Crash diagnosis - technique

Hi Guys,

I recently rebuilt a PC with leftover parts. It seems to be good and stable except whenever I access it by remote desktop or sometimes when its online downloading (wireless) it spontaneously crashes or restarts (not BSOD). It does this every hour or so.

Can I ask you if there is a technique for identifying the cause, how to root out the dodgy componant, program, OS? Is there some type of dump I can perform to identify the source of the crash?

Appreciate the help.

Splot

 

Wow, thanks guys, you fellas are really on the case - some other forums take all week to get one reply...

er - okayt I will disable the reboot and do the other thing with the dump logs - re the 3rd reply, you asked::

*Does the PSU have sufficient capacity for the components you have assembled and is it known to be 'good'?yes it has capacity, although it is a bit old (circa 2001) its a 350W driving 2 optical/2 HDD/MB/7600GT graphics card - hmmm

Is the memory compatible with the motherboard?Yes

Is the cooling OK - did you use Arctic Silver heat sink compound when fitting the CPU heatsink - are the fans running.Yes and Yes and Yes

Use Everest to checkout the temps and voltages of the system and post (Motherboard > Sensor)Stats below

Have you looked in Event Viewer for Errors flagged when the computer crashes or restarts? Double click on an Event to open and on the icon below the up/down arrows to copy to clipboard and paste in a post here.Don't know how - please explain

Set the computer up so that it does not restart on System Failure - Control Panel > System > Startup and Recovery > Settings and uncheck 'Automatically restart on System failure'. Also set up a kernel memory dump.OK can do the restart, how do I set up a kernal dump??

When/if you get a blue screen debug the memory dump and post the log hereWill do - please tell me how.

Thanks guys, will go start the above and pop back for your replies in an hour

Excellent.

 

Hi there, here you go

1. Everest stats - I can't fiund sensor under MB so I have done it manually

A) CPU
--------[ EVEREST Home Edition (c) 2003-2005 Lavalys, Inc. ]------------------------------------------------------------

Version EVEREST v2.20.405
Homepage http://www.lavalys.com/
Report Type Quick Report
Computer MICKEYS (Mickeys PC)
Generator Stuart
Operating System Microsoft Windows XP Professional 5.1.2600 (WinXP Retail)
Date 2008-03-10
Time 20:39


--------[ CPU ]---------------------------------------------------------------------------------------------------------

CPU Properties:
CPU Alias Manchester S939
CPU Stepping BH-E4
CPU Type DualCore AMD Athlon 64 X2, 2000 MHz (10 x 200) 3800+
Instruction Set x86, x86-64, MMX, 3DNow!, SSE, SSE2, SSE3
L1 Code Cache 64 KB (Parity)
L1 Data Cache 64 KB (ECC)
L2 Cache 512 KB (On-Die, ECC, Full-Speed)
Min / Max CPU Multiplier 4x / 10x

Multi CPU:
CPU #0 AMD Athlon(tm) 64 X2 Dual Core Processor 3800+, 2010 MHz
CPU #1 AMD Athlon(tm) 64 X2 Dual Core Processor 3800+, 2010 MHz
Motherboard ID OEM00000 PROD00000000

CPU Physical Info:
Core Voltage 1.100 - 1.350 V
Die Size 199 mm2
I/O Voltage 1.2 V + 2.5 V
Maximum Power 89 - 110 W (depending on clock speed)
Package Size 4.00 cm x 4.00 cm
Package Type 939 Pin uOPGA
Process Technology 11Mi, 90 nm, CMOS, Cu, SOI
Transistors 233.2 million

CPU Manufacturer:
Company Name Advanced Micro Devices, Inc.
Product Information http://www.amd.com/us-en/Processors/ProductInformation/0,,30_118,00.html

CPU Utilization:
CPU #1 / Core #1 0 %
CPU #1 / Core #2 2 %

2) Core Temperatures by CoreTemp Core 1 39C, Core 2 45C

3) Motherboard--------[ EVEREST Home Edition (c) 2003-2005 Lavalys, Inc. ]------------------------------------------------------------

