Server 2K3 Crashes BugCheck 24 - DUMP DATA

Hi all,

We have a HP DL360 running Server 2003 R2 that crashes about once every 2 weeks or so. Any thoughts would be greatly appreciated!

Here is a sample dump analysis - they are all the same ie BugCheck 24

Regards,
Peter Madirazza

------------------------------------------------------------------


Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*Symbol information
Executable search path is:
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (4 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp2_gdr.070304-2240
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af9c8
Debug session time: Fri Jul 18 15:13:15.611 2008 (GMT+10)
System Uptime: 3 days 4:05:13.453
Loading Kernel Symbols
...............................................................................................................
Loading User Symbols

Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {19033d, f78deae4, f78de7e0, f7266b04}





Probably caused by : Ntfs.sys ( Ntfs!NtfsDeleteScb+9d )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 0019033d
Arg2: f78deae4
Arg3: f78de7e0
Arg4: f7266b04

Debugging Details:
------------------






EXCEPTION_RECORD: f78deae4 -- (.exr 0xfffffffff78deae4)
ExceptionAddress: f7266b04 (Ntfs!NtfsDeleteScb+0x0000009d)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 4702c140
Attempt to read from address 4702c140

CONTEXT: f78de7e0 -- (.cxr 0xfffffffff78de7e0)
eax=4702c120 ebx=8a1f9318 ecx=8a1f9300 edx=00000000 esi=f78debe0 edi=00000000
eip=f7266b04 esp=f78debac ebp=f78debbc iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
Ntfs!NtfsDeleteScb+0x9d:
f7266b04 8b4820 mov ecx,dword ptr [eax+20h] ds:0023:4702c140=????????
Resetting default scope

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: System

CURRENT_IRQL: 0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

READ_ADDRESS: 4702c140

BUGCHECK_STR: 0x24

LAST_CONTROL_TRANSFER: from f7269a9d to f7266b04

STACK_TEXT:
f78debbc f7269a9d 87614a88 f78d0705 e4c54d08 Ntfs!NtfsDeleteScb+0x9d
f78debd4 f723903a 87614a88 e4c54da0 00000000 Ntfs!NtfsRemoveScb+0x88
f78debf0 f72808e9 87614a88 e4c54cd8 00000000 Ntfs!NtfsPrepareFcbForRemoval+0x52
f78dec38 f7234137 87614a88 e4c54da0 00000000 Ntfs!NtfsTeardownStructures+0x62
f78dec64 f72740a9 87614a88 e4c54da0 00000000 Ntfs!NtfsDecrementCloseCounts+0xa9
f78decec f726e1d8 87614a88 e4c54da0 e4c54cd8 Ntfs!NtfsCommonClose+0x3a1
f78ded80 8082db08 00000000 00000000 8a78d020 Ntfs!NtfsFspClose+0xe2
f78dedac 80920833 00000000 00000000 00000000 nt!ExpWorkerThread+0xeb
f78deddc 8083fe9f 8082da4b 00000000 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_IP:
Ntfs!NtfsDeleteScb+9d
f7266b04 8b4820 mov ecx,dword ptr [eax+20h]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: Ntfs!NtfsDeleteScb+9d

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME: Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 45d6a04b

STACK_COMMAND: .cxr 0xfffffffff78de7e0 ; kb

FAILURE_BUCKET_ID: 0x24_Ntfs!NtfsDeleteScb+9d

BUCKET_ID: 0x24_Ntfs!NtfsDeleteScb+9d

Followup: MachineOwner
---------

 

Hi Arie, the server has ECC RAM and I am not seeing any evidence of any memory problems in the event logs or the HP diagnostics. Being a production server, it is required 24x7 except for scheduled maintenance periods that happen once a month. I will look at getting a memory check done then.

The other curious point is that the server doesn't actually blue screen, it simply will not shutdown (even remotely) or let you do anything on the console - the screen is blank.

