging Details:

------------------





BUGCHECK_STR: 0x7f_8



CUSTOMER_CRASH_COUNT: 1



DEFAULT_BUCKET_ID: DRIVER_FAULT



PROCESS_NAME: firefox.exe



LAST_CONTROL_TRANSFER: from 804efe7f to 804efb70



STACK_TEXT:

a666d69c 804efe7f 000003d4 03493fff 00000000 nt!MiDeletePte+0x41e

a666d6b8 805728d6 03100000 03493fff a666d774 nt!MiDeleteFreeVm+0x20

a666d75c 804ddf0f ffffffff a666d83c a666d848 nt!NtFreeVirtualMemory+0x42e

a666d75c 804e3dba ffffffff a666d83c a666d848 nt!KiFastCallEntry+0xfc

a666d7e4 bf80b71a ffffffff a666d83c a666d848 nt!ZwFreeVirtualMemory+0x11

a666d840 bf80b785 00000000 00000000 a666d864 win32k!SURFACE::bDeleteSurface+0x188

a666d850 bf810086 00000000 00000000 e18a3008 win32k!SURFREF::bDeleteSurface+0x12

a666d864 bf81015f 610502ae 0012f22c a666d884 win32k!bDeleteSurface+0x20

a666d878 804ddf0f 610502ae 0012f240 7c91eb94 win32k!NtGdiDeleteObjectApp+0x74

a666d878 7c91eb94 610502ae 0012f240 7c91eb94 nt!KiFastCallEntry+0xfc

WARNING: Frame IP not in any known module. Following frames may be wrong.

0012f240 00000000 00000000 00000000 00000000 0x7c91eb94





STACK_COMMAND: kb



FOLLOWUP_IP:

win32k!SURFACE::bDeleteSurface+188

bf80b71a e964ffffff jmp win32k!SURFACE::bDeleteSurface+0x1a8 (bf80b683)



SYMBOL_STACK_INDEX: 5



FOLLOWUP_NAME: MachineOwner



MODULE_NAME: win32k



IMAGE_NAME: win32k.sys



DEBUG_FLR_IMAGE_TIMESTAMP: 41107f7a



SYMBOL_NAME: win32k!SURFACE::bDeleteSurface+188



FAILURE_BUCKET_ID: 0x7f_8_win32k!SURFACE::bDeleteSurface+188



BUCKET_ID: 0x7f_8_win32k!SURFACE::bDeleteSurface+188



Followup: MachineOwner

---------



eax=00000000 ebx=c000c7d4 ecx=c000c7d4 edx=80568e58 esi=c0300030 edi=031f5000

eip=804efb70 esp=a66ed5dc ebp=a666d69c iopl=0 nv up ei pl zr na pe nc

cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246

nt!MiDeletePte+0x41e:

804efb70 c21800 ret 18h

ChildEBP RetAddr Args to Child

a666d69c 804efe7f 000003d4 03493fff 00000000 nt!MiDeletePte+0x41e (FPO: [Non-Fpo])

a666d6b8 805728d6 03100000 03493fff a666d774 nt!MiDeleteFreeVm+0x20 (FPO: [Non-Fpo])

a666d75c 804ddf0f ffffffff a666d83c a666d848 nt!NtFreeVirtualMemory+0x42e (FPO: [Non-Fpo])

a666d75c 804e3dba ffffffff a666d83c a666d848 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ a666d774)

a666d7e4 bf80b71a ffffffff a666d83c a666d848 nt!ZwFreeVirtualMemory+0x11 (FPO: [4,0,0])

a666d840 bf80b785 00000000 00000000 a666d864 win32k!SURFACE::bDeleteSurface+0x188 (FPO: [Non-Fpo])

a666d850 bf810086 00000000 00000000 e18a3008 win32k!SURFREF::bDeleteSurface+0x12 (FPO: [Non-Fpo])

a666d864 bf81015f 610502ae 0012f22c a666d884 win32k!bDeleteSurface+0x20 (FPO: [Non-Fpo])

a666d878 804ddf0f 610502ae 0012f240 7c91eb94 win32k!NtGdiDeleteObjectApp+0x74 (FPO: [Non-Fpo])

a666d878 7c91eb94 610502ae 0012f240 7c91eb94 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ a666d884)

WARNING: Frame IP not in any known module. Following frames may be wrong.

0012f240 00000000 00000000 00000000 00000000 0x7c91eb94

start end module name

804d7000 80702000 nt ntkrnlmp.exe Wed Aug 04 08:18:18 2004 (41107FAA)

80702000 80722d00 hal halmacpi.dll Wed Aug 04 07:59:09 2004 (41107B2D)

a5a2e000 a5a57f00 kmixer kmixer.sys Wed Aug 04 08:07:46 2004 (41107D32)

a5bc0000 a5c00380 HTTP HTTP.sys Wed Aug 04 08:00:09 2004 (41107B69)

a5d3e000 a5d52400 wdmaud wdmaud.sys Wed Aug 04 08:15:03 2004 (41107EE7)

a5e13000 a5e21d80 sysaudio sysaudio.sys Wed Aug 04 08:15:54 2004 (41107F1A)

a5f0b000 a5f1e000 avgntflt avgntflt.sys Fri Apr 27 16:31:25 2007 (4632093D)

a5f82000 a5fd4180 srv srv.sys Wed Aug 04 08:14:44 2004 (41107ED4)

a640d000 a6424480 dump_atapi dump_atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)

a6425000 a6493380 mrxsmb mrxsmb.sys Wed Aug 04 08:15:14 2004 (41107EF2)

a64bc000 a64e7180 rdbss rdbss.sys Wed Aug 04 08:20:05 2004 (41108015)

a64e8000 a6509d00 afd afd.sys Wed Aug 04 08:14:13 2004 (41107EB5)

a650a000 a652af00 ipnat ipnat.sys Wed Aug 04 08:04:48 2004 (41107C80)

a652b000 a6552c00 netbt netbt.sys Wed Aug 04 08:14:36 2004 (41107ECC)

a6553000 a65aaa80 tcpip tcpip.sys Wed Aug 04 08:14:39 2004 (41107ECF)

a65ab000 a65bd400 ipsec ipsec.sys Wed Aug 04 08:14:27 2004 (41107EC3)

a66e2000 a66e4900 Dxapi Dxapi.sys Fri Aug 17 22:53:19 2001 (3B7D843F)

ba716000 ba749200 update update.sys Wed Aug 04 07:58:32 2004 (41107B08)

ba74a000 ba77a100 rdpdr rdpdr.sys Wed Aug 04 08:01:10 2004 (41107BA6)

ba7a3000 ba7b3e00 psched psched.sys Wed Aug 04 08:04:16 2004 (41107C60)

ba7b4000 ba7ca680 ndiswan ndiswan.sys Wed Aug 04 08:14:30 2004 (41107EC6)

ba86b000 ba87e980 parport parport.sys Wed Aug 04 07:59:04 2004 (41107B28)

ba87f000 ba8a1680 ks ks.sys Wed Aug 04 08:15:20 2004 (41107EF8)

ba8a2000 ba8c5980 portcls portcls.sys Wed Aug 04 08:15:47 2004 (41107F13)

ba8c6000 ba8e9f80 EL2K_XP EL2K_XP.sys Thu Jul 17 19:22:10 2003 (3F16DB42)

ba8ea000 ba90ce80 USBPORT USBPORT.SYS Wed Aug 04 08:08:34 2004 (41107D62)

ba90d000 ba920780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 08:07:04 2004 (41107D08)

ba921000 ba9b9000 ati2mtag ati2mtag.sys Wed Jun 25 23:40:11 2003 (3EFA16BB)

ba9b9000 ba9b9b80 Null Null.SYS Fri Aug 17 22:47:39 2001 (3B7D82EB)

baf20000 baf2e100 usbhub usbhub.sys Wed Aug 04 08:08:40 2004 (41107D68)

baf30000 baf39480 NDProxy NDProxy.SYS Fri Aug 17 22:55:30 2001 (3B7D84C2)

baf70000 baf79f00 termdd termdd.sys Wed Aug 04 07:58:52 2004 (41107B1C)

baf80000 baf88900 msgpc msgpc.sys Wed Aug 04 08:04:11 2004 (41107C5B)

bafd4000 bafd7c80 mssmbios mssmbios.sys Wed Aug 04 08:07:47 2004 (41107D33)

bf800000 bf9c0400 win32k win32k.sys Wed Aug 04 08:17:30 2004 (41107F7A)

bf9c1000 bf9d2580 dxg dxg.sys Wed Aug 04 08:00:51 2004 (41107B93)

bf9d3000 bfa21000 ati2dvag ati2dvag.dll Wed Jun 25 23:40:43 2003 (3EFA16DB)

bfa21000 bfb2a320 ati3duag ati3duag.dll Wed Jun 25 23:08:55 2003 (3EFA0F67)

f740a000 f7424580 Mup Mup.sys Wed Aug 04 08:15:20 2004 (41107EF8)

f7425000 f7451a80 NDIS NDIS.sys Wed Aug 04 08:14:27 2004 (41107EC3)

f7452000 f7468780 KSecDD KSecDD.sys Wed Aug 04 07:59:45 2004 (41107B51)

f7469000 f747af00 sr sr.sys Wed Aug 04 08:06:22 2004 (41107CDE)

f747b000 f7499780 fltMgr fltMgr.sys Wed Aug 04 08:01:17 2004 (41107BAD)

f749a000 f74b1480 atapi atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)

f74b2000 f74d7a80 dmio dmio.sys Wed Aug 04 08:07:13 2004 (41107D11)

f74d8000 f74f6b80 ftdisk ftdisk.sys Fri Aug 17 22:52:41 2001 (3B7D8419)

f74f7000 f7502d00 raspptp raspptp.sys Wed Aug 04 08:14:26 2004 (41107EC2)

f7507000 f7511200 raspppoe raspppoe.sys Wed Aug 04 08:05:06 2004 (41107C92)

f7517000 f7523880 rasl2tp rasl2tp.sys Wed Aug 04 08:14:21 2004 (41107EBD)

f7527000 f7535380 redbook redbook.sys Wed Aug 04 07:59:34 2004 (41107B46)

f7537000 f7543180 cdrom cdrom.sys Wed Aug 04 07:59:52 2004 (41107B58)

f7547000 f7551380 imapi imapi.sys Wed Aug 04 08:00:12 2004 (41107B6C)

f7557000 f7564180 i8042prt i8042prt.sys Wed Aug 04 08:14:36 2004 (41107ECC)

f7567000 f7575b80 drmk drmk.sys Wed Aug 04 08:07:54 2004 (41107D3A)

f7577000 f7586180 nic1394 nic1394.sys Wed Aug 04 07:58:28 2004 (41107B04)

f7587000 f7596900 Cdfs Cdfs.SYS Wed Aug 04 08:14:09 2004 (41107EB1)

f7597000 f75a7c80 pci pci.sys Wed Aug 04 08:07:45 2004 (41107D31)

f75a8000 f75d6000 ACPI ACPI.sys Wed Aug 04 08:07:35 2004 (41107D27)

f75f7000 f75ffd00 isapnp isapnp.sys Fri Aug 17 22:58:01 2001 (3B7D8559)

f7607000 f7615e80 ohci1394 ohci1394.sys Wed Aug 04 08:10:05 2004 (41107DBD)

f7617000 f7624000 1394BUS 1394BUS.SYS Wed Aug 04 08:10:03 2004 (41107DBB)

f7627000 f7631500 MountMgr MountMgr.sys Wed Aug 04 07:58:29 2004 (41107B05)

f7637000 f7644080 VolSnap VolSnap.sys Wed Aug 04 08:00:14 2004 (41107B6E)

f7647000 f764fe00 disk disk.sys Wed Aug 04 07:59:53 2004 (41107B59)

f7657000 f7663200 CLASSPNP CLASSPNP.SYS Wed Aug 04 08:14:26 2004 (41107EC2)

f7667000 f7671580 agp440 agp440.sys Wed Aug 04 08:07:40 2004 (41107D2C)

f7697000 f769f700 netbios netbios.sys Wed Aug 04 08:03:19 2004 (41107C27)

f76a7000 f76af700 wanarp wanarp.sys Wed Aug 04 08:04:57 2004 (41107C89)

f76b7000 f76c5d80 arp1394 arp1394.sys Wed Aug 04 07:58:28 2004 (41107B04)

f76c7000 f76cf900 Fips Fips.SYS Sat Aug 18 03:31:49 2001 (3B7DC585)

f76d7000 f76e0400 avipbb avipbb.sys Mon Mar 19 17:41:09 2007 (45FEBD25)

f76e7000 f76f0d00 intelppm intelppm.sys Wed Aug 04 07:59:19 2004 (41107B37)

f7707000 f770d200 PCIIDEX PCIIDEX.SYS Wed Aug 04 07:59:40 2004 (41107B4C)

f770f000 f7713900 PartMgr PartMgr.sys Sat Aug 18 03:32:23 2001 (3B7DC5A7)

f775f000 f7764000 usbuhci usbuhci.sys Wed Aug 04 08:08:34 2004 (41107D62)

f7767000 f776d800 usbehci usbehci.sys Wed Aug 04 08:08:34 2004 (41107D62)

f776f000 f7776320 Jula Jula.sys Tue Jul 05 10:27:14 2005 (42CA4462)

f7777000 f777d200 kbdclass kbdclass.sys Wed Aug 04 07:58:32 2004 (41107B08)

f777f000 f7784c00 mouclass mouclass.sys Wed Aug 04 07:58:32 2004 (41107B08)

f7787000 f7788000 fdc fdc.sys unavailable (00000000)

f778f000 f7793880 TDI TDI.SYS Wed Aug 04 08:07:47 2004 (41107D33)

f7797000 f779b580 ptilink ptilink.sys Fri Aug 17 22:49:53 2001 (3B7D8371)

f779f000 f77a3080 raspti raspti.sys Fri Aug 17 22:55:32 2001 (3B7D84C4)

f77af000 f77b4960 JulaWdm JulaWdm.sys Tue Jul 05 10:27:34 2005 (42CA4476)

f77bf000 f77c4000 flpydisk flpydisk.sys Wed Aug 04 07:59:24 2004 (41107B3C)

f77cf000 f77d4200 vga vga.sys Wed Aug 04 08:07:06 2004 (41107D0A)

f77d7000 f77dba80 Msfs Msfs.SYS Wed Aug 04 08:00:37 2004 (41107B85)

f77df000 f77e6880 Npfs Npfs.SYS Wed Aug 04 08:00:38 2004 (41107B86)

f77ef000 f77f4880 ssmdrv ssmdrv.sys Wed Feb 28 16:43:23 2007 (45E5A31B)

f77ff000 f7803500 watchdog watchdog.sys Wed Aug 04 08:07:32 2004 (41107D24)

f7897000 f789a000 BOOTVID BOOTVID.dll Fri Aug 17 22:49:09 2001 (3B7D8345)

f7923000 f7925280 rasacd rasacd.sys Fri Aug 17 22:55:39 2001 (3B7D84CB)

f793b000 f793d580 ndistapi ndistapi.sys Fri Aug 17 22:55:29 2001 (3B7D84C1)

f7987000 f7988b80 kdcom kdcom.dll Fri Aug 17 22:49:10 2001 (3B7D8346)

f7989000 f798a100 WMILIB WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)

f798b000 f798c580 intelide intelide.sys Wed Aug 04 07:59:40 2004 (41107B4C)

f798d000 f798e700 dmload dmload.sys Fri Aug 17 22:58:15 2001 (3B7D8567)

f799d000 f799e100 swenum swenum.sys Wed Aug 04 07:58:41 2004 (41107B11)

f799f000 f79a0280 USBD USBD.SYS Fri Aug 17 23:02:58 2001 (3B7D8682)

f79af000 f79b0f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 22:49:37 2001 (3B7D8361)

f79b1000 f79b2080 Beep Beep.SYS Fri Aug 17 22:47:33 2001 (3B7D82E5)

f79b3000 f79b4080 mnmdd mnmdd.SYS Fri Aug 17 22:57:28 2001 (3B7D8538)

f79b5000 f79b6080 RDPCDD RDPCDD.sys Fri Aug 17 22:46:56 2001 (3B7D82C0)

f79b7000 f79b8800 avgio avgio.sys Thu Feb 22 15:57:32 2007 (45DDAF5C)

f79bd000 f79be100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)

f79d7000 f79d8b00 ParVdm ParVdm.SYS Fri Aug 17 22:49:49 2001 (3B7D836D)

f7a4f000 f7a4fd00 pciide pciide.sys Fri Aug 17 22:51:49 2001 (3B7D83E5)

f7a75000 f7a75d00 dxgthk dxgthk.sys Fri Aug 17 22:53:12 2001 (3B7D8438)

f7a7b000 f7a7bc00 audstub audstub.sys Fri Aug 17 22:59:40 2001 (3B7D85BC)

f7b52000 f7bde480 Ntfs Ntfs.sys Wed Aug 04 08:15:06 2004 (41107EEA)