Version EVEREST v2.20.405
Homepage http://www.lavalys.com/
Report Type Quick Report
Computer MICKEYS (Mickeys PC)
Generator Stuart
Operating System Microsoft Windows XP Professional 5.1.2600 (WinXP Retail)
Date 2008-03-10
Time 20:41


--------[ Motherboard ]-------------------------------------------------------------------------------------------------

Motherboard Properties:
Motherboard ID 06/30/2006-NF-CK804-6A61FE19C-00
Motherboard Name ECS nForce4-A939

Front Side Bus Properties:
Bus Type AMD Hammer
Real Clock 200 MHz
Effective Clock 200 MHz
HyperTransport Clock 800 MHz

Memory Bus Properties:
Bus Type DDR SDRAM
Bus Width 64-bit
Real Clock 201 MHz (DDR)
Effective Clock 402 MHz
Bandwidth 3216 MB/s

Motherboard Physical Info:
CPU Sockets/Slots 1 Socket 939
Expansion Slots 3 PCI, 2 PCI-E x1, 1 PCI-E x16
RAM Slots 4 DDR DIMM
Integrated Devices Audio, Gigabit LAN
Form Factor ATX
Motherboard Size 240 mm x 300 mm
Motherboard Chipset nForce4

Motherboard Manufacturer:
Company Name Elitegroup Computer Systems
Product Information http://www.ecs.com.tw/ECSWeb/Products/ProductList.aspx?CategoryID=1&MenuID=16&LanID=0
BIOS Download http://www.ecs.com.tw/ECSWeb/Downloads/Category_Download.aspx?Categoryid=1

4) DUMP LOG
Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Comment: 'Dr. Watson generated MiniDump'
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS
Debug session time: Sat Mar 8 01:02:08.000 2008 (GMT+0)
System Uptime: not available
Process Uptime: 0 days 0:13:52.000
...............................................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(f7c.864): Access violation - code c0000005 (first/second chance not available)
eax=01b6d200 ebx=00000000 ecx=00000002 edx=00000000 esi=02e14000 edi=01b6d224
eip=0043f71c esp=01b6d1e4 ebp=003cce40 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
*** ERROR: Module load completed but symbols could not be loaded for TudouVa.exe
TudouVa+0x3f71c:
0043f71c f3a5 rep movs dword ptr es:[edi],dword ptr [esi] es:0023:01b6d224=00000000 ds:0023:02e14000=????????
0:013> !analyze -v;r;kv;lmtn;.logclose;q
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll -
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

***** OS symbols are WRONG. Please fix symbols to do analysis.

*** ERROR: Symbol file could not be found. Defaulted to export symbols for kernel32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for advapi32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for wininet.dll -
*** ERROR: Module load completed but symbols could not be loaded for mfc80.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for user32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ole32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for mswsock.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ws2_32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for rpcrt4.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for msvcr80.dll -
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: kernel32!pNlsUserInfo ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: kernel32!pNlsUserInfo ***
*** ***
*************************************************************************

FAULTING_IP:
TudouVa+3f71c
0043f71c f3a5 rep movs dword ptr es:[edi],dword ptr [esi]

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
.exr 0xffffffffffffffff
ExceptionAddress: 0043f71c (TudouVa+0x0003f71c)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 02e14000
Attempt to read from address 02e14000

DEFAULT_BUCKET_ID: WRONG_SYMBOLS

PROCESS_NAME: TudouVa.exe

MODULE_NAME: TudouVa

FAULTING_MODULE: 7c900000 ntdll

DEBUG_FLR_IMAGE_TIMESTAMP: 4753908f

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

READ_ADDRESS: 02e14000

BUGCHECK_STR: ACCESS_VIOLATION

LAST_CONTROL_TRANSFER: from 00448c5a to 0043f71c

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
01b6d23c 00448c5a 003cce40 3c86615a 8059bf23 TudouVa+0x3f71c
01b6d2d4 00431b5e 8059bf93 00000000 003c7660 TudouVa+0x48c5a
00000000 00000000 00000000 00000000 00000000 TudouVa+0x31b5e