Cheers,
Peter


Here is the modified version of the dump data

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*Symbol information
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (4 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp2_gdr.070304-2240
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af9c8
Debug session time: Fri Jul 18 15:13:15.611 2008 (GMT+10)
System Uptime: 3 days 4:05:13.453
Loading Kernel Symbols
...............................................................................................................
Loading User Symbols

Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {19033d, f78deae4, f78de7e0, f7266b04}





Probably caused by : Ntfs.sys ( Ntfs!NtfsDeleteScb+9d )

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 0019033d
Arg2: f78deae4
Arg3: f78de7e0
Arg4: f7266b04

Debugging Details:
------------------






EXCEPTION_RECORD: f78deae4 -- (.exr 0xfffffffff78deae4)
.exr 0xfffffffff78deae4
ExceptionAddress: f7266b04 (Ntfs!NtfsDeleteScb+0x0000009d)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 4702c140
Attempt to read from address 4702c140

CONTEXT: f78de7e0 -- (.cxr 0xfffffffff78de7e0)
.cxr 0xfffffffff78de7e0
eax=4702c120 ebx=8a1f9318 ecx=8a1f9300 edx=00000000 esi=f78debe0 edi=00000000
eip=f7266b04 esp=f78debac ebp=f78debbc iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
Ntfs!NtfsDeleteScb+0x9d:
f7266b04 8b4820 mov ecx,dword ptr [eax+20h] ds:0023:4702c140=????????
.cxr
Resetting default scope

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: System

CURRENT_IRQL: 0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

READ_ADDRESS: 4702c140

BUGCHECK_STR: 0x24

LAST_CONTROL_TRANSFER: from f7269a9d to f7266b04

STACK_TEXT:
f78debbc f7269a9d 87614a88 f78d0705 e4c54d08 Ntfs!NtfsDeleteScb+0x9d
f78debd4 f723903a 87614a88 e4c54da0 00000000 Ntfs!NtfsRemoveScb+0x88
f78debf0 f72808e9 87614a88 e4c54cd8 00000000 Ntfs!NtfsPrepareFcbForRemoval+0x52
f78dec38 f7234137 87614a88 e4c54da0 00000000 Ntfs!NtfsTeardownStructures+0x62
f78dec64 f72740a9 87614a88 e4c54da0 00000000 Ntfs!NtfsDecrementCloseCounts+0xa9
f78decec f726e1d8 87614a88 e4c54da0 e4c54cd8 Ntfs!NtfsCommonClose+0x3a1
f78ded80 8082db08 00000000 00000000 8a78d020 Ntfs!NtfsFspClose+0xe2
f78dedac 80920833 00000000 00000000 00000000 nt!ExpWorkerThread+0xeb
f78deddc 8083fe9f 8082da4b 00000000 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_IP:
Ntfs!NtfsDeleteScb+9d
f7266b04 8b4820 mov ecx,dword ptr [eax+20h]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: Ntfs!NtfsDeleteScb+9d

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME: Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 45d6a04b