Unloaded modules:

ba9c3000 ba9c4000 drmkaud.sys

Timestamp: unavailable (00000000)

Checksum: 00000000

a5cf1000 a5d1b000 kmixer.sys

Timestamp: unavailable (00000000)

Checksum: 00000000

a602d000 a603a000 DMusic.sys

Timestamp: unavailable (00000000)

Checksum: 00000000

a5d1b000 a5d3e000 aec.sys

Timestamp: unavailable (00000000)

Checksum: 00000000

a5df3000 a5e01000 swmidi.sys

Timestamp: unavailable (00000000)

Checksum: 00000000

a5f46000 a5f48000 splitter.sys

Timestamp: unavailable (00000000)

Checksum: 00000000

a64d7000 a64e8000 serial.sys

Timestamp: unavailable (00000000)

Checksum: 00000000

f77c7000 f77cc000 Cdaudio.SYS

Timestamp: unavailable (00000000)

Checksum: 00000000

f791f000 f7922000 Sfloppy.SYS

Timestamp: unavailable (00000000)

Checksum: 00000000

Closing open log file c:\debuglog.txt

 

Opened log file 'c:\debuglog.txt'



Microsoft (R) Windows Debugger Version 6.6.0007.5

Copyright (c) Microsoft Corporation. All rights reserved.





Loading Dump File [C:\WINDOWS\Minidump\Mini081707-02.dmp]

Mini Kernel Dump File: Only registers and stack trace are available



Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers

Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible

Product: WinNt, suite: TerminalServer SingleUserTS

Built by: 2600.xpsp_sp2_rtm.040803-2158

Kernel base = 0x804d7000 PsLoadedModuleList = 0x805644a0

Debug session time: Fri Aug 17 16:55:53.531 2007 (GMT+2)

System Uptime: 0 days 0:00:32.234

Loading Kernel Symbols

................................................................................................................

Loading User Symbols

Loading unloaded module list

...

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************



Use !analyze -v to get detailed debugging information.



BugCheck 19, {20, e12a4000, e12a4180, c300400}



Probably caused by : sysaudio.sys ( sysaudio!operator delete+2c )



Followup: MachineOwner

---------



1: kd> !analyze -v;r;kv;lmtn;.logclose;q

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************



BAD_POOL_HEADER (19)

The pool is already corrupt at the time of the current request.

This may or may not be due to the caller.

The internal pool links must be walked to figure out a possible cause of

the problem, and then special pool applied to the suspect tags or the driver

verifier to a suspect driver.

Arguments:

Arg1: 00000020, a pool block header size is corrupt.

Arg2: e12a4000, The pool entry we were looking for within the page.

Arg3: e12a4180, The next pool entry.

Arg4: 0c300400, (reserved)



Debugging Details:

------------------





OVERLAPPED_MODULE: Address regions for 'rdbss' and 'serial.sys' overlap



BUGCHECK_STR: 0x19_20



POOL_ADDRESS: e12a4000



CUSTOMER_CRASH_COUNT: 2



DEFAULT_BUCKET_ID: DRIVER_FAULT



PROCESS_NAME: explorer.exe



LAST_CONTROL_TRANSFER: from 80552fc8 to 80537832



STACK_TEXT:

a5f8c968 80552fc8 00000019 00000020 e12a4000 nt!KeBugCheckEx+0x1b

a5f8c9b8 a5f3d3bd e12a4008 00000000 a5f8c9ec nt!ExFreePoolWithTag+0x2c1

a5f8c9c8 a5f408f7 e12a4010 e11f21d8 896a1860 sysaudio!operator delete+0x2c

a5f8c9d8 a5f40ae0 e11f21d8 a5f3d4b9 e11dcd18 sysaudio!CGraphNodeInstance:estroySysAudioTopology+0xe

a5f8c9e0 a5f3d4b9 e11dcd18 a5f8ca04 a5f3f089 sysaudio!CGraphNodeInstance::~CGraphNodeInstance+0x39

a5f8c9ec a5f3f089 00000001 e11dcd18 a5f3f055 sysaudio!CGraphNodeInstance::`scalar deleting destructor'+0xd

a5f8c9f8 a5f3f055 8957b4b0 a5f8ca14 a5f3f0d0 sysaudio!CFilterInstance::~CFilterInstance+0x1b

a5f8ca04 a5f3f0d0 00000001 896d6b10 a5f8ca24 sysaudio!CFilterInstance::`scalar deleting destructor'+0xd

a5f8ca14 ba926737 897be3b8 8957b4b0 a5f8ca6c sysaudio!CFilterInstance::FilterDispatchClose+0x26

a5f8ca24 804e19ee 897be3b8 8957b4b0 8957b4b0 ks!DispatchClose+0x32

a5f8ca34 8057e648 896a1848 00000000 00000000 nt!IopfCallDriver+0x31

a5f8ca6c 8056e78f 006a1860 00000000 896a1848 nt!IopDeleteFile+0x132

a5f8ca88 804e1f77 896a1860 00000000 000003dc nt!ObpRemoveObjectRoutine+0xdf

a5f8caa0 80570dde 89548be0 e120d230 895aa3c8 nt!ObfDereferenceObject+0x4c

a5f8cab8 80570cfc e120d230 896a1860 000003dc nt!ObpCloseHandleTableEntry+0x155

a5f8cb00 80570d46 000003dc 00000001 00000000 nt!ObpCloseHandle+0x87

a5f8cb14 a5e45b88 000003dc 00000001 e184c340 nt!NtClose+0x1d

a5f8cbcc a5e46447 891d7000 00000001 e17f0b70 wdmaud!InitializeGetNumDevs+0x4e2

a5f8cbf0 a5e46387 891d7000 e184c340 00000001 wdmaud!ProcessDevNodeListItem+0x38

a5f8cc18 a5e44bfa 891d7000 89528b38 00000001 wdmaud!AddDevNode+0x10c

a5f8cc40 804e19ee 00000000 891d7000 80704410 wdmaud!SoundDispatch+0x142

a5f8cc50 8057184c 895ba09c 89532e00 895ba008 nt!IopfCallDriver+0x31

a5f8cc64 80582cef 896d8f10 895ba008 89532e00 nt!IopSynchronousServiceTail+0x60

a5f8cd00 8058ecc3 000003d0 000003c8 00000000 nt!IopXxxControlFile+0x5ef

a5f8cd34 804ddf0f 000003d0 000003c8 00000000 nt!NtDeviceIoControlFile+0x2a

a5f8cd34 7c91eb94 000003d0 000003c8 00000000 nt!KiFastCallEntry+0xfc

WARNING: Frame IP not in any known module. Following frames may be wrong.

00f8f9e4 00000000 00000000 00000000 00000000 0x7c91eb94





STACK_COMMAND: kb



FOLLOWUP_IP:

sysaudio!operator delete+2c

a5f3d3bd 5d pop ebp



SYMBOL_STACK_INDEX: 2



SYMBOL_NAME: sysaudio!operator delete+2c



FOLLOWUP_NAME: MachineOwner



MODULE_NAME: sysaudio



IMAGE_NAME: sysaudio.sys



DEBUG_FLR_IMAGE_TIMESTAMP: 41107f1a



FAILURE_BUCKET_ID: 0x19_20_sysaudio!operator_delete+2c



BUCKET_ID: 0x19_20_sysaudio!operator_delete+2c



Followup: MachineOwner

---------



eax=f771713c ebx=e12a4000 ecx=00000000 edx=000000f3 esi=e12a4000 edi=8957b4c0

eip=80537832 esp=a5f8c950 ebp=a5f8c968 iopl=0 nv up ei ng nz na pe nc

cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286

nt!KeBugCheckEx+0x1b:

80537832 5d pop ebp

ChildEBP RetAddr Args to Child

a5f8c968 80552fc8 00000019 00000020 e12a4000 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])

a5f8c9b8 a5f3d3bd e12a4008 00000000 a5f8c9ec nt!ExFreePoolWithTag+0x2c1 (FPO: [Non-Fpo])

a5f8c9c8 a5f408f7 e12a4010 e11f21d8 896a1860 sysaudio!operator delete+0x2c (FPO: [Non-Fpo])

a5f8c9d8 a5f40ae0 e11f21d8 a5f3d4b9 e11dcd18 sysaudio!CGraphNodeInstance:estroySysAudioTopology+0xe (FPO: [0,0,0])

a5f8c9e0 a5f3d4b9 e11dcd18 a5f8ca04 a5f3f089 sysaudio!CGraphNodeInstance::~CGraphNodeInstance+0x39 (FPO: [0,0,0])

a5f8c9ec a5f3f089 00000001 e11dcd18 a5f3f055 sysaudio!CGraphNodeInstance::`scalar deleting destructor'+0xd (FPO: [Non-Fpo])

a5f8c9f8 a5f3f055 8957b4b0 a5f8ca14 a5f3f0d0 sysaudio!CFilterInstance::~CFilterInstance+0x1b (FPO: [0,0,0])

a5f8ca04 a5f3f0d0 00000001 896d6b10 a5f8ca24 sysaudio!CFilterInstance::`scalar deleting destructor'+0xd (FPO: [Non-Fpo])

a5f8ca14 ba926737 897be3b8 8957b4b0 a5f8ca6c sysaudio!CFilterInstance::FilterDispatchClose+0x26 (FPO: [Non-Fpo])

a5f8ca24 804e19ee 897be3b8 8957b4b0 8957b4b0 ks!DispatchClose+0x32 (FPO: [Non-Fpo])

a5f8ca34 8057e648 896a1848 00000000 00000000 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

a5f8ca6c 8056e78f 006a1860 00000000 896a1848 nt!IopDeleteFile+0x132 (FPO: [Non-Fpo])

a5f8ca88 804e1f77 896a1860 00000000 000003dc nt!ObpRemoveObjectRoutine+0xdf (FPO: [Non-Fpo])

a5f8caa0 80570dde 89548be0 e120d230 895aa3c8 nt!ObfDereferenceObject+0x4c (FPO: [0,0,0])

a5f8cab8 80570cfc e120d230 896a1860 000003dc nt!ObpCloseHandleTableEntry+0x155 (FPO: [Non-Fpo])

a5f8cb00 80570d46 000003dc 00000001 00000000 nt!ObpCloseHandle+0x87 (FPO: [Non-Fpo])

a5f8cb14 a5e45b88 000003dc 00000001 e184c340 nt!NtClose+0x1d (FPO: [Non-Fpo])

a5f8cbcc a5e46447 891d7000 00000001 e17f0b70 wdmaud!InitializeGetNumDevs+0x4e2 (FPO: [Non-Fpo])

a5f8cbf0 a5e46387 891d7000 e184c340 00000001 wdmaud!ProcessDevNodeListItem+0x38 (FPO: [Non-Fpo])

a5f8cc18 a5e44bfa 891d7000 89528b38 00000001 wdmaud!AddDevNode+0x10c (FPO: [Non-Fpo])

start end module name

804d7000 80702000 nt ntkrnlmp.exe Wed Aug 04 08:18:18 2004 (41107FAA)

80702000 80722d00 hal halmacpi.dll Wed Aug 04 07:59:09 2004 (41107B2D)

a5df3000 a5e1cf00 kmixer kmixer.sys Wed Aug 04 08:07:46 2004 (41107D32)

a5e1d000 a5e3fc80 aec aec.sys Fri Feb 13 16:20:15 2004 (402CEB2F)

a5e40000 a5e54400 wdmaud wdmaud.sys Wed Aug 04 08:15:03 2004 (41107EE7)

a5f1d000 a5f2a400 swmidi swmidi.sys Fri Aug 17 23:00:42 2001 (3B7D85FA)

a5f3d000 a5f4bd80 sysaudio sysaudio.sys Wed Aug 04 08:15:54 2004 (41107F1A)

a600d000 a6020000 avgntflt avgntflt.sys Fri Apr 27 16:31:25 2007 (4632093D)

a6070000 a60c2180 srv srv.sys Wed Aug 04 08:14:44 2004 (41107ED4)

a62f3000 a62ffe80 DMusic DMusic.sys Wed Aug 04 08:07:37 2004 (41107D29)

a64d3000 a64ea480 dump_atapi dump_atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)

a6513000 a6581380 mrxsmb mrxsmb.sys Wed Aug 04 08:15:14 2004 (41107EF2)

a6582000 a65ad180 rdbss rdbss.sys Wed Aug 04 08:20:05 2004 (41108015)

a65ae000 a65cfd00 afd afd.sys Wed Aug 04 08:14:13 2004 (41107EB5)

a65d0000 a65f0f00 ipnat ipnat.sys Wed Aug 04 08:04:48 2004 (41107C80)

a65f1000 a6618c00 netbt netbt.sys Wed Aug 04 08:14:36 2004 (41107ECC)

a6619000 a6670a80 tcpip tcpip.sys Wed Aug 04 08:14:39 2004 (41107ECF)

a6671000 a6683400 ipsec ipsec.sys Wed Aug 04 08:14:27 2004 (41107EC3)

ba7dc000 ba80f200 update update.sys Wed Aug 04 07:58:32 2004 (41107B08)

ba810000 ba840100 rdpdr rdpdr.sys Wed Aug 04 08:01:10 2004 (41107BA6)

ba841000 ba851e00 psched psched.sys Wed Aug 04 08:04:16 2004 (41107C60)

ba852000 ba868680 ndiswan ndiswan.sys Wed Aug 04 08:14:30 2004 (41107EC6)

ba8e9000 ba8f8900 Cdfs Cdfs.SYS Wed Aug 04 08:14:09 2004 (41107EB1)

ba909000 ba91c980 parport parport.sys Wed Aug 04 07:59:04 2004 (41107B28)

ba91d000 ba93f680 ks ks.sys Wed Aug 04 08:15:20 2004 (41107EF8)

ba940000 ba963980 portcls portcls.sys Wed Aug 04 08:15:47 2004 (41107F13)