FAULTING_THREAD: 00000864

FOLLOWUP_IP:
TudouVa+3f71c
0043f71c f3a5 rep movs dword ptr es:[edi],dword ptr [esi]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: TudouVa+3f71c

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: TudouVa.exe

STACK_COMMAND: ~13s; .ecxr ; kb

BUCKET_ID: WRONG_SYMBOLS

FAILURE_BUCKET_ID: TudouVa.exe!base_address_c0000005_WRONG_SYMBOLS

Followup: MachineOwner
---------

eax=01b6d200 ebx=00000000 ecx=00000002 edx=00000000 esi=02e14000 edi=01b6d224
eip=0043f71c esp=01b6d1e4 ebp=003cce40 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
TudouVa+0x3f71c:
0043f71c f3a5 rep movs dword ptr es:[edi],dword ptr [esi] es:0023:01b6d224=00000000 ds:0023:02e14000=????????
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
01b6d23c 00448c5a 003cce40 3c86615a 8059bf23 TudouVa+0x3f71c
01b6d2d4 00431b5e 8059bf93 00000000 003c7660 TudouVa+0x48c5a
00000000 00000000 00000000 00000000 00000000 TudouVa+0x31b5e
start end module name
00390000 00399000 normaliz normaliz.dll Thu Jun 29 16:05:42 2006 (44A3EC46)
00400000 00539000 TudouVa TudouVa.exe Mon Dec 03 05:13:51 2007 (4753908F)
10000000 1000e000 upnpdll upnpdll.dll Thu Nov 15 09:26:06 2007 (473C10AE)
16080000 160a5000 mdnsNSP mdnsNSP.dll Thu Jul 05 18:44:37 2007 (468D2E05)
20000000 202c5000 xpsp2res xpsp2res.dll Wed Aug 04 08:56:41 2004 (411096B9)
42990000 429d5000 iertutil iertutil.dll Fri Dec 07 02:21:51 2007 (4758AE3F)
42b80000 42b8a000 jsproxy jsproxy.dll Fri Dec 07 02:21:47 2007 (4758AE3B)
42c10000 42cdf000 wininet wininet.dll Fri Dec 07 02:21:48 2007 (4758AE3C)
42cf0000 42e17000 urlmon urlmon.dll Fri Dec 07 02:21:48 2007 (4758AE3C)
5ad70000 5ada8000 uxtheme uxtheme.dll Wed Aug 04 08:56:43 2004 (411096BB)
5b860000 5b8b4000 netapi32 netapi32.dll Thu Aug 17 13:28:27 2006 (44E460EB)
629c0000 629c9000 lpk lpk.dll Wed Aug 04 08:56:26 2004 (411096AA)
63380000 633f8000 jscript jscript.dll Tue Oct 17 20:59:54 2006 (4535363A)
662b0000 66308000 hnetcfg hnetcfg.dll Wed Aug 04 08:56:16 2004 (411096A0)
71a50000 71a8f000 mswsock mswsock.dll Wed Aug 04 08:59:20 2004 (41109758)
71a90000 71a98000 wshtcpip wshtcpip.dll Wed Aug 04 08:57:49 2004 (411096FD)
71aa0000 71aa8000 ws2help ws2help.dll Wed Aug 04 08:57:39 2004 (411096F3)
71ab0000 71ac7000 ws2_32 ws2_32.dll Wed Aug 04 08:57:38 2004 (411096F2)
71bf0000 71c03000 samlib samlib.dll Wed Aug 04 08:56:29 2004 (411096AD)
722b0000 722b5000 sensapi sensapi.dll Wed Aug 04 08:56:28 2004 (411096AC)
74720000 7476b000 msctf msctf.dll Wed Aug 04 08:57:30 2004 (411096EA)
74980000 74a93000 msxml3 msxml3.dll Tue Jun 26 07:08:16 2007 (4680AD50)
74d90000 74dfb000 usp10 usp10.dll Wed Aug 04 08:56:42 2004 (411096BA)
755c0000 755ee000 msctfime msctfime.ime Wed Aug 04 08:57:31 2004 (411096EB)
75cf0000 75d81000 mlang mlang.dll Wed Aug 04 08:56:29 2004 (411096AD)