STACK_COMMAND: .cxr 0xfffffffff78de7e0 ; kb

FAILURE_BUCKET_ID: 0x24_Ntfs!NtfsDeleteScb+9d

BUCKET_ID: 0x24_Ntfs!NtfsDeleteScb+9d

Followup: MachineOwner
---------

eax=ffdff13c ebx=f78deae4 ecx=00000000 edx=00000000 esi=ffdff120 edi=c0000005
eip=8087c480 esp=f78de5c8 ebp=f78de5e0 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
8087c480 5d pop ebp
ChildEBP RetAddr Args to Child
f78de5e0 f723f83d 00000024 0019033d f78deae4 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
f78de608 f728910e 87614a88 f78de634 8083a92d Ntfs!NtfsExceptionFilter+0x169 (FPO: [Non-Fpo])
f78de614 8083a92d f78de63c 00000000 f78de63c Ntfs!NtfsFspClose+0xfe (FPO: [SEH])
f78de63c 8083a488 f78deae4 f78ded70 f78de7e0 nt!_except_handler3+0x61 (FPO: [Uses EBP] [3,0,7])
f78de660 8083a45a f78deae4 f78ded70 f78de7e0 nt!ExecuteHandler2+0x26
f78de710 80816479 f78deae4 f78de7e0 4702c140 nt!ExecuteHandler+0x24
f78deac8 808346b4 f78deae4 00000000 f78deb38 nt!KiDispatchException+0x131 (FPO: [Non-Fpo])
f78deb30 80834668 f78debbc f7266b04 badb0d00 nt!CommonDispatchException+0x4a (FPO: [0,20,0])
f78deb7c 8083e3f9 f78dec28 00000030 00000000 nt!Kei386EoiHelper+0x186
f78debbc f7269a9d 87614a88 f78d0705 e4c54d08 nt!ExAcquireResourceSharedLite+0xf5 (FPO: [Non-Fpo])
f78debd4 f723903a 87614a88 e4c54da0 00000000 Ntfs!NtfsRemoveScb+0x88 (FPO: [Non-Fpo])
f78debf0 f72808e9 87614a88 e4c54cd8 00000000 Ntfs!NtfsPrepareFcbForRemoval+0x52 (FPO: [Non-Fpo])
f78dec38 f7234137 87614a88 e4c54da0 00000000 Ntfs!NtfsTeardownStructures+0x62 (FPO: [Non-Fpo])
f78dec64 f72740a9 87614a88 e4c54da0 00000000 Ntfs!NtfsDecrementCloseCounts+0xa9 (FPO: [Non-Fpo])
f78decec f726e1d8 87614a88 e4c54da0 e4c54cd8 Ntfs!NtfsCommonClose+0x3a1 (FPO: [Non-Fpo])
f78ded80 8082db08 00000000 00000000 8a78d020 Ntfs!NtfsFspClose+0xe2 (FPO: [Non-Fpo])
f78dedac 80920833 00000000 00000000 00000000 nt!ExpWorkerThread+0xeb (FPO: [Non-Fpo])
f78deddc 8083fe9f 8082da4b 00000000 00000000 nt!PspSystemThreadStartup+0x2e (FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
80800000 80a7a000 nt ntkrnlmp.exe Tue Mar 06 00:02:02 2007 (45EC14CA)
80a7a000 80aa6000 hal halmacpi.dll Sat Feb 17 16:48:26 2007 (45D6972A)
b8137000 b8162000 RDPWD RDPWD.SYS Sat Feb 17 16:44:38 2007 (45D69646)
b836a000 b8386880 naiavf5x naiavf5x.sys Fri Mar 10 12:28:29 2006 (4410D63D)
b8938000 b8943000 TDTCP TDTCP.SYS Sat Feb 17 16:44:32 2007 (45D69640)
b8de8000 b8e00000 mqac mqac.sys Sat Feb 17 16:44:18 2007 (45D69632)
b8e78000 b8ed5000 srv srv.sys Sat Feb 17 17:27:20 2007 (45D6A048)
b8fc5000 b9015000 HTTP HTTP.sys Sat Feb 17 17:28:12 2007 (45D6A07C)
b9245000 b9274000 RMCAST RMCAST.sys Thu May 08 23:27:43 2008 (4822FFCF)
b942c000 b9441000 Cdfs Cdfs.SYS Sat Feb 17 17:27:08 2007 (45D6A03C)