ba964000 ba986e80 USBPORT USBPORT.SYS Wed Aug 04 08:08:34 2004 (41107D62)

ba987000 ba99a780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 08:07:04 2004 (41107D08)

ba9ad000 ba9adc00 audstub audstub.sys Fri Aug 17 22:59:40 2001 (3B7D85BC)

ba9cd000 baa65000 ati2mtag ati2mtag.sys Wed Jun 25 23:40:11 2003 (3EFA16BB)

baf30000 baf3e100 usbhub usbhub.sys Wed Aug 04 08:08:40 2004 (41107D68)

baf40000 baf49480 NDProxy NDProxy.SYS Fri Aug 17 22:55:30 2001 (3B7D84C2)

baf80000 baf89f00 termdd termdd.sys Wed Aug 04 07:58:52 2004 (41107B1C)

baf94000 baf96280 rasacd rasacd.sys Fri Aug 17 22:55:39 2001 (3B7D84CB)

bafc4000 bafc7c80 mssmbios mssmbios.sys Wed Aug 04 08:07:47 2004 (41107D33)

bf800000 bf9c0400 win32k win32k.sys Wed Aug 04 08:17:30 2004 (41107F7A)

bf9c1000 bf9d2580 dxg dxg.sys Wed Aug 04 08:00:51 2004 (41107B93)

bf9d3000 bfa21000 ati2dvag ati2dvag.dll Wed Jun 25 23:40:43 2003 (3EFA16DB)

bfa21000 bfb2a320 ati3duag ati3duag.dll Wed Jun 25 23:08:55 2003 (3EFA0F67)

f740a000 f7424580 Mup Mup.sys Wed Aug 04 08:15:20 2004 (41107EF8)

f7425000 f7451a80 NDIS NDIS.sys Wed Aug 04 08:14:27 2004 (41107EC3)

f7452000 f7468780 KSecDD KSecDD.sys Wed Aug 04 07:59:45 2004 (41107B51)

f7469000 f747af00 sr sr.sys Wed Aug 04 08:06:22 2004 (41107CDE)

f747b000 f7499780 fltMgr fltMgr.sys Wed Aug 04 08:01:17 2004 (41107BAD)

f749a000 f74b1480 atapi atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)

f74b2000 f74d7a80 dmio dmio.sys Wed Aug 04 08:07:13 2004 (41107D11)

f74d8000 f74f6b80 ftdisk ftdisk.sys Fri Aug 17 22:52:41 2001 (3B7D8419)

f74f7000 f74ff900 msgpc msgpc.sys Wed Aug 04 08:04:11 2004 (41107C5B)

f7507000 f7512d00 raspptp raspptp.sys Wed Aug 04 08:14:26 2004 (41107EC2)

f7517000 f7521200 raspppoe raspppoe.sys Wed Aug 04 08:05:06 2004 (41107C92)

f7527000 f7533880 rasl2tp rasl2tp.sys Wed Aug 04 08:14:21 2004 (41107EBD)

f7537000 f7545380 redbook redbook.sys Wed Aug 04 07:59:34 2004 (41107B46)

f7547000 f7553180 cdrom cdrom.sys Wed Aug 04 07:59:52 2004 (41107B58)

f7557000 f7561380 imapi imapi.sys Wed Aug 04 08:00:12 2004 (41107B6C)

f7567000 f7574180 i8042prt i8042prt.sys Wed Aug 04 08:14:36 2004 (41107ECC)

f7577000 f7585b80 drmk drmk.sys Wed Aug 04 08:07:54 2004 (41107D3A)

f7587000 f7596180 nic1394 nic1394.sys Wed Aug 04 07:58:28 2004 (41107B04)

f7597000 f75a7c80 pci pci.sys Wed Aug 04 08:07:45 2004 (41107D31)

f75a8000 f75d6000 ACPI ACPI.sys Wed Aug 04 08:07:35 2004 (41107D27)

f75f7000 f75ffd00 isapnp isapnp.sys Fri Aug 17 22:58:01 2001 (3B7D8559)

f7607000 f7615e80 ohci1394 ohci1394.sys Wed Aug 04 08:10:05 2004 (41107DBD)

f7617000 f7624000 1394BUS 1394BUS.SYS Wed Aug 04 08:10:03 2004 (41107DBB)

f7627000 f7631500 MountMgr MountMgr.sys Wed Aug 04 07:58:29 2004 (41107B05)

f7637000 f7644080 VolSnap VolSnap.sys Wed Aug 04 08:00:14 2004 (41107B6E)

f7647000 f764fe00 disk disk.sys Wed Aug 04 07:59:53 2004 (41107B59)

f7657000 f7663200 CLASSPNP CLASSPNP.SYS Wed Aug 04 08:14:26 2004 (41107EC2)

f7667000 f7671580 agp440 agp440.sys Wed Aug 04 08:07:40 2004 (41107D2C)

f76a7000 f76af700 wanarp wanarp.sys Wed Aug 04 08:04:57 2004 (41107C89)

f76b7000 f76bf700 netbios netbios.sys Wed Aug 04 08:03:19 2004 (41107C27)

f76c7000 f76d5d80 arp1394 arp1394.sys Wed Aug 04 07:58:28 2004 (41107B04)

f76d7000 f76e0d00 intelppm intelppm.sys Wed Aug 04 07:59:19 2004 (41107B37)

f76e7000 f76ef900 Fips Fips.SYS Sat Aug 18 03:31:49 2001 (3B7DC585)

f76f7000 f7700400 avipbb avipbb.sys Mon Mar 19 17:41:09 2007 (45FEBD25)

f7707000 f770d200 PCIIDEX PCIIDEX.SYS Wed Aug 04 07:59:40 2004 (41107B4C)

f770f000 f7713900 PartMgr PartMgr.sys Sat Aug 18 03:32:23 2001 (3B7DC5A7)

f775f000 f7764000 usbuhci usbuhci.sys Wed Aug 04 08:08:34 2004 (41107D62)

f7767000 f776d800 usbehci usbehci.sys Wed Aug 04 08:08:34 2004 (41107D62)

f776f000 f7776320 Jula Jula.sys Tue Jul 05 10:27:14 2005 (42CA4462)

f7777000 f777d200 kbdclass kbdclass.sys Wed Aug 04 07:58:32 2004 (41107B08)

f777f000 f7784c00 mouclass mouclass.sys Wed Aug 04 07:58:32 2004 (41107B08)

f7787000 f7788000 fdc fdc.sys unavailable (00000000)

f778f000 f7793880 TDI TDI.SYS Wed Aug 04 08:07:47 2004 (41107D33)

f779f000 f77a3580 ptilink ptilink.sys Fri Aug 17 22:49:53 2001 (3B7D8371)

f77a7000 f77ab080 raspti raspti.sys Fri Aug 17 22:55:32 2001 (3B7D84C4)

f77b7000 f77bc960 JulaWdm JulaWdm.sys Tue Jul 05 10:27:34 2005 (42CA4476)

f77cf000 f77d4000 flpydisk flpydisk.sys Wed Aug 04 07:59:24 2004 (41107B3C)

f77df000 f77e4200 vga vga.sys Wed Aug 04 08:07:06 2004 (41107D0A)

f77e7000 f77eba80 Msfs Msfs.SYS Wed Aug 04 08:00:37 2004 (41107B85)

f77ef000 f77f6880 Npfs Npfs.SYS Wed Aug 04 08:00:38 2004 (41107B86)

f77f7000 f77fc880 ssmdrv ssmdrv.sys Wed Feb 28 16:43:23 2007 (45E5A31B)

f7807000 f780b500 watchdog watchdog.sys Wed Aug 04 08:07:32 2004 (41107D24)

f7897000 f789a000 BOOTVID BOOTVID.dll Fri Aug 17 22:49:09 2001 (3B7D8345)

f792b000 f792d900 Dxapi Dxapi.sys Fri Aug 17 22:53:19 2001 (3B7D843F)

f793b000 f793d580 ndistapi ndistapi.sys Fri Aug 17 22:55:29 2001 (3B7D84C1)

f7987000 f7988b80 kdcom kdcom.dll Fri Aug 17 22:49:10 2001 (3B7D8346)

f7989000 f798a100 WMILIB WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)

f798b000 f798c580 intelide intelide.sys Wed Aug 04 07:59:40 2004 (41107B4C)

f798d000 f798e700 dmload dmload.sys Fri Aug 17 22:58:15 2001 (3B7D8567)

f7999000 f799a100 swenum swenum.sys Wed Aug 04 07:58:41 2004 (41107B11)

f799b000 f799c280 USBD USBD.SYS Fri Aug 17 23:02:58 2001 (3B7D8682)

f79a7000 f79a8f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 22:49:37 2001 (3B7D8361)

f79a9000 f79aa080 Beep Beep.SYS Fri Aug 17 22:47:33 2001 (3B7D82E5)

f79ab000 f79ac080 mnmdd mnmdd.SYS Fri Aug 17 22:57:28 2001 (3B7D8538)

f79ad000 f79ae080 RDPCDD RDPCDD.sys Fri Aug 17 22:46:56 2001 (3B7D82C0)

f79af000 f79b0800 avgio avgio.sys Thu Feb 22 15:57:32 2007 (45DDAF5C)

f79bf000 f79c0100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)

f79e3000 f79e4b00 ParVdm ParVdm.SYS Fri Aug 17 22:49:49 2001 (3B7D836D)

f79fd000 f79fe900 splitter splitter.sys Wed Aug 04 08:07:46 2004 (41107D32)

f7a4f000 f7a4fd00 pciide pciide.sys Fri Aug 17 22:51:49 2001 (3B7D83E5)

f7a73000 f7a73b80 drmkaud drmkaud.sys Wed Aug 04 08:07:56 2004 (41107D3C)

f7a79000 f7a79b80 Null Null.SYS Fri Aug 17 22:47:39 2001 (3B7D82EB)

f7ab2000 f7ab2d00 dxgthk dxgthk.sys Fri Aug 17 22:53:12 2001 (3B7D8438)

f7b52000 f7bde480 Ntfs Ntfs.sys Wed Aug 04 08:15:06 2004 (41107EEA)



Unloaded modules:

a659d000 a65ae000 serial.sys

Timestamp: unavailable (00000000)

Checksum: 00000000

f77d7000 f77dc000 Cdaudio.SYS

Timestamp: unavailable (00000000)

Checksum: 00000000

baf98000 baf9b000 Sfloppy.SYS

Timestamp: unavailable (00000000)

Checksum: 00000000

Closing open log file c:\debuglog.txt

 

Welcome to WindowsBBS Danilum

Try going into the BIOS (when it says press __ to enter setup ... usually F2 or Delete) and select the option to load setup defaults. Save and exit.

Does your computer have integrated sound or a removable sound card? If it's a card, try removing it. If integrated, see if it can be disabled in the BIOS. Those dumps suggest a possible problem with it.

 

Hi and welcome to the BBS,

I suggest you pull out and reseat the cables to the drives, at the back of the drive and the motherboard.

Since you have little to lose, redo the format, this time though, remove the drive partitions (delete the drive).

Open the case, start the computer and check all the fans are spinning freely (also on the graphics card, if it has one, and look from the back to check the power supply unit fan).

Check for dust build-up around fans and vents.

Use the memory diagnostics in my signature, set it up to run for several hours.

If you go into the BIOS configuration settings at startup, you should find readouts for temperature and voltage. You can post them here if you like.

Matt

 

Noahdfear and Mattman, thanks for the reply.
My computer has both an integrated audio interface and a pci audio card, the integrated one is disabled in the bios since I always use the other one (much better). And I use it a lot because I work often with audo and video editing.
Anyway I'll try to take it off and look what's happening.
I did the cables thing, all the fans are spinning correctly and few days ago I've tested the ram with memtest86+ for several hours without getting any error.
I'll try the software you suggested.
The CPU temperature is around 53°C and the mobo 32°C, I forgot to sign the voltage, I'm going to do it, format the drive, reinstalling XP and let you know.
Thank you so much
Danilo

ps: could it be a problem with the power supply that sometimes has little "blackouts" and the pc restarts???

 

Here are the voltages, they look to be correct:
cpu core -> 1,55V
+3.3V -> 3.28V
+5V -> 5.08V
+12V - > 11.98V

 

Well, I swapped out the pci audiocard (I can live without it a coulple of days) and loaded the default bios settings.
I've also tested the ram with the Microsoft tool suggested by Mattman, 6 full passes in the extended mode (about 4 hours of testing) and no errors at all.
But now comes the "funny" part... before formatting I wanted to save some data, or at least try to do it, so I went with the recovery installation instead of a new one. Doing this let the pc restart without the locking black screen and I was "lucky" enough to get two BSOD...
So, before going with the format and reinstallation, I'm going to post both the minidumps, maybe they can help... I hope so!!!
Thanks
Danilo

 

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini081907-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt
Built by: 2600.xpsp_sp2_rtm.040803-2158
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805644a0
Debug session time: Sun Aug 19 11:43:51.468 2007 (GMT+2)
System Uptime: 0 days 0:01:48.163
Loading Kernel Symbols
...........................................................................................................
Loading User Symbols
Loading unloaded module list
..
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {0, 2, 1, 85f6c021}

Probably caused by : ntkrnlmp.exe ( nt!KiTrap0E+238 )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000000, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 85f6c021, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: 00000000

CURRENT_IRQL: 2

FAULTING_IP:
+ffffffff85f6c021
85f6c021 ?? ???