76390000 763ad000 imm32 imm32.dll Wed Aug 04 08:56:30 2004 (411096AE)
769c0000 76a73000 userenv userenv.dll Wed Aug 04 08:56:41 2004 (411096B9)
76b20000 76b31000 atl atl.dll Wed Aug 04 08:56:55 2004 (411096C7)
76b40000 76b6d000 winmm winmm.dll Wed Aug 04 08:57:10 2004 (411096D6)
76d40000 76d58000 mprapi mprapi.dll Wed Aug 04 08:56:47 2004 (411096BF)
76d60000 76d79000 iphlpapi iphlpapi.dll Fri May 19 13:59:41 2006 (446DC13D)
76e10000 76e35000 adsldpc adsldpc.dll Wed Aug 04 08:56:13 2004 (4110969D)
76e80000 76e8e000 rtutils rtutils.dll Wed Aug 04 08:56:36 2004 (411096B4)
76e90000 76ea2000 rasman rasman.dll Wed Aug 04 08:56:29 2004 (411096AD)
76eb0000 76edf000 tapi32 tapi32.dll Wed Aug 04 08:56:38 2004 (411096B6)
76ee0000 76f1c000 rasapi32 rasapi32.dll Wed Aug 04 08:56:25 2004 (411096A9)
76f20000 76f47000 dnsapi dnsapi.dll Mon Jun 26 18:37:10 2006 (44A01B46)
76f60000 76f8c000 wldap32 wldap32.dll Wed Aug 04 08:56:43 2004 (411096BB)
76fb0000 76fb8000 winrnr winrnr.dll Wed Aug 04 08:56:35 2004 (411096B3)
76fc0000 76fc6000 rasadhlp rasadhlp.dll Mon Jun 26 18:37:10 2006 (44A01B46)
76fd0000 7704f000 clbcatq clbcatq.dll Tue Jul 26 05:39:44 2005 (42E5BE90)
77050000 77115000 comres comres.dll Wed Aug 04 08:56:36 2004 (411096B4)
77120000 771ab000 oleaut32 oleaut32.dll Tue Dec 04 18:38:12 2007 (47559E94)
773d0000 774d3000 comctl32 comctl32.dll Fri Aug 25 16:45:55 2006 (44EF1B33)
774e0000 7761d000 ole32 ole32.dll Tue Jul 26 05:39:47 2005 (42E5BE93)
77920000 77a13000 setupapi setupapi.dll Wed Aug 04 08:56:32 2004 (411096B0)
77b40000 77b62000 apphelp apphelp.dll Wed Aug 04 08:56:36 2004 (411096B4)
77c00000 77c08000 version version.dll Wed Aug 04 08:56:39 2004 (411096B7)
77c10000 77c68000 msvcrt msvcrt.dll Wed Aug 04 08:59:14 2004 (41109752)
77c70000 77c93000 msv1_0 msv1_0.dll Wed Aug 04 08:59:11 2004 (4110974F)
77cc0000 77cf2000 activeds activeds.dll Wed Aug 04 08:56:03 2004 (41109693)
77dd0000 77e6b000 advapi32 advapi32.dll Wed Aug 04 08:56:23 2004 (411096A7)
77e70000 77f01000 rpcrt4 rpcrt4.dll Mon Jul 09 14:16:16 2007 (46923520)
77f10000 77f57000 gdi32 gdi32.dll Tue Jun 19 14:31:19 2007 (4677DAA7)
77f60000 77fd6000 shlwapi shlwapi.dll Thu Sep 14 09:31:29 2006 (45091361)
77fe0000 77ff1000 secur32 secur32.dll Wed Aug 04 08:56:49 2004 (411096C1)
78130000 781cb000 msvcr80 msvcr80.dll Sat Dec 02 06:50:32 2006 (45712238)
781d0000 782dd000 mfc80 mfc80.dll Fri Sep 23 08:54:36 2005 (4333B4BC)
7c420000 7c4a7000 msvcp80 msvcp80.dll Sat Dec 02 06:52:56 2006 (457122C8)
7c800000 7c8f5000 kernel32 kernel32.dll Mon Apr 16 16:52:53 2007 (46239BD5)
7c900000 7c9b0000 ntdll ntdll.dll Wed Aug 04 08:56:36 2004 (411096B4)
7c9c0000 7d1d7000 shell32 shell32.dll Fri Oct 26 04:33:59 2007 (47216027)
7e410000 7e4a0000 user32 user32.dll Thu Mar 08 15:36:28 2007 (45F02D7C)
Closing open log file c:\debuglog.txt


Thanks guys, hope this makes sense...