b9469000 b947a000 Fips Fips.SYS Sat Feb 17 17:26:33 2007 (45D6A019)
b947a000 b94f0000 mrxsmb mrxsmb.sys Sat Feb 17 17:28:15 2007 (45D6A07F)
b94f0000 b9520000 rdbss rdbss.sys Sat Feb 17 17:27:37 2007 (45D6A059)
b9530000 b953a000 ndisuio ndisuio.sys Sat Feb 17 16:58:25 2007 (45D69981)
b95c0000 b95ea000 afd afd.sys Sat Feb 17 17:28:16 2007 (45D6A080)
b95ea000 b961b000 netbt netbt.sys Sat Feb 17 17:28:57 2007 (45D6A0A9)
b961b000 b9645000 ipnat ipnat.sys Sat Feb 17 16:59:08 2007 (45D699AC)
b9645000 b96d5000 tcpip tcpip.sys Wed Oct 31 04:34:10 2007 (47276B12)
b96d5000 b96ee000 ipsec ipsec.sys Sat Feb 17 17:29:28 2007 (45D6A0C8)
b9826000 b983b000 usbhub usbhub.sys Sat Feb 17 17:13:05 2007 (45D69CF1)
ba03c000 ba046000 Dxapi Dxapi.sys Tue Mar 25 18:06:01 2003 (3E7FFFD9)
ba04c000 ba05c000 dump_HpCISSs2 dump_HpCISSs2.sys Thu Nov 02 07:58:28 2006 (45490A74)
ba05c000 ba0bb000 update update.sys Mon May 28 22:15:16 2007 (465AC7D4)
ba0bb000 ba0f2000 rdpdr rdpdr.sys Sat Feb 17 16:51:00 2007 (45D697C4)
ba0f2000 ba104000 raspptp raspptp.sys Sat Feb 17 17:29:20 2007 (45D6A0C0)
ba104000 ba11d000 ndiswan ndiswan.sys Sat Feb 17 17:29:22 2007 (45D6A0C2)
ba11d000 ba131000 rasl2tp rasl2tp.sys Sat Feb 17 17:29:02 2007 (45D6A0AE)
ba131000 ba168000 cpqteam cpqteam.sys Fri Nov 10 06:27:04 2006 (45538108)
ba168000 ba18f000 ks ks.sys Sat Feb 17 17:30:40 2007 (45D6A110)
ba18f000 ba1a3000 redbook redbook.sys Sat Feb 17 17:07:26 2007 (45D69B9E)
ba1a3000 ba1b8000 cdrom cdrom.sys Sat Feb 17 17:07:48 2007 (45D69BB4)
ba1b8000 ba1cd000 serial serial.sys Sat Feb 17 17:06:46 2007 (45D69B76)
ba1cd000 ba1e0000 i8042prt i8042prt.sys Sat Feb 17 17:30:40 2007 (45D6A110)
ba1e0000 ba1ff000 hpqilo2 hpqilo2.sys Sat Nov 18 05:13:02 2006 (455DFBAE)
ba1ff000 ba21b000 VIDEOPRT VIDEOPRT.SYS Sat Feb 17 17:10:30 2007 (45D69C56)
ba21b000 ba379000 ati2mtag ati2mtag.sys Wed Dec 07 14:44:40 2005 (43965AA8)
ba379000 ba3a3000 USBPORT USBPORT.SYS Sat Feb 17 17:12:59 2007 (45D69CEB)
ba888000 ba891000 raspti raspti.sys Sat Feb 17 16:59:23 2007 (45D699BB)
ba898000 ba8a3000 ptilink ptilink.sys Sat Feb 17 17:06:38 2007 (45D69B6E)
ba8a8000 ba8b3000 TDI TDI.SYS Sat Feb 17 17:01:19 2007 (45D69A2F)
ba8b8000 ba8c7000 raspppoe raspppoe.sys Sat Feb 17 16:59:23 2007 (45D699BB)
ba8c8000 ba8d1000 ndistapi ndistapi.sys Sat Feb 17 16:59:19 2007 (45D699B7)
ba8d8000 ba8e2000 serenum serenum.sys Sat Feb 17 17:06:44 2007 (45D69B74)
ba8e8000 ba8f2000 mouclass mouclass.sys Tue Mar 25 18:03:09 2003 (3E7FFF2D)
ba8f8000 ba903000 kbdclass kbdclass.sys Sat Feb 17 17:05:39 2007 (45D69B33)
ba908000 ba912000 dump_diskdump dump_diskdump.sys Sat Feb 17 17:07:44 2007 (45D69BB0)