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xD1

TRAP_FRAME: a6be6b2c -- (.trap ffffffffa6be6b2c)
.trap ffffffffa6be6b2c
ErrCode = 00000002
eax=00000000 ebx=c0003a74 ecx=c0003a74 edx=80568e58 esi=c030000c edi=00e9d000
eip=85f6c021 esp=a6be6ba0 ebp=a6b66c48 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
85f6c021 ?? ???
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 85f6c021 to 804e106f

STACK_TEXT:
a6be6b2c 85f6c021 badb0d00 80568e58 a6be6b4c nt!KiTrap0E+0x238
WARNING: Frame IP not in any known module. Following frames may be wrong.
a6be6b9c 00000000 00000000 00000000 00000001 0x85f6c021


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!KiTrap0E+238
804e106f f7457000000200 test dword ptr [ebp+70h],20000h

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!KiTrap0E+238

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 41107faa

FAILURE_BUCKET_ID: 0xD1_W_nt!KiTrap0E+238

BUCKET_ID: 0xD1_W_nt!KiTrap0E+238

Followup: MachineOwner
---------

eax=f7af313c ebx=00000002 ecx=00000000 edx=40000000 esi=85f6c021 edi=00000000
eip=804e106f esp=a6be6b14 ebp=a6be6b2c iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x238:
804e106f f7457000000200 test dword ptr [ebp+70h],20000h ss:0010:a6be6b9c=00010246
ChildEBP RetAddr Args to Child
a6be6b2c 85f6c021 badb0d00 80568e58 a6be6b4c nt!KiTrap0E+0x238 (FPO: [0,0] TrapFrame @ a6be6b2c)
WARNING: Frame IP not in any known module. Following frames may be wrong.
a6be6b9c 00000000 00000000 00000000 00000001 0x85f6c021
start end module name
804d7000 80702000 nt ntkrnlmp.exe Wed Aug 04 08:18:18 2004 (41107FAA)
80702000 80722d00 hal halmacpi.dll Wed Aug 04 07:59:09 2004 (41107B2D)
a62ac000 a62bf000 avgntflt avgntflt.sys Fri Apr 27 16:31:25 2007 (4632093D)
a6887000 a68d9180 srv srv.sys Wed Aug 04 08:14:44 2004 (41107ED4)
a69f2000 a6a1e400 mrxdav mrxdav.sys Wed Aug 04 08:00:49 2004 (41107B91)
a6d67000 a6d7e480 dump_atapi dump_atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
a6e1f000 a6e8d380 mrxsmb mrxsmb.sys Wed Aug 04 08:15:14 2004 (41107EF2)
a6e8e000 a6eb9180 rdbss rdbss.sys Wed Aug 04 08:20:05 2004 (41108015)
a6ee2000 a6f03d00 afd afd.sys Wed Aug 04 08:14:13 2004 (41107EB5)
a6f04000 a6f24f00 ipnat ipnat.sys Wed Aug 04 08:04:48 2004 (41107C80)
a6f25000 a6f4cc00 netbt netbt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
a6f4d000 a6fa4a80 tcpip tcpip.sys Wed Aug 04 08:14:39 2004 (41107ECF)
a6fa5000 a6fb7400 ipsec ipsec.sys Wed Aug 04 08:14:27 2004 (41107EC3)
bf800000 bf9c0400 win32k win32k.sys Wed Aug 04 08:17:30 2004 (41107F7A)
bf9c1000 bf9d2580 dxg dxg.sys Wed Aug 04 08:00:51 2004 (41107B93)
bf9d3000 bfa09000 ati2dvag ati2dvag.dll Fri Aug 20 00:38:32 2004 (41252BE8)
bfa09000 bfa41000 ati2cqag ati2cqag.dll Fri Aug 20 00:38:30 2004 (41252BE6)
bfa41000 bfc0e2e0 ati3duag ati3duag.dll Fri Aug 20 00:38:35 2004 (41252BEB)
bfc0f000 bfc8d2a0 ativvaxx ativvaxx.dll Fri Aug 20 00:38:39 2004 (41252BEF)
f72be000 f72f1200 update update.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7396000 f7398900 Dxapi Dxapi.sys Fri Aug 17 22:53:19 2001 (3B7D843F)
f73ba000 f73ea100 rdpdr rdpdr.sys Wed Aug 04 08:01:10 2004 (41107BA6)
f73eb000 f73fbe00 psched psched.sys Wed Aug 04 08:04:16 2004 (41107C60)
f73fc000 f7412680 ndiswan ndiswan.sys Wed Aug 04 08:14:30 2004 (41107EC6)
f7413000 f7435680 ks ks.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f7436000 f7449980 parport parport.sys Wed Aug 04 07:59:04 2004 (41107B28)
f744a000 f745a280 serial serial.sys Wed Aug 04 08:15:51 2004 (41107F17)
f745b000 f747ef80 EL2K_XP EL2K_XP.sys Wed Jun 04 00:48:12 2003 (3EDD25AC)
f747f000 f74a1e80 USBPORT USBPORT.SYS Wed Aug 04 08:08:34 2004 (41107D62)
f74a2000 f74b5780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 08:07:04 2004 (41107D08)
f74b6000 f757d000 ati2mtag ati2mtag.sys Fri May 28 22:26:05 2004 (40B7A05D)
f7581000 f7583280 rasacd rasacd.sys Fri Aug 17 22:55:39 2001 (3B7D84CB)
f75c5000 f75df580 Mup Mup.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f75e0000 f760ca80 NDIS NDIS.sys Wed Aug 04 08:14:27 2004 (41107EC3)
f760d000 f7699480 Ntfs Ntfs.sys Wed Aug 04 08:15:06 2004 (41107EEA)
f769a000 f76b0780 KSecDD KSecDD.sys Wed Aug 04 07:59:45 2004 (41107B51)
f76b1000 f7774600 dmboot dmboot.sys Wed Aug 04 08:07:13 2004 (41107D11)
f7775000 f7786f00 sr sr.sys Wed Aug 04 08:06:22 2004 (41107CDE)
f7787000 f77a5780 fltMgr fltMgr.sys Wed Aug 04 08:01:17 2004 (41107BAD)
f77a6000 f77bd480 atapi atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
f77be000 f77e3a80 dmio dmio.sys Wed Aug 04 08:07:13 2004 (41107D11)
f77e4000 f7802b80 ftdisk ftdisk.sys Fri Aug 17 22:52:41 2001 (3B7D8419)
f7803000 f7813c80 pci pci.sys Wed Aug 04 08:07:45 2004 (41107D31)
f7814000 f7842000 ACPI ACPI.sys Wed Aug 04 08:07:35 2004 (41107D27)
f7863000 f786bd00 isapnp isapnp.sys Fri Aug 17 22:58:01 2001 (3B7D8559)
f7873000 f7881e80 ohci1394 ohci1394.sys Wed Aug 04 08:10:05 2004 (41107DBD)
f7883000 f7890000 1394BUS 1394BUS.SYS Wed Aug 04 08:10:03 2004 (41107DBB)
f7893000 f789d500 MountMgr MountMgr.sys Wed Aug 04 07:58:29 2004 (41107B05)
f78a3000 f78b0080 VolSnap VolSnap.sys Wed Aug 04 08:00:14 2004 (41107B6E)
f78b3000 f78bbe00 disk disk.sys Wed Aug 04 07:59:53 2004 (41107B59)
f78c3000 f78cf200 CLASSPNP CLASSPNP.SYS Wed Aug 04 08:14:26 2004 (41107EC2)
f78d3000 f78dd580 agp440 agp440.sys Wed Aug 04 08:07:40 2004 (41107D2C)
f7903000 f790cd00 intelppm intelppm.sys Wed Aug 04 07:59:19 2004 (41107B37)
f7913000 f7922180 nic1394 nic1394.sys Wed Aug 04 07:58:28 2004 (41107B04)
f7923000 f7930180 i8042prt i8042prt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
f7933000 f793d380 imapi imapi.sys Wed Aug 04 08:00:12 2004 (41107B6C)
f7943000 f794f180 cdrom cdrom.sys Wed Aug 04 07:59:52 2004 (41107B58)
f7953000 f7961380 redbook redbook.sys Wed Aug 04 07:59:34 2004 (41107B46)
f7963000 f796f880 rasl2tp rasl2tp.sys Wed Aug 04 08:14:21 2004 (41107EBD)
f7973000 f797d200 raspppoe raspppoe.sys Wed Aug 04 08:05:06 2004 (41107C92)
f7983000 f798ed00 raspptp raspptp.sys Wed Aug 04 08:14:26 2004 (41107EC2)
f7993000 f799b900 msgpc msgpc.sys Wed Aug 04 08:04:11 2004 (41107C5B)
f79a3000 f79acf00 termdd termdd.sys Wed Aug 04 07:58:52 2004 (41107B1C)
f79e3000 f79ec480 NDProxy NDProxy.SYS Fri Aug 17 22:55:30 2001 (3B7D84C2)
f79f3000 f7a01100 usbhub usbhub.sys Wed Aug 04 08:08:40 2004 (41107D68)
f7a13000 f7a1b700 wanarp wanarp.sys Wed Aug 04 08:04:57 2004 (41107C89)
f7a23000 f7a31d80 arp1394 arp1394.sys Wed Aug 04 07:58:28 2004 (41107B04)
f7a33000 f7a3b700 netbios netbios.sys Wed Aug 04 08:03:19 2004 (41107C27)
f7a43000 f7a4b900 Fips Fips.SYS Sat Aug 18 03:31:49 2001 (3B7DC585)
f7a53000 f7a5d000 avipbb avipbb.sys unavailable (00000000)
f7a73000 f7a82900 Cdfs Cdfs.SYS Wed Aug 04 08:14:09 2004 (41107EB1)
f7ae3000 f7ae9200 PCIIDEX PCIIDEX.SYS Wed Aug 04 07:59:40 2004 (41107B4C)
f7aeb000 f7aef900 PartMgr PartMgr.sys Sat Aug 18 03:32:23 2001 (3B7DC5A7)
f7b23000 f7b28000 usbuhci usbuhci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f7b2b000 f7b31800 usbehci usbehci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f7b43000 f7b49200 kbdclass kbdclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7b4b000 f7b50c00 mouclass mouclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7b5b000 f7b61b00 fdc fdc.sys Wed Aug 04 07:59:25 2004 (41107B3D)
f7b8b000 f7b8f880 TDI TDI.SYS Wed Aug 04 08:07:47 2004 (41107D33)
f7b9b000 f7b9f580 ptilink ptilink.sys Fri Aug 17 22:49:53 2001 (3B7D8371)
f7bab000 f7baf080 raspti raspti.sys Fri Aug 17 22:55:32 2001 (3B7D84C4)
f7bbb000 f7bc0000 flpydisk flpydisk.sys Wed Aug 04 07:59:24 2004 (41107B3C)
f7bd3000 f7bd8200 vga vga.sys Wed Aug 04 08:07:06 2004 (41107D0A)
f7be3000 f7be7a80 Msfs Msfs.SYS Wed Aug 04 08:00:37 2004 (41107B85)
f7bf3000 f7bfa880 Npfs Npfs.SYS Wed Aug 04 08:00:38 2004 (41107B86)
f7c13000 f7c19000 ssmdrv ssmdrv.sys unavailable (00000000)
f7c43000 f7c47500 watchdog watchdog.sys Wed Aug 04 08:07:32 2004 (41107D24)
f7c73000 f7c76000 BOOTVID BOOTVID.dll Fri Aug 17 22:49:09 2001 (3B7D8345)
f7d03000 f7d06c80 serenum serenum.sys Wed Aug 04 07:59:06 2004 (41107B2A)
f7d1b000 f7d1d580 ndistapi ndistapi.sys Fri Aug 17 22:55:29 2001 (3B7D84C1)
f7d3f000 f7d42c80 mssmbios mssmbios.sys Wed Aug 04 08:07:47 2004 (41107D33)
f7d63000 f7d64b80 kdcom kdcom.dll Fri Aug 17 22:49:10 2001 (3B7D8346)
f7d65000 f7d66100 WMILIB WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f7d67000 f7d68580 intelide intelide.sys Wed Aug 04 07:59:40 2004 (41107B4C)
f7d69000 f7d6a700 dmload dmload.sys Fri Aug 17 22:58:15 2001 (3B7D8567)
f7d71000 f7d72100 swenum swenum.sys Wed Aug 04 07:58:41 2004 (41107B11)
f7d77000 f7d78280 USBD USBD.SYS Fri Aug 17 23:02:58 2001 (3B7D8682)
f7d7b000 f7d7cf00 Fs_Rec Fs_Rec.SYS Fri Aug 17 22:49:37 2001 (3B7D8361)
f7d7f000 f7d80080 Beep Beep.SYS Fri Aug 17 22:47:33 2001 (3B7D82E5)
f7d83000 f7d84080 mnmdd mnmdd.SYS Fri Aug 17 22:57:28 2001 (3B7D8538)
f7d87000 f7d88080 RDPCDD RDPCDD.sys Fri Aug 17 22:46:56 2001 (3B7D82C0)
f7d8b000 f7d8d000 avgio avgio.sys unavailable (00000000)
f7d8f000 f7d90100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f7dcf000 f7dd0b00 ParVdm ParVdm.SYS Fri Aug 17 22:49:49 2001 (3B7D836D)
f7e2b000 f7e2bd00 pciide pciide.sys Fri Aug 17 22:51:49 2001 (3B7D83E5)
f7ed1000 f7ed1c00 audstub audstub.sys Fri Aug 17 22:59:40 2001 (3B7D85BC)
f7efd000 f7efdb80 Null Null.SYS Fri Aug 17 22:47:39 2001 (3B7D82EB)
f7f8d000 f7f8dd00 dxgthk dxgthk.sys Fri Aug 17 22:53:12 2001 (3B7D8438)

Unloaded modules:
f7bcb000 f7bd0000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7589000 f758c000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini081907-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt
Built by: 2600.xpsp_sp2_rtm.040803-2158
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805644a0
Debug session time: Sun Aug 19 17:00:10.203 2007 (GMT+2)
System Uptime: 0 days 0:37:24.899
Loading Kernel Symbols
............................................................................................................
Loading User Symbols
Loading unloaded module list
..............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007F, {8, f7af3d70, 0, 0}

Probably caused by : mrxsmb.sys ( mrxsmb!MRxSmb_ControlGuids+44 )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 00000008, EXCEPTION_DOUBLE_FAULT
Arg2: f7af3d70
Arg3: 00000000
Arg4: 00000000

Debugging Details:
------------------


BUGCHECK_STR: 0x7f_8

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

LAST_CONTROL_TRANSFER: from 00000000 to 5c327264

SYMBOL_ON_RAW_STACK: 1

STACK_ADDR_RAW_STACK_SYMBOL: 17002000010004

STACK_COMMAND: dds A6D9D7EC-0x20 ; kb

STACK_TEXT:
a6d9d7cc 726d2e62
a6d9d7d0 6d735c78
a6d9d7d4 64656362
a6d9d7d8 00632e62
a6d9d7dc 90909090
a6d9d7e0 55ff8b90
a6d9d7e4 3d83ec8b
a6d9d7e8 a6d8cfcc mrxsmb!MRxSmb_ControlGuids+0x44
a6d9d7ec 758b5604
a6d9d7f0 85830f08
a6d9d7f4 57000103
a6d9d7f8 3966ff33
a6d9d7fc 1e76087e
a6d9d800 8bc7b70f
a6d9d804 8b188644
a6d9d808 03e183c8
a6d9d80c 1e744949
a6d9d810 9a840f49
a6d9d814 47000103
a6d9d818 087e3b66
a6d9d81c 46f6e272
a6d9d820 0f5f0212
a6d9d824 0103a585
a6d9d828 c25d5e00
a6d9d82c 7d830008
a6d9d830 e374000c
a6d9d834 010389e9
a6d9d838 90909000
a6d9d83c ff8b9090
a6d9d840 56ec8b55
a6d9d844 8b0c75ff
a6d9d848 76ff0875


FOLLOWUP_IP:
mrxsmb!MRxSmb_ControlGuids+44
a6d8cfcc ?? ???