 

w Dump log - it just crashed and I had it set up for a Kernal dump - so hopefully this will means something...
Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Comment: 'Dr. Watson generated MiniDump'
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS
Debug session time: Sat Mar 8 01:02:08.000 2008 (GMT+0)
System Uptime: not available
Process Uptime: 0 days 0:13:52.000
...............................................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(f7c.864): Access violation - code c0000005 (first/second chance not available)
eax=01b6d200 ebx=00000000 ecx=00000002 edx=00000000 esi=02e14000 edi=01b6d224
eip=0043f71c esp=01b6d1e4 ebp=003cce40 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
*** ERROR: Module load completed but symbols could not be loaded for TudouVa.exe
TudouVa+0x3f71c:
0043f71c f3a5 rep movs dword ptr es:[edi],dword ptr [esi] es:0023:01b6d224=00000000 ds:0023:02e14000=????????
0:013> !analyze -v;r;kv;lmtn;.logclose;q
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll -
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

***** OS symbols are WRONG. Please fix symbols to do analysis.

*** ERROR: Symbol file could not be found. Defaulted to export symbols for kernel32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for advapi32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for wininet.dll -
*** ERROR: Module load completed but symbols could not be loaded for mfc80.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for user32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ole32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for mswsock.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ws2_32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for rpcrt4.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for msvcr80.dll -
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: kernel32!pNlsUserInfo ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: kernel32!pNlsUserInfo ***
*** ***
*************************************************************************

FAULTING_IP:
TudouVa+3f71c
0043f71c f3a5 rep movs dword ptr es:[edi],dword ptr [esi]

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
.exr 0xffffffffffffffff
ExceptionAddress: 0043f71c (TudouVa+0x0003f71c)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 02e14000
Attempt to read from address 02e14000

DEFAULT_BUCKET_ID: WRONG_SYMBOLS

PROCESS_NAME: TudouVa.exe

MODULE_NAME: TudouVa

FAULTING_MODULE: 7c900000 ntdll

DEBUG_FLR_IMAGE_TIMESTAMP: 4753908f

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

READ_ADDRESS: 02e14000

BUGCHECK_STR: ACCESS_VIOLATION

LAST_CONTROL_TRANSFER: from 00448c5a to 0043f71c

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
01b6d23c 00448c5a 003cce40 3c86615a 8059bf23 TudouVa+0x3f71c
01b6d2d4 00431b5e 8059bf93 00000000 003c7660 TudouVa+0x48c5a
00000000 00000000 00000000 00000000 00000000 TudouVa+0x31b5e


FAULTING_THREAD: 00000864

FOLLOWUP_IP:
TudouVa+3f71c
0043f71c f3a5 rep movs dword ptr es:[edi],dword ptr [esi]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: TudouVa+3f71c