bf800000 bf9d0000 win32k win32k.sys Wed Mar 19 22:31:40 2008 (47E0F99C)
bf9d0000 bf9e7000 dxg dxg.sys Sat Feb 17 17:14:39 2007 (45D69D4F)
bf9e7000 bfa27000 ati2dvag ati2dvag.dll Wed Dec 07 14:45:00 2005 (43965ABC)
bfa27000 bfa61000 ati2cqag ati2cqag.dll Wed Dec 07 13:44:46 2005 (43964C9E)
bfa61000 bfa97000 atikvmag atikvmag.dll Wed Dec 07 14:11:09 2005 (439652CD)
bffa0000 bffea000 ATMFD ATMFD.DLL Sun Feb 18 00:59:31 2007 (45D70A43)
f71d1000 f71f0000 Mup Mup.sys Sat Feb 17 17:27:41 2007 (45D6A05D)
f71f0000 f722f000 NDIS NDIS.sys Sat Feb 17 17:28:49 2007 (45D6A0A1)
f722f000 f72c4000 Ntfs Ntfs.sys Sat Feb 17 17:27:23 2007 (45D6A04B)
f72c4000 f7306000 bxvbdx bxvbdx.sys Thu Oct 19 04:06:22 2006 (45365F0E)
f7306000 f732c000 KSecDD KSecDD.sys Sat Feb 17 16:46:32 2007 (45D696B8)
f732c000 f7351000 fltmgr fltmgr.sys Sat Feb 17 16:51:08 2007 (45D697CC)
f7351000 f7364000 CLASSPNP CLASSPNP.SYS Sat Feb 17 17:28:16 2007 (45D6A080)
f7364000 f7382000 storport storport.sys Sat Feb 17 17:07:48 2007 (45D69BB4)
f7382000 f739f000 atapi atapi.sys Sat Feb 17 17:07:34 2007 (45D69BA6)
f739f000 f73c9000 volsnap volsnap.sys Sat Feb 17 17:08:23 2007 (45D69BD7)
f73c9000 f73f5000 dmio dmio.sys Sat Feb 17 17:10:44 2007 (45D69C64)
f73f5000 f741c000 ftdisk ftdisk.sys Sat Feb 17 17:08:05 2007 (45D69BC5)
f741c000 f7432000 pci pci.sys Sat Feb 17 16:59:03 2007 (45D699A7)
f7432000 f7466000 ACPI ACPI.sys Sat Feb 17 16:58:47 2007 (45D69997)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 18:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Sat Feb 17 16:58:57 2007 (45D699A1)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Sat Feb 17 17:07:32 2007 (45D69BA4)
f74b7000 f74c7000 MountMgr MountMgr.sys Sat Feb 17 17:05:35 2007 (45D69B2F)
f74c7000 f74d2000 PartMgr PartMgr.sys Sat Feb 17 17:29:25 2007 (45D6A0C5)
f74d7000 f74e7000 HpCISSs2 HpCISSs2.sys Thu Nov 02 07:58:28 2006 (45490A74)
f74e7000 f74f7000 disk disk.sys Sat Feb 17 17:07:51 2007 (45D69BB7)
f74f7000 f7503000 Dfs Dfs.sys Sat Feb 17 16:51:17 2007 (45D697D5)
f7507000 f7511000 crcdisk crcdisk.sys Sat Feb 17 17:09:50 2007 (45D69C2E)
f7547000 f7550000 hidusb hidusb.sys Tue Mar 25 18:10:17 2003 (3E8000D9)
f7557000 f7564000 wanarp wanarp.sys Sat Feb 17 16:59:17 2007 (45D699B5)
f7577000 f7586000 termdd termdd.sys Sat Feb 17 16:44:32 2007 (45D69640)
f7587000 f7594000 netbios netbios.sys Sat Feb 17 16:58:29 2007 (45D69985)
f75a7000 f75b4000 Npfs Npfs.SYS Sat Feb 17 16:50:36 2007 (45D697AC)
f75b7000 f75c0000 watchdog watchdog.sys Sat Feb 17 17:11:45 2007 (45D69CA1)
f75c7000 f75d2000 cpqcidrv cpqcidrv.sys Sat Oct 21 04:14:39 2006 (453903FF)
f75d7000 f75e2000 Msfs Msfs.SYS Sat Feb 17 16:50:33 2007 (45D697A9)
f75e7000 f75f0000 kbdhid kbdhid.sys Sat Feb 17 17:05:42 2007 (45D69B36)