SYMBOL_NAME: mrxsmb!MRxSmb_ControlGuids+44

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: mrxsmb

IMAGE_NAME: mrxsmb.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 41107ef2

FAILURE_BUCKET_ID: 0x7f_8_mrxsmb!MRxSmb_ControlGuids+44

BUCKET_ID: 0x7f_8_mrxsmb!MRxSmb_ControlGuids+44

Followup: MachineOwner
---------

eax=00000000 ebx=c0011ad4 ecx=c0011ad4 edx=80568e58 esi=c0300044 edi=046b5000
eip=5c327264 esp=a6d9d5f8 ebp=a6d1d69c iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
5c327264 ?? ???
ChildEBP RetAddr Args to Child
WARNING: Frame IP not in any known module. Following frames may be wrong.
a6d9d5f4 00000000 90909090 55ff8b90 ec83ec8b 0x5c327264
start end module name
804d7000 80702000 nt ntkrnlmp.exe Wed Aug 04 08:18:18 2004 (41107FAA)
80702000 80722d00 hal halmacpi.dll Wed Aug 04 07:59:09 2004 (41107B2D)
a6377000 a639a000 Fastfat Fastfat.SYS Wed Aug 04 08:14:15 2004 (41107EB7)
a6502000 a6542380 HTTP HTTP.sys Wed Aug 04 08:00:09 2004 (41107B69)
a674b000 a675e000 avgntflt avgntflt.sys Fri Apr 27 16:31:25 2007 (4632093D)
a68ee000 a6940180 srv srv.sys Wed Aug 04 08:14:44 2004 (41107ED4)
a6aa9000 a6ad5400 mrxdav mrxdav.sys Wed Aug 04 08:00:49 2004 (41107B91)
a6d56000 a6d6d480 dump_atapi dump_atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
a6d6e000 a6ddc380 mrxsmb mrxsmb.sys Wed Aug 04 08:15:14 2004 (41107EF2)
a6ddd000 a6e08180 rdbss rdbss.sys Wed Aug 04 08:20:05 2004 (41108015)
a6ea9000 a6ecad00 afd afd.sys Wed Aug 04 08:14:13 2004 (41107EB5)
a6ef3000 a6f1ac00 netbt netbt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
a6f1b000 a6f3bf00 ipnat ipnat.sys Wed Aug 04 08:04:48 2004 (41107C80)
a6f3c000 a6f93a80 tcpip tcpip.sys Wed Aug 04 08:14:39 2004 (41107ECF)
a6f94000 a6fa6400 ipsec ipsec.sys Wed Aug 04 08:14:27 2004 (41107EC3)
a6feb000 a6fed900 Dxapi Dxapi.sys Fri Aug 17 22:53:19 2001 (3B7D843F)
bf800000 bf9c0400 win32k win32k.sys Wed Aug 04 08:17:30 2004 (41107F7A)
bf9c1000 bf9d2580 dxg dxg.sys Wed Aug 04 08:00:51 2004 (41107B93)
bf9d3000 bfa09000 ati2dvag ati2dvag.dll Fri Aug 20 00:38:32 2004 (41252BE8)
bfa09000 bfa41000 ati2cqag ati2cqag.dll Fri Aug 20 00:38:30 2004 (41252BE6)
bfa41000 bfc0e2e0 ati3duag ati3duag.dll Fri Aug 20 00:38:35 2004 (41252BEB)
bfc0f000 bfc8d2a0 ativvaxx ativvaxx.dll Fri Aug 20 00:38:39 2004 (41252BEF)
f736b000 f739e200 update update.sys Wed Aug 04 07:58:32 2004 (41107B08)
f747e000 f74ae100 rdpdr rdpdr.sys Wed Aug 04 08:01:10 2004 (41107BA6)
f74af000 f74bfe00 psched psched.sys Wed Aug 04 08:04:16 2004 (41107C60)
f74c0000 f74d6680 ndiswan ndiswan.sys Wed Aug 04 08:14:30 2004 (41107EC6)
f74d7000 f74f9680 ks ks.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f74fa000 f750d980 parport parport.sys Wed Aug 04 07:59:04 2004 (41107B28)
f750e000 f751e280 serial serial.sys Wed Aug 04 08:15:51 2004 (41107F17)
f751f000 f7542f80 EL2K_XP EL2K_XP.sys Wed Jun 04 00:48:12 2003 (3EDD25AC)
f7543000 f7565e80 USBPORT USBPORT.SYS Wed Aug 04 08:08:34 2004 (41107D62)
f7566000 f7579780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 08:07:04 2004 (41107D08)
f757a000 f7641000 ati2mtag ati2mtag.sys Fri May 28 22:26:05 2004 (40B7A05D)
f764d000 f764f280 rasacd rasacd.sys Fri Aug 17 22:55:39 2001 (3B7D84CB)
f7689000 f76a3580 Mup Mup.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f76a4000 f76d0a80 NDIS NDIS.sys Wed Aug 04 08:14:27 2004 (41107EC3)
f76d1000 f775d480 Ntfs Ntfs.sys Wed Aug 04 08:15:06 2004 (41107EEA)
f775e000 f7774780 KSecDD KSecDD.sys Wed Aug 04 07:59:45 2004 (41107B51)
f7775000 f7786f00 sr sr.sys Wed Aug 04 08:06:22 2004 (41107CDE)
f7787000 f77a5780 fltMgr fltMgr.sys Wed Aug 04 08:01:17 2004 (41107BAD)
f77a6000 f77bd480 atapi atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
f77be000 f77e3a80 dmio dmio.sys Wed Aug 04 08:07:13 2004 (41107D11)
f77e4000 f7802b80 ftdisk ftdisk.sys Fri Aug 17 22:52:41 2001 (3B7D8419)
f7803000 f7813c80 pci pci.sys Wed Aug 04 08:07:45 2004 (41107D31)
f7814000 f7842000 ACPI ACPI.sys Wed Aug 04 08:07:35 2004 (41107D27)
f7863000 f786bd00 isapnp isapnp.sys Fri Aug 17 22:58:01 2001 (3B7D8559)
f7873000 f7881e80 ohci1394 ohci1394.sys Wed Aug 04 08:10:05 2004 (41107DBD)
f7883000 f7890000 1394BUS 1394BUS.SYS Wed Aug 04 08:10:03 2004 (41107DBB)
f7893000 f789d500 MountMgr MountMgr.sys Wed Aug 04 07:58:29 2004 (41107B05)
f78a3000 f78b0080 VolSnap VolSnap.sys Wed Aug 04 08:00:14 2004 (41107B6E)
f78b3000 f78bbe00 disk disk.sys Wed Aug 04 07:59:53 2004 (41107B59)
f78c3000 f78cf200 CLASSPNP CLASSPNP.SYS Wed Aug 04 08:14:26 2004 (41107EC2)
f78d3000 f78dd580 agp440 agp440.sys Wed Aug 04 08:07:40 2004 (41107D2C)
f7923000 f7932900 Cdfs Cdfs.SYS Wed Aug 04 08:14:09 2004 (41107EB1)
f7943000 f794cd00 intelppm intelppm.sys Wed Aug 04 07:59:19 2004 (41107B37)
f7953000 f7962180 nic1394 nic1394.sys Wed Aug 04 07:58:28 2004 (41107B04)
f7963000 f7970180 i8042prt i8042prt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
f7973000 f797d380 imapi imapi.sys Wed Aug 04 08:00:12 2004 (41107B6C)
f7983000 f798f180 cdrom cdrom.sys Wed Aug 04 07:59:52 2004 (41107B58)
f7993000 f79a1380 redbook redbook.sys Wed Aug 04 07:59:34 2004 (41107B46)
f79a3000 f79af880 rasl2tp rasl2tp.sys Wed Aug 04 08:14:21 2004 (41107EBD)
f79b3000 f79bd200 raspppoe raspppoe.sys Wed Aug 04 08:05:06 2004 (41107C92)
f79c3000 f79ced00 raspptp raspptp.sys Wed Aug 04 08:14:26 2004 (41107EC2)
f79d3000 f79db900 msgpc msgpc.sys Wed Aug 04 08:04:11 2004 (41107C5B)
f79e3000 f79ecf00 termdd termdd.sys Wed Aug 04 07:58:52 2004 (41107B1C)
f7a23000 f7a2c480 NDProxy NDProxy.SYS Fri Aug 17 22:55:30 2001 (3B7D84C2)
f7a33000 f7a41100 usbhub usbhub.sys Wed Aug 04 08:08:40 2004 (41107D68)
f7a73000 f7a7b700 wanarp wanarp.sys Wed Aug 04 08:04:57 2004 (41107C89)
f7a83000 f7a91d80 arp1394 arp1394.sys Wed Aug 04 07:58:28 2004 (41107B04)
f7a93000 f7a9b700 netbios netbios.sys Wed Aug 04 08:03:19 2004 (41107C27)
f7aa3000 f7aab900 Fips Fips.SYS Sat Aug 18 03:31:49 2001 (3B7DC585)
f7ab3000 f7abd000 avipbb avipbb.sys unavailable (00000000)
f7ae3000 f7ae9200 PCIIDEX PCIIDEX.SYS Wed Aug 04 07:59:40 2004 (41107B4C)
f7aeb000 f7aef900 PartMgr PartMgr.sys Sat Aug 18 03:32:23 2001 (3B7DC5A7)
f7b33000 f7b38000 usbuhci usbuhci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f7b3b000 f7b41800 usbehci usbehci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f7b43000 f7b49200 kbdclass kbdclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7b4b000 f7b50c00 mouclass mouclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7b53000 f7b59b00 fdc fdc.sys Wed Aug 04 07:59:25 2004 (41107B3D)
f7b5b000 f7b5f880 TDI TDI.SYS Wed Aug 04 08:07:47 2004 (41107D33)
f7b63000 f7b67580 ptilink ptilink.sys Fri Aug 17 22:49:53 2001 (3B7D8371)
f7b6b000 f7b6f080 raspti raspti.sys Fri Aug 17 22:55:32 2001 (3B7D84C4)
f7b73000 f7b78000 flpydisk flpydisk.sys Wed Aug 04 07:59:24 2004 (41107B3C)
f7b83000 f7b88200 vga vga.sys Wed Aug 04 08:07:06 2004 (41107D0A)
f7b8b000 f7b8fa80 Msfs Msfs.SYS Wed Aug 04 08:00:37 2004 (41107B85)
f7b93000 f7b9a880 Npfs Npfs.SYS Wed Aug 04 08:00:38 2004 (41107B86)
f7b9b000 f7ba1000 ssmdrv ssmdrv.sys unavailable (00000000)
f7bbb000 f7bbf500 watchdog watchdog.sys Wed Aug 04 08:07:32 2004 (41107D24)
f7c73000 f7c76000 BOOTVID BOOTVID.dll Fri Aug 17 22:49:09 2001 (3B7D8345)
f7d1b000 f7d1ec80 serenum serenum.sys Wed Aug 04 07:59:06 2004 (41107B2A)
f7d23000 f7d25580 ndistapi ndistapi.sys Fri Aug 17 22:55:29 2001 (3B7D84C1)
f7d3f000 f7d42c80 mssmbios mssmbios.sys Wed Aug 04 08:07:47 2004 (41107D33)
f7d63000 f7d64b80 kdcom kdcom.dll Fri Aug 17 22:49:10 2001 (3B7D8346)
f7d65000 f7d66100 WMILIB WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f7d67000 f7d68580 intelide intelide.sys Wed Aug 04 07:59:40 2004 (41107B4C)
f7d69000 f7d6a700 dmload dmload.sys Fri Aug 17 22:58:15 2001 (3B7D8567)
f7d77000 f7d78100 swenum swenum.sys Wed Aug 04 07:58:41 2004 (41107B11)
f7d79000 f7d7a280 USBD USBD.SYS Fri Aug 17 23:02:58 2001 (3B7D8682)
f7d7b000 f7d7cf00 Fs_Rec Fs_Rec.SYS Fri Aug 17 22:49:37 2001 (3B7D8361)
f7d7d000 f7d7e080 Beep Beep.SYS Fri Aug 17 22:47:33 2001 (3B7D82E5)
f7d7f000 f7d80080 mnmdd mnmdd.SYS Fri Aug 17 22:57:28 2001 (3B7D8538)
f7d81000 f7d82080 RDPCDD RDPCDD.sys Fri Aug 17 22:46:56 2001 (3B7D82C0)
f7d83000 f7d85000 avgio avgio.sys unavailable (00000000)
f7d8f000 f7d90100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f7dbb000 f7dbcb00 ParVdm ParVdm.SYS Fri Aug 17 22:49:49 2001 (3B7D836D)
f7e2b000 f7e2bd00 pciide pciide.sys Fri Aug 17 22:51:49 2001 (3B7D83E5)
f7e9a000 f7e9ac00 audstub audstub.sys Fri Aug 17 22:59:40 2001 (3B7D85BC)
f7ec1000 f7ec1d00 dxgthk dxgthk.sys Fri Aug 17 22:53:12 2001 (3B7D8438)
f7ed9000 f7ed9b80 Null Null.SYS Fri Aug 17 22:47:39 2001 (3B7D82EB)

Unloaded modules:
a6482000 a6491000 drmk.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a62e3000 a630d000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a630d000 a6330000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a6492000 a64a1000 sysaudio.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a6330000 a6354000 portcls.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a6cfe000 a6d0b000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a6653000 a6661000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7dbd000 f7dbf000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a6354000 a6377000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7eed000 f7eee000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a6306000 a6330000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7c13000 f7c1a000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7b7b000 f7b80000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7651000 f7654000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

Two files caught my attention in your first dump.

Mrxdav.sys
mrxsmb.sys

Then I scrolled down to see mrxsmb.sys as the faulting module in the second.

A bit of info on mrxsmb

Mrxdav.sys is The Microsoft WebDAV network mini-redirector driver.

Is this a networked computer, or in a domain?

 

Dave seems to be onto something with the files he mentioned. Maybe check for updated drivers for the network adapter.
ALTHOUGH...network -> internet, it maybe a malware problem or even something that has been "fixed" by an antivirus or antispyware. Some systems I find that been "fixed" don't work like they used to afterwards (I see hesitations were there should be no hesitations).

I am not encouraging that do a format, check the information Dave (noahdfear) presented.

If you do a format though, delete the partition/drive. In the event that you don't, do a full format, not a quick format.

Matt

 

The pc having problems is the one that I have at home, so no domain, the network card is plugged to the adsl router fo the internet connection.
I've already tried to update the network driver and also to disable this one (integrated into the mobo) and put in a pci network adapter but the problems were always there.
I've did it because the restarts seem to began after a couple of days that I've set up the internet connection to this pc. Before it never had internet connection and the integrated network adapter is always been disabled. But this could be a coincidence...
Anyway, few minutes ago when I was trying to come here on the forum I've got two more BSOD, please tell me if I have to post them (PAGE_FAULT_IN_NONPAGED_AREA and DRIVER_IRQL_NOT_LESS_OR_EQUAL).
Thanks
Danilo (wich is having a nervous breakdown!)

 

Bugcheck 7F is usually related to a hardware problem. What's your RAM setup? You may as well post the new dumps as they might show something new.

 

I've got 512MB+512MB (both DDR 400MHZ PC 3200, not dual channel).
As I said before I've tested the ram with memtest86+ and with the microsoft tool without getting any error.
The two last minidumps are coming...

 

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini082007-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt
Built by: 2600.xpsp_sp2_rtm.040803-2158
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805644a0
Debug session time: Mon Aug 20 13:06:06.718 2007 (GMT+2)
System Uptime: 0 days 0:00:31.281
Loading Kernel Symbols
..........................................................................................................
Loading User Symbols
Loading unloaded module list
..
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {d88415ff, 0, d88415ff, 0}


Could not read faulting driver name
Probably caused by : ntkrnlmp.exe ( nt!KiTrap0E+d0 )

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: d88415ff, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: d88415ff, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: d88415ff

FAULTING_IP:
+ffffffffd88415ff
d88415ff ?? ???

MM_INTERNAL_CODE: 0

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

TRAP_FRAME: a69e98bc -- (.trap ffffffffa69e98bc)
.trap ffffffffa69e98bc
ErrCode = 00000000
eax=00000041 ebx=c58ffbeb ecx=00000041 edx=c58f0041 esi=e17a0024 edi=e155e468
eip=d88415ff esp=a69e9930 ebp=a696993c iopl=0 nv up ei ng nz na po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010283
d88415ff ?? ???
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 805296be to 80537832

FAILED_INSTRUCTION_ADDRESS:
+ffffffffd88415ff
d88415ff ?? ???