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: TudouVa.exe

STACK_COMMAND: ~13s; .ecxr ; kb

BUCKET_ID: WRONG_SYMBOLS

FAILURE_BUCKET_ID: TudouVa.exe!base_address_c0000005_WRONG_SYMBOLS

Followup: MachineOwner
---------

eax=01b6d200 ebx=00000000 ecx=00000002 edx=00000000 esi=02e14000 edi=01b6d224
eip=0043f71c esp=01b6d1e4 ebp=003cce40 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
TudouVa+0x3f71c:
0043f71c f3a5 rep movs dword ptr es:[edi],dword ptr [esi] es:0023:01b6d224=00000000 ds:0023:02e14000=????????
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
01b6d23c 00448c5a 003cce40 3c86615a 8059bf23 TudouVa+0x3f71c
01b6d2d4 00431b5e 8059bf93 00000000 003c7660 TudouVa+0x48c5a
00000000 00000000 00000000 00000000 00000000 TudouVa+0x31b5e
start end module name
00390000 00399000 normaliz normaliz.dll Thu Jun 29 16:05:42 2006 (44A3EC46)
00400000 00539000 TudouVa TudouVa.exe Mon Dec 03 05:13:51 2007 (4753908F)
10000000 1000e000 upnpdll upnpdll.dll Thu Nov 15 09:26:06 2007 (473C10AE)
16080000 160a5000 mdnsNSP mdnsNSP.dll Thu Jul 05 18:44:37 2007 (468D2E05)
20000000 202c5000 xpsp2res xpsp2res.dll Wed Aug 04 08:56:41 2004 (411096B9)
42990000 429d5000 iertutil iertutil.dll Fri Dec 07 02:21:51 2007 (4758AE3F)
42b80000 42b8a000 jsproxy jsproxy.dll Fri Dec 07 02:21:47 2007 (4758AE3B)
42c10000 42cdf000 wininet wininet.dll Fri Dec 07 02:21:48 2007 (4758AE3C)
42cf0000 42e17000 urlmon urlmon.dll Fri Dec 07 02:21:48 2007 (4758AE3C)
5ad70000 5ada8000 uxtheme uxtheme.dll Wed Aug 04 08:56:43 2004 (411096BB)
5b860000 5b8b4000 netapi32 netapi32.dll Thu Aug 17 13:28:27 2006 (44E460EB)
629c0000 629c9000 lpk lpk.dll Wed Aug 04 08:56:26 2004 (411096AA)
63380000 633f8000 jscript jscript.dll Tue Oct 17 20:59:54 2006 (4535363A)
662b0000 66308000 hnetcfg hnetcfg.dll Wed Aug 04 08:56:16 2004 (411096A0)
71a50000 71a8f000 mswsock mswsock.dll Wed Aug 04 08:59:20 2004 (41109758)
71a90000 71a98000 wshtcpip wshtcpip.dll Wed Aug 04 08:57:49 2004 (411096FD)
71aa0000 71aa8000 ws2help ws2help.dll Wed Aug 04 08:57:39 2004 (411096F3)
71ab0000 71ac7000 ws2_32 ws2_32.dll Wed Aug 04 08:57:38 2004 (411096F2)
71bf0000 71c03000 samlib samlib.dll Wed Aug 04 08:56:29 2004 (411096AD)
722b0000 722b5000 sensapi sensapi.dll Wed Aug 04 08:56:28 2004 (411096AC)
74720000 7476b000 msctf msctf.dll Wed Aug 04 08:57:30 2004 (411096EA)
74980000 74a93000 msxml3 msxml3.dll Tue Jun 26 07:08:16 2007 (4680AD50)
74d90000 74dfb000 usp10 usp10.dll Wed Aug 04 08:56:42 2004 (411096BA)
755c0000 755ee000 msctfime msctfime.ime Wed Aug 04 08:57:31 2004 (411096EB)
75cf0000 75d81000 mlang mlang.dll Wed Aug 04 08:56:29 2004 (411096AD)
76390000 763ad000 imm32 imm32.dll Wed Aug 04 08:56:30 2004 (411096AE)
769c0000 76a73000 userenv userenv.dll Wed Aug 04 08:56:41 2004 (411096B9)
76b20000 76b31000 atl atl.dll Wed Aug 04 08:56:55 2004 (411096C7)
76b40000 76b6d000 winmm winmm.dll Wed Aug 04 08:57:10 2004 (411096D6)
76d40000 76d58000 mprapi mprapi.dll Wed Aug 04 08:56:47 2004 (411096BF)