f7607000 f7615000 HIDCLASS HIDCLASS.SYS Tue Mar 25 18:10:17 2003 (3E8000D9)
f7617000 f7625000 msgpc msgpc.sys Sat Feb 17 16:58:37 2007 (45D6998D)
f7647000 f7655460 mvstdi5x mvstdi5x.sys Thu Feb 03 06:16:00 2005 (420126F0)
f7657000 f7663000 vga vga.sys Sat Feb 17 17:10:30 2007 (45D69C56)
f7667000 f7677000 bxnd52x bxnd52x.sys Sat Jul 01 02:41:42 2006 (44A55446)
f7677000 f7685000 NDProxy NDProxy.SYS Sat Feb 17 16:59:21 2007 (45D699B9)
f7687000 f7696000 intelppm intelppm.sys Sat Feb 17 16:48:30 2007 (45D6972E)
f76b7000 f76c0000 mssmbios mssmbios.sys Sat Feb 17 16:59:12 2007 (45D699B0)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 18:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 18:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 18:04:46 2003 (3E7FFF8E)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 18:08:08 2003 (3E800058)
f773f000 f7747000 mouhid mouhid.sys Tue Mar 25 18:03:12 2003 (3E7FFF30)
f7757000 f775e000 dxgthk dxgthk.sys Tue Mar 25 18:05:52 2003 (3E7FFFD0)
f775f000 f7767000 EntDrv52 EntDrv52.sys Tue Aug 09 04:27:11 2005 (42F7A3FF)
f77c7000 f77cc180 usbuhci usbuhci.sys Sat Feb 17 17:13:02 2007 (45D69CEE)
f77cf000 f77d5b80 usbehci usbehci.sys Sat Feb 17 17:12:56 2007 (45D69CE8)
f77d7000 f77df000 audstub audstub.sys Tue Mar 25 18:09:12 2003 (3E800098)
f77e7000 f77ef000 Fs_Rec Fs_Rec.SYS Tue Mar 25 18:08:36 2003 (3E800074)
f77ef000 f77f6000 Null Null.SYS Tue Mar 25 18:03:05 2003 (3E7FFF29)
f77f7000 f77fe000 Beep Beep.SYS Tue Mar 25 18:03:04 2003 (3E7FFF28)
f77ff000 f7805300 HIDPARSE HIDPARSE.SYS Sat Feb 17 17:12:35 2007 (45D69CD3)
f7807000 f780f000 mnmdd mnmdd.SYS Tue Mar 25 18:07:53 2003 (3E800049)
f780f000 f7817000 RDPCDD RDPCDD.sys Tue Mar 25 18:03:05 2003 (3E7FFF29)
f7817000 f781f000 rasacd rasacd.sys Tue Mar 25 18:11:50 2003 (3E800136)
f781f000 f7826d80 usbccgp usbccgp.sys Sat Feb 17 17:13:08 2007 (45D69CF4)
f79a1000 f79a2280 swenum swenum.sys Sat Feb 17 17:05:56 2007 (45D69B44)
f79a3000 f79a4580 USBD USBD.SYS Tue Mar 25 18:10:39 2003 (3E8000EF)

Unloaded modules:
f76a7000 f76b5000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7597000 f75a0000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f77df000 f77e7000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7637000 f7641000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7627000 f7632000 Fdc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

Memory problem - probably not.


This is something I'd give PSS a ring about.

 

Thanks for the reply but what or who is PSS?

Cheers,
Peter

 

From the looks of it I think this a disk problem.

As suggested by Arie earlier, chkdsk should be run ASAP after proper backup.