STACK_TEXT:
a69e9854 805296be 00000050 d88415ff 00000000 nt!KeBugCheckEx+0x1b
a69e98a4 804e0f07 00000000 d88415ff 00000000 nt!MmAccessFault+0x77e
a69e98a4 d88415ff 00000000 d88415ff 00000000 nt!KiTrap0E+0xd0
WARNING: Frame IP not in any known module. Following frames may be wrong.
a69e992c 15ff50e8 0001d898 8910458b 458d0446 0xd88415ff
a69e9930 0001d898 8910458b 458d0446 2c4689e8 0x15ff50e8
a69e9934 8910458b 458d0446 2c4689e8 c7f8458d 0x1d898
a69e9938 458d0446 2c4689e8 c7f8458d 00040846 0x8910458b
a69e993c 2c4689e8 c7f8458d 00040846 46890000 0x458d0446
a69e9940 c7f8458d 00040846 46890000 205e8828 0x2c4689e8
a69e9944 00040846 46890000 205e8828 e8215e88 0xc7f8458d
a69e9948 46890000 205e8828 e8215e88 ffff61b5 0x40846
a69e994c 205e8828 e8215e88 ffff61b5 8b14558a 0x46890000
a69e9950 e8215e88 ffff61b5 8b14558a 46890c4d 0x205e8828
a69e9954 ffff61b5 8b14558a 46890c4d 60468b50 0xe8215e88
a69e9958 8b14558a 46890c4d 60468b50 89647e89 0xffff61b5
a69e995c 46890c4d 60468b50 89647e89 5e89185e 0x8b14558a
a69e9960 60468b50 89647e89 5e89185e 24e8831c 0x46890c4d
a69e9964 89647e89 5e89185e 24e8831c fa801088 0x60468b50
a69e9968 5e89185e 24e8831c fa801088 18558b04 0x89647e89
a69e996c 24e8831c fa801088 18558b04 89187889 0x5e89185e
a69e9970 fa801088 18558b04 89187889 58881448 0x24e8831c
a69e9974 18558b04 89187889 58881448 0140c602 0xfa801088
a69e9978 89187889 58881448 0140c602 893a8b06 0x18558b04
a69e997c 58881448 0140c602 893a8b06 528b0c78 0x89187889
a69e9980 0140c602 893a8b06 528b0c78 10508904 0x58881448
a69e9984 893a8b06 528b0c78 10508904 891c558b 0x140c602
a69e9988 528b0c78 10508904 891c558b d68b0450 0x893a8b06
a69e998c 10508904 891c558b d68b0450 d8f415ff 0x528b0c78
a69e9990 891c558b d68b0450 d8f415ff 033d0001 0x10508904
a69e9994 d68b0450 d8f415ff 033d0001 75000001 0x891c558b
a69e9998 d8f415ff 033d0001 75000001 53535312 0xd68b0450
a69e999c 033d0001 75000001 53535312 458d066a 0xd8f415ff
a69e99a0 75000001 53535312 458d066a 15ff50e8 0x33d0001
a69e99a4 53535312 458d066a 15ff50e8 0001d888 0x75000001
a69e99a8 458d066a 15ff50e8 0001d888 5ff8458b 0x53535312
a69e99ac 15ff50e8 0001d888 5ff8458b c2c95b5e 0x458d066a
a69e99b0 0001d888 5ff8458b c2c95b5e 90900018 0x15ff50e8
a69e99b4 5ff8458b c2c95b5e 90900018 8b909090 0x1d888
a69e99b8 c2c95b5e 90900018 8b909090 ec8b55ff 0x5ff8458b
a69e99bc 90900018 8b909090 ec8b55ff 046a006a 0xc2c95b5e
a69e99c0 8b909090 ec8b55ff 046a006a 5018458d 0x90900018
a69e99c4 ec8b55ff 046a006a 5018458d 0f14458b 0x8b909090
a69e99c8 046a006a 5018458d 0f14458b ff5108b7 0xec8b55ff
a69e99cc 5018458d 0f14458b ff5108b7 026a0470 0x46a006a
a69e99d0 0f14458b ff5108b7 026a0470 10458b50 0x5018458d
a69e99d4 ff5108b7 026a0470 10458b50 5108b70f 0xf14458b
a69e99d8 026a0470 10458b50 5108b70f 6a0470ff 0xff5108b7
a69e99dc 10458b50 5108b70f 6a0470ff 75ff5002 0x26a0470
a69e99e0 5108b70f 6a0470ff 75ff5002 0c75ff08 0x10458b50
a69e99e4 6a0470ff 75ff5002 0c75ff08 35ff2b6a 0x5108b70f
a69e99e8 75ff5002 0c75ff08 35ff2b6a 0001f74c 0x6a0470ff
a69e99ec 0c75ff08 35ff2b6a 0001f74c f74835ff 0x75ff5002
a69e99f0 35ff2b6a 0001f74c f74835ff 15ff0001 0xc75ff08
a69e99f4 0001f74c f74835ff 15ff0001 0001db6c 0x35ff2b6a
a69e99f8 f74835ff 15ff0001 0001db6c 5d40c483 0x1f74c
a69e99fc 15ff0001 0001db6c 5d40c483 900014c2 0xf74835ff
a69e9a00 0001db6c 5d40c483 900014c2 90909090 0x15ff0001
a69e9a04 5d40c483 900014c2 90909090 8b55ff8b 0x1db6c
a69e9a08 900014c2 90909090 8b55ff8b 565351ec 0x5d40c483
a69e9a0c 90909090 8b55ff8b 565351ec 8308758b 0x900014c2
a69e9a10 8b55ff8b 565351ec 8308758b 8b005066 0x90909090
a69e9a14 565351ec 8308758b 8b005066 488b4c46 0x8b55ff8b
a69e9a18 8308758b 8b005066 488b4c46 44408b48 0x565351ec
a69e9a1c 8b005066 488b4c46 44408b48 787e8b57 0x8308758b
a69e9a20 488b4c46 44408b48 787e8b57 8b084d89 0x8b005066
a69e9a24 44408b48 787e8b57 8b084d89 c9850c4f 0x488b4c46
a69e9a28 787e8b57 8b084d89 c9850c4f 74fc4589 0x44408b48
a69e9a2c 8b084d89 c9850c4f 74fc4589 0847f616 0x787e8b57
a69e9a30 c9850c4f 74fc4589 0847f616 6a107420 0x8b084d89
a69e9a34 74fc4589 0847f616 6a107420 15ff5100 0xc9850c4f
a69e9a38 0847f616 6a107420 15ff5100 0001db20 0x74fc4589
a69e9a3c 6a107420 15ff5100 0001db20 df086783 0x847f616
a69e9a40 15ff5100 0001db20 df086783 8bfc458b 0x6a107420
a69e9a44 0001db20 df086783 8bfc458b 498b644e 0x15ff5100
a69e9a48 df086783 8bfc458b 498b644e 605f8b10 0x1db20


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!KiTrap0E+d0
804e0f07 85c0 test eax,eax

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: nt!KiTrap0E+d0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 41107faa

FAILURE_BUCKET_ID: 0x50_CODE_AV_BAD_IP_nt!KiTrap0E+d0

BUCKET_ID: 0x50_CODE_AV_BAD_IP_nt!KiTrap0E+d0

Followup: MachineOwner
---------

eax=ffdff13c ebx=00000000 ecx=00000000 edx=804e1925 esi=c0362104 edi=80704a4c
eip=80537832 esp=a69e983c ebp=a69e9854 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
80537832 5d pop ebp
ChildEBP RetAddr Args to Child
a69e9854 805296be 00000050 d88415ff 00000000 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
a69e98a4 804e0f07 00000000 d88415ff 00000000 nt!MmAccessFault+0x77e (FPO: [Non-Fpo])
a69e98a4 d88415ff 00000000 d88415ff 00000000 nt!KiTrap0E+0xd0 (FPO: [0,0] TrapFrame @ a69e98bc)
WARNING: Frame IP not in any known module. Following frames may be wrong.
a69e992c 15ff50e8 0001d898 8910458b 458d0446 0xd88415ff
a69e9930 0001d898 8910458b 458d0446 2c4689e8 0x15ff50e8
a69e9934 8910458b 458d0446 2c4689e8 c7f8458d 0x1d898
a69e9938 458d0446 2c4689e8 c7f8458d 00040846 0x8910458b
a69e993c 2c4689e8 c7f8458d 00040846 46890000 0x458d0446
a69e9940 c7f8458d 00040846 46890000 205e8828 0x2c4689e8
a69e9944 00040846 46890000 205e8828 e8215e88 0xc7f8458d
a69e9948 46890000 205e8828 e8215e88 ffff61b5 0x40846
a69e994c 205e8828 e8215e88 ffff61b5 8b14558a 0x46890000
a69e9950 e8215e88 ffff61b5 8b14558a 46890c4d 0x205e8828
a69e9954 ffff61b5 8b14558a 46890c4d 60468b50 0xe8215e88
a69e9958 8b14558a 46890c4d 60468b50 89647e89 0xffff61b5
a69e995c 46890c4d 60468b50 89647e89 5e89185e 0x8b14558a
a69e9960 60468b50 89647e89 5e89185e 24e8831c 0x46890c4d
a69e9964 89647e89 5e89185e 24e8831c fa801088 0x60468b50
a69e9968 5e89185e 24e8831c fa801088 18558b04 0x89647e89
a69e996c 24e8831c fa801088 18558b04 89187889 0x5e89185e
start end module name
804d7000 80702000 nt ntkrnlmp.exe Wed Aug 04 08:18:18 2004 (41107FAA)
80702000 80722d00 hal halmacpi.dll Wed Aug 04 07:59:09 2004 (41107B2D)
a684c000 a685f000 avgntflt avgntflt.sys Fri Apr 27 16:31:25 2007 (4632093D)
a6887000 a68d9180 srv srv.sys Wed Aug 04 08:14:44 2004 (41107ED4)
a6ae2000 a6b0e400 mrxdav mrxdav.sys Wed Aug 04 08:00:49 2004 (41107B91)
a6d67000 a6d7e480 dump_atapi dump_atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
a6e1f000 a6e8d380 mrxsmb mrxsmb.sys Wed Aug 04 08:15:14 2004 (41107EF2)
a6e8e000 a6eb9180 rdbss rdbss.sys Wed Aug 04 08:20:05 2004 (41108015)
a6ee2000 a6f03d00 afd afd.sys Wed Aug 04 08:14:13 2004 (41107EB5)
a6f04000 a6f24f00 ipnat ipnat.sys Wed Aug 04 08:04:48 2004 (41107C80)
a6f25000 a6f4cc00 netbt netbt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
a6f4d000 a6fa4a80 tcpip tcpip.sys Wed Aug 04 08:14:39 2004 (41107ECF)
a6fa5000 a6fb7400 ipsec ipsec.sys Wed Aug 04 08:14:27 2004 (41107EC3)
bf800000 bf9c0400 win32k win32k.sys Wed Aug 04 08:17:30 2004 (41107F7A)
bf9c1000 bf9d2580 dxg dxg.sys Wed Aug 04 08:00:51 2004 (41107B93)
bf9d3000 bfa09000 ati2dvag ati2dvag.dll Fri Aug 20 00:38:32 2004 (41252BE8)
bfa09000 bfa41000 ati2cqag ati2cqag.dll Fri Aug 20 00:38:30 2004 (41252BE6)
bfa41000 bfc0e2e0 ati3duag ati3duag.dll Fri Aug 20 00:38:35 2004 (41252BEB)
bfc0f000 bfc8d2a0 ativvaxx ativvaxx.dll Fri Aug 20 00:38:39 2004 (41252BEF)
f71eb000 f721e200 update update.sys Wed Aug 04 07:58:32 2004 (41107B08)
f722f000 f7231900 Dxapi Dxapi.sys Fri Aug 17 22:53:19 2001 (3B7D843F)
f7247000 f7277100 rdpdr rdpdr.sys Wed Aug 04 08:01:10 2004 (41107BA6)
f7498000 f74a8e00 psched psched.sys Wed Aug 04 08:04:16 2004 (41107C60)
f74a9000 f74bf680 ndiswan ndiswan.sys Wed Aug 04 08:14:30 2004 (41107EC6)
f74d7000 f74f9680 ks ks.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f74fa000 f750d980 parport parport.sys Wed Aug 04 07:59:04 2004 (41107B28)
f750e000 f751e280 serial serial.sys Wed Aug 04 08:15:51 2004 (41107F17)
f751f000 f7542f80 EL2K_XP EL2K_XP.sys Wed Jun 04 00:48:12 2003 (3EDD25AC)
f7543000 f7565e80 USBPORT USBPORT.SYS Wed Aug 04 08:08:34 2004 (41107D62)
f7566000 f7579780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 08:07:04 2004 (41107D08)
f757a000 f7641000 ati2mtag ati2mtag.sys Fri May 28 22:26:05 2004 (40B7A05D)
f7649000 f764b280 rasacd rasacd.sys Fri Aug 17 22:55:39 2001 (3B7D84CB)
f7689000 f76a3580 Mup Mup.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f76a4000 f76d0a80 NDIS NDIS.sys Wed Aug 04 08:14:27 2004 (41107EC3)
f76d1000 f775d480 Ntfs Ntfs.sys Wed Aug 04 08:15:06 2004 (41107EEA)
f775e000 f7774780 KSecDD KSecDD.sys Wed Aug 04 07:59:45 2004 (41107B51)
f7775000 f7786f00 sr sr.sys Wed Aug 04 08:06:22 2004 (41107CDE)
f7787000 f77a5780 fltMgr fltMgr.sys Wed Aug 04 08:01:17 2004 (41107BAD)
f77a6000 f77bd480 atapi atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
f77be000 f77e3a80 dmio dmio.sys Wed Aug 04 08:07:13 2004 (41107D11)
f77e4000 f7802b80 ftdisk ftdisk.sys Fri Aug 17 22:52:41 2001 (3B7D8419)
f7803000 f7813c80 pci pci.sys Wed Aug 04 08:07:45 2004 (41107D31)
f7814000 f7842000 ACPI ACPI.sys Wed Aug 04 08:07:35 2004 (41107D27)
f7863000 f786bd00 isapnp isapnp.sys Fri Aug 17 22:58:01 2001 (3B7D8559)
f7873000 f7881e80 ohci1394 ohci1394.sys Wed Aug 04 08:10:05 2004 (41107DBD)
f7883000 f7890000 1394BUS 1394BUS.SYS Wed Aug 04 08:10:03 2004 (41107DBB)
f7893000 f789d500 MountMgr MountMgr.sys Wed Aug 04 07:58:29 2004 (41107B05)
f78a3000 f78b0080 VolSnap VolSnap.sys Wed Aug 04 08:00:14 2004 (41107B6E)
f78b3000 f78bbe00 disk disk.sys Wed Aug 04 07:59:53 2004 (41107B59)
f78c3000 f78cf200 CLASSPNP CLASSPNP.SYS Wed Aug 04 08:14:26 2004 (41107EC2)
f78d3000 f78dd580 agp440 agp440.sys Wed Aug 04 08:07:40 2004 (41107D2C)
f7913000 f7922900 Cdfs Cdfs.SYS Wed Aug 04 08:14:09 2004 (41107EB1)
f7953000 f795cd00 intelppm intelppm.sys Wed Aug 04 07:59:19 2004 (41107B37)
f7963000 f7972180 nic1394 nic1394.sys Wed Aug 04 07:58:28 2004 (41107B04)
f7973000 f7980180 i8042prt i8042prt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
f7983000 f798d380 imapi imapi.sys Wed Aug 04 08:00:12 2004 (41107B6C)
f7993000 f799f180 cdrom cdrom.sys Wed Aug 04 07:59:52 2004 (41107B58)
f79a3000 f79b1380 redbook redbook.sys Wed Aug 04 07:59:34 2004 (41107B46)
f79b3000 f79bf880 rasl2tp rasl2tp.sys Wed Aug 04 08:14:21 2004 (41107EBD)
f79c3000 f79cd200 raspppoe raspppoe.sys Wed Aug 04 08:05:06 2004 (41107C92)
f79d3000 f79ded00 raspptp raspptp.sys Wed Aug 04 08:14:26 2004 (41107EC2)
f79e3000 f79eb900 msgpc msgpc.sys Wed Aug 04 08:04:11 2004 (41107C5B)
f7a03000 f7a0cf00 termdd termdd.sys Wed Aug 04 07:58:52 2004 (41107B1C)
f7a43000 f7a4c480 NDProxy NDProxy.SYS Fri Aug 17 22:55:30 2001 (3B7D84C2)
f7a53000 f7a61100 usbhub usbhub.sys Wed Aug 04 08:08:40 2004 (41107D68)
f7a73000 f7a7b700 wanarp wanarp.sys Wed Aug 04 08:04:57 2004 (41107C89)
f7a83000 f7a8b700 netbios netbios.sys Wed Aug 04 08:03:19 2004 (41107C27)
f7a93000 f7aa1d80 arp1394 arp1394.sys Wed Aug 04 07:58:28 2004 (41107B04)
f7aa3000 f7aab900 Fips Fips.SYS Sat Aug 18 03:31:49 2001 (3B7DC585)
f7ad3000 f7add000 avipbb avipbb.sys unavailable (00000000)
f7ae3000 f7ae9200 PCIIDEX PCIIDEX.SYS Wed Aug 04 07:59:40 2004 (41107B4C)
f7aeb000 f7aef900 PartMgr PartMgr.sys Sat Aug 18 03:32:23 2001 (3B7DC5A7)
f7b2b000 f7b30000 usbuhci usbuhci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f7b33000 f7b39800 usbehci usbehci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f7b3b000 f7b41200 kbdclass kbdclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7b43000 f7b48c00 mouclass mouclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7b4b000 f7b51b00 fdc fdc.sys Wed Aug 04 07:59:25 2004 (41107B3D)
f7b53000 f7b57880 TDI TDI.SYS Wed Aug 04 08:07:47 2004 (41107D33)
f7b63000 f7b67580 ptilink ptilink.sys Fri Aug 17 22:49:53 2001 (3B7D8371)
f7b6b000 f7b6f080 raspti raspti.sys Fri Aug 17 22:55:32 2001 (3B7D84C4)
f7b73000 f7b78000 flpydisk flpydisk.sys Wed Aug 04 07:59:24 2004 (41107B3C)
f7b83000 f7b88200 vga vga.sys Wed Aug 04 08:07:06 2004 (41107D0A)
f7b8b000 f7b8fa80 Msfs Msfs.SYS Wed Aug 04 08:00:37 2004 (41107B85)
f7b93000 f7b9a880 Npfs Npfs.SYS Wed Aug 04 08:00:38 2004 (41107B86)
f7b9b000 f7ba1000 ssmdrv ssmdrv.sys unavailable (00000000)
f7bab000 f7baf500 watchdog watchdog.sys Wed Aug 04 08:07:32 2004 (41107D24)
f7c73000 f7c76000 BOOTVID BOOTVID.dll Fri Aug 17 22:49:09 2001 (3B7D8345)
f7d17000 f7d1ac80 serenum serenum.sys Wed Aug 04 07:59:06 2004 (41107B2A)
f7d1f000 f7d21580 ndistapi ndistapi.sys Fri Aug 17 22:55:29 2001 (3B7D84C1)
f7d43000 f7d46c80 mssmbios mssmbios.sys Wed Aug 04 08:07:47 2004 (41107D33)
f7d63000 f7d64b80 kdcom kdcom.dll Fri Aug 17 22:49:10 2001 (3B7D8346)
f7d65000 f7d66100 WMILIB WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f7d67000 f7d68580 intelide intelide.sys Wed Aug 04 07:59:40 2004 (41107B4C)
f7d69000 f7d6a700 dmload dmload.sys Fri Aug 17 22:58:15 2001 (3B7D8567)
f7d77000 f7d78100 swenum swenum.sys Wed Aug 04 07:58:41 2004 (41107B11)
f7d79000 f7d7a280 USBD USBD.SYS Fri Aug 17 23:02:58 2001 (3B7D8682)
f7d7b000 f7d7cf00 Fs_Rec Fs_Rec.SYS Fri Aug 17 22:49:37 2001 (3B7D8361)
f7d7d000 f7d7e080 Beep Beep.SYS Fri Aug 17 22:47:33 2001 (3B7D82E5)
f7d7f000 f7d80080 mnmdd mnmdd.SYS Fri Aug 17 22:57:28 2001 (3B7D8538)
f7d81000 f7d82080 RDPCDD RDPCDD.sys Fri Aug 17 22:46:56 2001 (3B7D82C0)
f7d85000 f7d87000 avgio avgio.sys unavailable (00000000)
f7d87000 f7d88100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f7da7000 f7da8b00 ParVdm ParVdm.SYS Fri Aug 17 22:49:49 2001 (3B7D836D)
f7e2b000 f7e2bd00 pciide pciide.sys Fri Aug 17 22:51:49 2001 (3B7D83E5)
f7e34000 f7e34c00 audstub audstub.sys Fri Aug 17 22:59:40 2001 (3B7D85BC)
f7f49000 f7f49b80 Null Null.SYS Fri Aug 17 22:47:39 2001 (3B7D82EB)
f7f82000 f7f82d00 dxgthk dxgthk.sys Fri Aug 17 22:53:12 2001 (3B7D8438)