76d60000 76d79000 iphlpapi iphlpapi.dll Fri May 19 13:59:41 2006 (446DC13D)
76e10000 76e35000 adsldpc adsldpc.dll Wed Aug 04 08:56:13 2004 (4110969D)
76e80000 76e8e000 rtutils rtutils.dll Wed Aug 04 08:56:36 2004 (411096B4)
76e90000 76ea2000 rasman rasman.dll Wed Aug 04 08:56:29 2004 (411096AD)
76eb0000 76edf000 tapi32 tapi32.dll Wed Aug 04 08:56:38 2004 (411096B6)
76ee0000 76f1c000 rasapi32 rasapi32.dll Wed Aug 04 08:56:25 2004 (411096A9)
76f20000 76f47000 dnsapi dnsapi.dll Mon Jun 26 18:37:10 2006 (44A01B46)
76f60000 76f8c000 wldap32 wldap32.dll Wed Aug 04 08:56:43 2004 (411096BB)
76fb0000 76fb8000 winrnr winrnr.dll Wed Aug 04 08:56:35 2004 (411096B3)
76fc0000 76fc6000 rasadhlp rasadhlp.dll Mon Jun 26 18:37:10 2006 (44A01B46)
76fd0000 7704f000 clbcatq clbcatq.dll Tue Jul 26 05:39:44 2005 (42E5BE90)
77050000 77115000 comres comres.dll Wed Aug 04 08:56:36 2004 (411096B4)
77120000 771ab000 oleaut32 oleaut32.dll Tue Dec 04 18:38:12 2007 (47559E94)
773d0000 774d3000 comctl32 comctl32.dll Fri Aug 25 16:45:55 2006 (44EF1B33)
774e0000 7761d000 ole32 ole32.dll Tue Jul 26 05:39:47 2005 (42E5BE93)
77920000 77a13000 setupapi setupapi.dll Wed Aug 04 08:56:32 2004 (411096B0)
77b40000 77b62000 apphelp apphelp.dll Wed Aug 04 08:56:36 2004 (411096B4)
77c00000 77c08000 version version.dll Wed Aug 04 08:56:39 2004 (411096B7)
77c10000 77c68000 msvcrt msvcrt.dll Wed Aug 04 08:59:14 2004 (41109752)
77c70000 77c93000 msv1_0 msv1_0.dll Wed Aug 04 08:59:11 2004 (4110974F)
77cc0000 77cf2000 activeds activeds.dll Wed Aug 04 08:56:03 2004 (41109693)
77dd0000 77e6b000 advapi32 advapi32.dll Wed Aug 04 08:56:23 2004 (411096A7)
77e70000 77f01000 rpcrt4 rpcrt4.dll Mon Jul 09 14:16:16 2007 (46923520)
77f10000 77f57000 gdi32 gdi32.dll Tue Jun 19 14:31:19 2007 (4677DAA7)
77f60000 77fd6000 shlwapi shlwapi.dll Thu Sep 14 09:31:29 2006 (45091361)
77fe0000 77ff1000 secur32 secur32.dll Wed Aug 04 08:56:49 2004 (411096C1)
78130000 781cb000 msvcr80 msvcr80.dll Sat Dec 02 06:50:32 2006 (45712238)
781d0000 782dd000 mfc80 mfc80.dll Fri Sep 23 08:54:36 2005 (4333B4BC)
7c420000 7c4a7000 msvcp80 msvcp80.dll Sat Dec 02 06:52:56 2006 (457122C8)
7c800000 7c8f5000 kernel32 kernel32.dll Mon Apr 16 16:52:53 2007 (46239BD5)
7c900000 7c9b0000 ntdll ntdll.dll Wed Aug 04 08:56:36 2004 (411096B4)
7c9c0000 7d1d7000 shell32 shell32.dll Fri Oct 26 04:33:59 2007 (47216027)
7e410000 7e4a0000 user32 user32.dll Thu Mar 08 15:36:28 2007 (45F02D7C)
Closing open log file c:\debuglog.txt

 

Hi Pete, I paid an unconventional visit to PC World eek this morning and got an exact copy of the MoBo, a new PSU and a new wireless adapter (the Linksys has always been a bit suspect) - all in £100.

I've been running the system for a couple of hours now and no crash so I think I may have got the dodgy componant.

Thanks to you guys for pointing out that old bits might make a cheap computer but not a good computer.

Best regards Splot