Unloaded modules:
f7b7b000 f7b80000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f764d000 f7650000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini082007-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt
Built by: 2600.xpsp_sp2_rtm.040803-2158
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805644a0
Debug session time: Mon Aug 20 13:16:43.953 2007 (GMT+2)
System Uptime: 0 days 0:05:11.650
Loading Kernel Symbols
...........................................................................................................
Loading User Symbols
Loading unloaded module list
..
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {fffffe10, 2, 0, fffffe10}

Probably caused by : memory_corruption

Followup: memory_corruption
---------

0: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffffe10, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: fffffe10, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: fffffe10

CURRENT_IRQL: 2

FAULTING_IP:
+fffffffffffffe10
fffffe10 ?? ???

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: CODE_CORRUPTION

BUGCHECK_STR: 0xD1

TRAP_FRAME: 805d83c8 -- (.trap ffffffff805d83c8)
.trap ffffffff805d83c8
ErrCode = 00000000
eax=00000000 ebx=ffdffc70 ecx=ffdffc70 edx=000000d9 esi=ffdffc50 edi=863ab220
eip=fffffe10 esp=805d843c ebp=80558450 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
fffffe10 ?? ???
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from fffffe10 to 804e106f

FAILED_INSTRUCTION_ADDRESS:
+fffffffffffffe10
fffffe10 ?? ???

STACK_TEXT:
805d83c8 fffffe10 badb0d00 000000d9 b8fffffe nt!KiTrap0E+0x238
WARNING: Frame IP not in any known module. Following frames may be wrong.
805d8438 00a08689 858b0000 fffffe14 00a48689 0xfffffe10
805d843c 858b0000 fffffe14 00a48689 858b0000 0xa08689
805d8440 fffffe14 00a48689 858b0000 fffffe18 0x858b0000
805d8444 00a48689 858b0000 fffffe18 00a88689 0xfffffe14
805d8448 858b0000 fffffe18 00a88689 858a0000 0xa48689
805d844c fffffe18 00a88689 858a0000 fffffe1c 0x858b0000
805d8450 00a88689 858a0000 fffffe1c 00ac8688 0xfffffe18
805d8454 858a0000 fffffe1c 00ac8688 858b0000 0xa88689
805d8458 fffffe1c 00ac8688 858b0000 fffffe40 0x858a0000
805d845c 00ac8688 858b0000 fffffe40 00d08689 0xfffffe1c
805d8460 858b0000 fffffe40 00d08689 858b0000 0xac8688
805d8464 fffffe40 00d08689 858b0000 fffffdf8 0x858b0000
805d8468 00d08689 858b0000 fffffdf8 00888689 0xfffffe40
805d846c 858b0000 fffffdf8 00888689 858b0000 0xd08689
805d8470 fffffdf8 00888689 858b0000 fffffdfc 0x858b0000
805d8474 00888689 858b0000 fffffdfc 008c8689 0xfffffdf8
805d8478 858b0000 fffffdfc 008c8689 858b0000 0x888689
805d847c fffffdfc 008c8689 858b0000 fffffe00 0x858b0000
805d8480 008c8689 858b0000 fffffe00 00908689 0xfffffdfc
805d8484 858b0000 fffffe00 00908689 858b0000 0x8c8689
805d8488 fffffe00 00908689 858b0000 fffffe04 0x858b0000
805d848c 00908689 858b0000 fffffe04 00948689 0xfffffe00
805d8490 858b0000 fffffe04 00948689 7d830000 0x908689
805d8494 fffffe04 00948689 7d830000 2e75090c 0x858b0000
805d8498 00948689 7d830000 2e75090c 014cbe8d 0xfffffe04
805d849c 7d830000 2e75090c 014cbe8d cf8b0000 0x948689
805d84a0 2e75090c 014cbe8d cf8b0000 80ec15ff 0x7d830000
805d84a4 014cbe8d cf8b0000 80ec15ff 858b804d 0x2e75090c
805d84a8 cf8b0000 80ec15ff 858b804d fffffea8 0x14cbe8d
805d84ac 80ec15ff 858b804d fffffea8 01388689 0xcf8b0000
805d84b0 858b804d fffffea8 01388689 858b0000 0x80ec15ff
805d84b4 fffffea8 01388689 858b0000 fffffeac 0x858b804d
805d84b8 01388689 858b0000 fffffeac 013c8689 0xfffffea8
805d84bc 858b0000 fffffeac 013c8689 cf8b0000 0x1388689
805d84c0 fffffeac 013c8689 cf8b0000 80f015ff 0x858b0000
805d84c4 013c8689 cf8b0000 80f015ff 7d83804d 0xfffffeac
805d84c8 cf8b0000 80f015ff 7d83804d 850f00a8 0x13c8689
805d84cc 80f015ff 7d83804d 850f00a8 0002eea0 0xcf8b0000
805d84d0 7d83804d 850f00a8 0002eea0 009886f6 0x80f015ff
805d84d4 850f00a8 0002eea0 009886f6 0f010000 0x7d83804d
805d84d8 0002eea0 009886f6 0f010000 02eef085 0x850f00a8
805d84dc 009886f6 0f010000 02eef085 81e85600 0x2eea0
805d84e0 0f010000 02eef085 81e85600 8d000000 0x9886f6
805d84e4 02eef085 81e85600 8d000000 bee8204e 0xf010000
805d84e8 81e85600 8d000000 bee8204e 80fff045 0x2eef085
805d84ec 8d000000 bee8204e 80fff045 0f00db7d 0x81e85600
805d84f0 bee8204e 80fff045 0f00db7d 02e88885 0x8d000000
805d84f4 80fff045 0f00db7d 02e88885 a44d8b00 0xbee8204e
805d84f8 0f00db7d 02e88885 a44d8b00 00d481ff 0x80fff045
805d84fc 02e88885 a44d8b00 00d481ff 0b750000 0xf00db7d
805d8500 a44d8b00 00d481ff 0b750000 3934418d 0x2e88885
805d8504 00d481ff 0b750000 3934418d 8c850f00 0xa44d8b00
805d8508 0b750000 3934418d 8c850f00 8b0002ef 0xd481ff
805d850c 3934418d 8c850f00 8b0002ef 9a0ee8ce 0xb750000
805d8510 8c850f00 8b0002ef 9a0ee8ce 458bfff0 0x3934418d
805d8514 8b0002ef 9a0ee8ce 458bfff0 ad4de8e4 0x8c850f00
805d8518 9a0ee8ce 458bfff0 ad4de8e4 10c2fff0 0x8b0002ef
805d851c 458bfff0 ad4de8e4 10c2fff0 90909000 0x9a0ee8ce
805d8520 ad4de8e4 10c2fff0 90909000 ff8b9090 0x458bfff0
805d8524 10c2fff0 90909000 ff8b9090 8bec8b55 0xad4de8e4
805d8528 90909000 ff8b9090 8bec8b55 c9850c4d 0x10c2fff0
805d852c ff8b9090 8bec8b55 c9850c4d 5308458b 0x90909000
805d8530 8bec8b55 c9850c4d 5308458b 23755756 0xff8b9090
805d8534 c9850c4d 5308458b 23755756 8d18708b 0x8bec8b55
805d8538 5308458b 23755756 8d18708b f73b1878 0xc9850c4d
805d853c 23755756 8d18708b f73b1878 f172850f 0x5308458b
805d8540 8d18708b f73b1878 f172850f db330002 0x23755756
805d8544 f73b1878 f172850f db330002 000c7d83 0x8d18708b
805d8548 f172850f db330002 000c7d83 f182850f 0xf73b1878
805d854c db330002 000c7d83 f182850f 5e5f0002 0xf172850f
805d8550 000c7d83 f182850f 5e5f0002 5d5bc38b 0xdb330002
805d8554 f182850f 5e5f0002 5d5bc38b 8b0008c2 0xc7d83
805d8558 5e5f0002 5d5bc38b 8b0008c2 000184b1 0xf182850f
805d855c 5d5bc38b 8b0008c2 000184b1 90d8eb00 0x5e5f0002


STACK_COMMAND: kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
!chkimg -lo 50 -d !nt
805d83b0-805d83b8 9 bytes - nt!NtSetInformationJobObject+8d5

[ 85 a8 fe ff ff b9 00 02:0a 00 00 00 10 fe ff ff ]
805d83ba-805d83d7 30 bytes - nt!NtSetInformationJobObject+8ee (+0x0a)

[ 85 d9 0f 84 9e ef 02 00:00 00 00 00 00 00 10 fe ]
805d83f8-805d83f9 2 bytes - nt!NtSetInformationJobObject+93c (+0x3e)

[ 64 ff:00 00 ]
805d83fc-805d83fd 2 bytes - nt!NtSetInformationJobObject+93c (+0x04)

[ f8 85:23 00 ]
805d8400-805d8401 2 bytes - nt!NtSetInformationJobObject+948 (+0x04)

[ 85 74:23 00 ]
805d8404-805d840b 8 bytes - nt!NtSetInformationJobObject+94c (+0x04)

[ 00 81 e7 ff ef ff ff b8:d9 00 00 00 70 fc df ff ]
805d840d - nt!NtSetInformationJobObject+955 (+0x09)

[ 20:00 ]
805d8414-805d8415 2 bytes - nt!NtSetInformationJobObject+95c (+0x07)

[ 4c 64:ff ff ]
805d8418-805d8419 2 bytes - nt!NtSetInformationJobObject+95c (+0x04)

[ 0b f8:30 00 ]
805d841c-805d8434 25 bytes - nt!NtSetInformationJobObject+968 (+0x04)

[ e4 00 0f 8c cf 00 00 00:20 b2 3a 86 50 fc df ff ]
805d8436-805d843b 6 bytes - nt!NtSetInformationJobObject+982 (+0x1a)

[ 8b 85 10 fe ff ff:00 00 46 02 01 00 ]
89 errors : !nt (805d83b0-805d843b)

MODULE_NAME: memory_corruption

IMAGE_NAME: memory_corruption

FOLLOWUP_NAME: memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MEMORY_CORRUPTOR: LARGE

FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE

BUCKET_ID: MEMORY_CORRUPTION_LARGE

Followup: memory_corruption
---------

eax=ffdff13c ebx=00000002 ecx=00000000 edx=40000000 esi=fffffe10 edi=fffffe10
eip=804e106f esp=805d83b0 ebp=805d83c8 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x238:
804e106f f7457000000200 test dword ptr [ebp+70h],20000h ss:0010:805d8438=00010246
ChildEBP RetAddr Args to Child
805d83c8 fffffe10 badb0d00 000000d9 b8fffffe nt!KiTrap0E+0x238 (FPO: [0,0] TrapFrame @ 805d83c8)
WARNING: Frame IP not in any known module. Following frames may be wrong.
805d8438 00a08689 858b0000 fffffe14 00a48689 0xfffffe10
805d843c 858b0000 fffffe14 00a48689 858b0000 0xa08689
805d8440 fffffe14 00a48689 858b0000 fffffe18 0x858b0000
805d8444 00a48689 858b0000 fffffe18 00a88689 0xfffffe14
805d8448 858b0000 fffffe18 00a88689 858a0000 0xa48689
805d844c fffffe18 00a88689 858a0000 fffffe1c 0x858b0000
805d8450 00a88689 858a0000 fffffe1c 00ac8688 0xfffffe18
805d8454 858a0000 fffffe1c 00ac8688 858b0000 0xa88689
805d8458 fffffe1c 00ac8688 858b0000 fffffe40 0x858a0000
805d845c 00ac8688 858b0000 fffffe40 00d08689 0xfffffe1c
805d8460 858b0000 fffffe40 00d08689 858b0000 0xac8688
805d8464 fffffe40 00d08689 858b0000 fffffdf8 0x858b0000
805d8468 00d08689 858b0000 fffffdf8 00888689 0xfffffe40
805d846c 858b0000 fffffdf8 00888689 858b0000 0xd08689
805d8470 fffffdf8 00888689 858b0000 fffffdfc 0x858b0000
805d8474 00888689 858b0000 fffffdfc 008c8689 0xfffffdf8
805d8478 858b0000 fffffdfc 008c8689 858b0000 0x888689
805d847c fffffdfc 008c8689 858b0000 fffffe00 0x858b0000
805d8480 008c8689 858b0000 fffffe00 00908689 0xfffffdfc
start end module name
804d7000 80702000 nt ntkrnlmp.exe Wed Aug 04 08:18:18 2004 (41107FAA)
80702000 80722d00 hal halmacpi.dll Wed Aug 04 07:59:09 2004 (41107B2D)
a63bb000 a63fb380 HTTP HTTP.sys Wed Aug 04 08:00:09 2004 (41107B69)
a66a4000 a66b7000 avgntflt avgntflt.sys Fri Apr 27 16:31:25 2007 (4632093D)
a6707000 a6759180 srv srv.sys Wed Aug 04 08:14:44 2004 (41107ED4)
a693a000 a6966400 mrxdav mrxdav.sys Wed Aug 04 08:00:49 2004 (41107B91)
a6be7000 a6bfe480 dump_atapi dump_atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
a6c9f000 a6d0d380 mrxsmb mrxsmb.sys Wed Aug 04 08:15:14 2004 (41107EF2)
a6d0e000 a6d39180 rdbss rdbss.sys Wed Aug 04 08:20:05 2004 (41108015)
a6d62000 a6d83d00 afd afd.sys Wed Aug 04 08:14:13 2004 (41107EB5)
a6d84000 a6da4f00 ipnat ipnat.sys Wed Aug 04 08:04:48 2004 (41107C80)
a6da5000 a6dccc00 netbt netbt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
a6dcd000 a6e24a80 tcpip tcpip.sys Wed Aug 04 08:14:39 2004 (41107ECF)
a6e25000 a6e37400 ipsec ipsec.sys Wed Aug 04 08:14:27 2004 (41107EC3)
bf800000 bf9c0400 win32k win32k.sys Wed Aug 04 08:17:30 2004 (41107F7A)
bf9c1000 bf9d2580 dxg dxg.sys Wed Aug 04 08:00:51 2004 (41107B93)
bf9d3000 bfa09000 ati2dvag ati2dvag.dll Fri Aug 20 00:38:32 2004 (41252BE8)
bfa09000 bfa41000 ati2cqag ati2cqag.dll Fri Aug 20 00:38:30 2004 (41252BE6)
bfa41000 bfc0e2e0 ati3duag ati3duag.dll Fri Aug 20 00:38:35 2004 (41252BEB)
bfc0f000 bfc8d2a0 ativvaxx ativvaxx.dll Fri Aug 20 00:38:39 2004 (41252BEF)
f736b000 f739e200 update update.sys Wed Aug 04 07:58:32 2004 (41107B08)
f743f000 f746f100 rdpdr rdpdr.sys Wed Aug 04 08:01:10 2004 (41107BA6)
f7490000 f7492900 Dxapi Dxapi.sys Fri Aug 17 22:53:19 2001 (3B7D843F)
f74af000 f74bfe00 psched psched.sys Wed Aug 04 08:04:16 2004 (41107C60)
f74c0000 f74d6680 ndiswan ndiswan.sys Wed Aug 04 08:14:30 2004 (41107EC6)
f74d7000 f74f9680 ks ks.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f74fa000 f750d980 parport parport.sys Wed Aug 04 07:59:04 2004 (41107B28)
f750e000 f751e280 serial serial.sys Wed Aug 04 08:15:51 2004 (41107F17)
f751f000 f7542f80 EL2K_XP EL2K_XP.sys Wed Jun 04 00:48:12 2003 (3EDD25AC)
f7543000 f7565e80 USBPORT USBPORT.SYS Wed Aug 04 08:08:34 2004 (41107D62)
f7566000 f7579780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 08:07:04 2004 (41107D08)
f757a000 f7641000 ati2mtag ati2mtag.sys Fri May 28 22:26:05 2004 (40B7A05D)
f764d000 f764f280 rasacd rasacd.sys Fri Aug 17 22:55:39 2001 (3B7D84CB)
f7689000 f76a3580 Mup Mup.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f76a4000 f76d0a80 NDIS NDIS.sys Wed Aug 04 08:14:27 2004 (41107EC3)
f76d1000 f775d480 Ntfs Ntfs.sys Wed Aug 04 08:15:06 2004 (41107EEA)
f775e000 f7774780 KSecDD KSecDD.sys Wed Aug 04 07:59:45 2004 (41107B51)
f7775000 f7786f00 sr sr.sys Wed Aug 04 08:06:22 2004 (41107CDE)
f7787000 f77a5780 fltMgr fltMgr.sys Wed Aug 04 08:01:17 2004 (41107BAD)
f77a6000 f77bd480 atapi atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
f77be000 f77e3a80 dmio dmio.sys Wed Aug 04 08:07:13 2004 (41107D11)
f77e4000 f7802b80 ftdisk ftdisk.sys Fri Aug 17 22:52:41 2001 (3B7D8419)
f7803000 f7813c80 pci pci.sys Wed Aug 04 08:07:45 2004 (41107D31)
f7814000 f7842000 ACPI ACPI.sys Wed Aug 04 08:07:35 2004 (41107D27)
f7863000 f786bd00 isapnp isapnp.sys Fri Aug 17 22:58:01 2001 (3B7D8559)
f7873000 f7881e80 ohci1394 ohci1394.sys Wed Aug 04 08:10:05 2004 (41107DBD)
f7883000 f7890000 1394BUS 1394BUS.SYS Wed Aug 04 08:10:03 2004 (41107DBB)
f7893000 f789d500 MountMgr MountMgr.sys Wed Aug 04 07:58:29 2004 (41107B05)
f78a3000 f78b0080 VolSnap VolSnap.sys Wed Aug 04 08:00:14 2004 (41107B6E)
f78b3000 f78bbe00 disk disk.sys Wed Aug 04 07:59:53 2004 (41107B59)
f78c3000 f78cf200 CLASSPNP CLASSPNP.SYS Wed Aug 04 08:14:26 2004 (41107EC2)
f78d3000 f78dd580 agp440 agp440.sys Wed Aug 04 08:07:40 2004 (41107D2C)
f7953000 f795cd00 intelppm intelppm.sys Wed Aug 04 07:59:19 2004 (41107B37)
f7963000 f7972180 nic1394 nic1394.sys Wed Aug 04 07:58:28 2004 (41107B04)
f7973000 f7980180 i8042prt i8042prt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
f7983000 f798d380 imapi imapi.sys Wed Aug 04 08:00:12 2004 (41107B6C)
f7993000 f799f180 cdrom cdrom.sys Wed Aug 04 07:59:52 2004 (41107B58)
f79a3000 f79b1380 redbook redbook.sys Wed Aug 04 07:59:34 2004 (41107B46)
f79b3000 f79bf880 rasl2tp rasl2tp.sys Wed Aug 04 08:14:21 2004 (41107EBD)
f79c3000 f79cd200 raspppoe raspppoe.sys Wed Aug 04 08:05:06 2004 (41107C92)
f79d3000 f79ded00 raspptp raspptp.sys Wed Aug 04 08:14:26 2004 (41107EC2)
f79e3000 f79eb900 msgpc msgpc.sys Wed Aug 04 08:04:11 2004 (41107C5B)
f79f3000 f79fcf00 termdd termdd.sys Wed Aug 04 07:58:52 2004 (41107B1C)
f7a33000 f7a3c480 NDProxy NDProxy.SYS Fri Aug 17 22:55:30 2001 (3B7D84C2)
f7a43000 f7a51100 usbhub usbhub.sys Wed Aug 04 08:08:40 2004 (41107D68)
f7a63000 f7a6b700 wanarp wanarp.sys Wed Aug 04 08:04:57 2004 (41107C89)
f7a73000 f7a7b700 netbios netbios.sys Wed Aug 04 08:03:19 2004 (41107C27)
f7a83000 f7a91d80 arp1394 arp1394.sys Wed Aug 04 07:58:28 2004 (41107B04)
f7a93000 f7a9b900 Fips Fips.SYS Sat Aug 18 03:31:49 2001 (3B7DC585)
f7aa3000 f7aad000 avipbb avipbb.sys unavailable (00000000)
f7ac3000 f7ad2900 Cdfs Cdfs.SYS Wed Aug 04 08:14:09 2004 (41107EB1)
f7ae3000 f7ae9200 PCIIDEX PCIIDEX.SYS Wed Aug 04 07:59:40 2004 (41107B4C)
f7aeb000 f7aef900 PartMgr PartMgr.sys Sat Aug 18 03:32:23 2001 (3B7DC5A7)
f7b2b000 f7b30000 usbuhci usbuhci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f7b33000 f7b39800 usbehci usbehci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f7b3b000 f7b41200 kbdclass kbdclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7b43000 f7b48c00 mouclass mouclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7b4b000 f7b51b00 fdc fdc.sys Wed Aug 04 07:59:25 2004 (41107B3D)
f7b53000 f7b57880 TDI TDI.SYS Wed Aug 04 08:07:47 2004 (41107D33)
f7b5b000 f7b5f580 ptilink ptilink.sys Fri Aug 17 22:49:53 2001 (3B7D8371)
f7b63000 f7b67080 raspti raspti.sys Fri Aug 17 22:55:32 2001 (3B7D84C4)
f7b6b000 f7b70000 flpydisk flpydisk.sys Wed Aug 04 07:59:24 2004 (41107B3C)
f7b7b000 f7b80200 vga vga.sys Wed Aug 04 08:07:06 2004 (41107D0A)
f7b83000 f7b87a80 Msfs Msfs.SYS Wed Aug 04 08:00:37 2004 (41107B85)
f7b8b000 f7b92880 Npfs Npfs.SYS Wed Aug 04 08:00:38 2004 (41107B86)
f7b93000 f7b99000 ssmdrv ssmdrv.sys unavailable (00000000)
f7ba3000 f7ba7500 watchdog watchdog.sys Wed Aug 04 08:07:32 2004 (41107D24)
f7c73000 f7c76000 BOOTVID BOOTVID.dll Fri Aug 17 22:49:09 2001 (3B7D8345)
f7d1b000 f7d1ec80 serenum serenum.sys Wed Aug 04 07:59:06 2004 (41107B2A)
f7d23000 f7d25580 ndistapi ndistapi.sys Fri Aug 17 22:55:29 2001 (3B7D84C1)
f7d3f000 f7d42c80 mssmbios mssmbios.sys Wed Aug 04 08:07:47 2004 (41107D33)
f7d63000 f7d64b80 kdcom kdcom.dll Fri Aug 17 22:49:10 2001 (3B7D8346)
f7d65000 f7d66100 WMILIB WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f7d67000 f7d68580 intelide intelide.sys Wed Aug 04 07:59:40 2004 (41107B4C)
f7d69000 f7d6a700 dmload dmload.sys Fri Aug 17 22:58:15 2001 (3B7D8567)
f7d73000 f7d74100 swenum swenum.sys Wed Aug 04 07:58:41 2004 (41107B11)
f7d75000 f7d76280 USBD USBD.SYS Fri Aug 17 23:02:58 2001 (3B7D8682)
f7d77000 f7d78f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 22:49:37 2001 (3B7D8361)
f7d79000 f7d7a080 Beep Beep.SYS Fri Aug 17 22:47:33 2001 (3B7D82E5)
f7d7b000 f7d7c080 mnmdd mnmdd.SYS Fri Aug 17 22:57:28 2001 (3B7D8538)
f7d7d000 f7d7e080 RDPCDD RDPCDD.sys Fri Aug 17 22:46:56 2001 (3B7D82C0)
f7d81000 f7d83000 avgio avgio.sys unavailable (00000000)
f7d83000 f7d84100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f7d93000 f7d94b00 ParVdm ParVdm.SYS Fri Aug 17 22:49:49 2001 (3B7D836D)
f7e2b000 f7e2bd00 pciide pciide.sys Fri Aug 17 22:51:49 2001 (3B7D83E5)
f7e45000 f7e45d00 dxgthk dxgthk.sys Fri Aug 17 22:53:12 2001 (3B7D8438)
f7e96000 f7e96c00 audstub audstub.sys Fri Aug 17 22:59:40 2001 (3B7D85BC)
f7ede000 f7edeb80 Null Null.SYS Fri Aug 17 22:47:39 2001 (3B7D82EB)

Unloaded modules:
f7b73000 f7b78000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7651000 f7654000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

Unfortunately memory testers aren't perfect. The last dump has memory corruption with 89 errors, which is a sign of a RAM problem. Try running both sticks of RAM one at a time.

CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
!chkimg -lo 50 -d !nt
89 errors : !nt (805d83b0-805d843b)

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE

 

Instead of switching the two sticks of ram I've borrowed from a friend another piece of ram (the same type, DDR 400MHZ PC3200 but 1GB) and realized that nothing's changed...
So the only "improvement" that I've got during this days, after the first post, is that the pc is producing BSOD and doesn't simply restart like before... I'm starting to think that is a serious problem with the mobo or the cpu, something that I can't fix...
Anyway, I'm going to try formatting and reinstalling XP (deleting the partition and do the full format).
I'll let you know, cross some fingers for me

Danilo