2003 SP1 BSOD and Reboot Dumps

Hi,
One of our 2003 servers has been rebooting randomly over the last couple of weeks. It started out as once every few days. Lately it's happening more often. Ninety percent of the time it is during the middle of the night or evening... a quiet time, not during peak usage. I've changed the memory and power supply. Disabled all non microsoft services, anti-virus etc for a while with no change. Last night was the worst yet, it rebooted 5 times on average 2 hours apart between 9:00 pm - 5:00 am Yet today it's been running fine since 5:00 am with no reboots. The MoBo is an Asus PR-DLS533 with dual 2.4ghz Xeons. We have 50 other servers with identical hardware and software configs with no problems. Below are the dumps from last night. I have others from the last two weeks if needed. They are all a little different with ntkrnlmp.exe being mentioned the most before last night.
Any assistance is greatly appreciated.
Thanks
Lyle

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.5.0003.7
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\sgs dumps\Mini113005-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: LanManNt, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp1_rtm.050324-1447
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af988
Debug session time: Wed Nov 30 21:08:08.138 2005 (GMT-7)
System Uptime: 0 days 22:00:54.515
Loading Kernel Symbols
.......................................................................................................
Loading unloaded module list
..
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {e800e8, 1b, 0, 8083f083}

Probably caused by : Npfs.SYS ( Npfs!NpQueryClientProcess+64 )

Followup: MachineOwner
---------

3: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00e800e8, memory referenced
Arg2: 0000001b, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 8083f083, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: 00e800e8

CURRENT_IRQL: 1b

FAULTING_IP:
nt!KeWaitForSingleObject+16a
8083f083 803a02 cmp byte ptr [edx],0x2

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 808412ab to 8083f083

TRAP_FRAME: b8ddbac8 -- (.trap ffffffffb8ddbac8)
.trap ffffffffb8ddbac8
ErrCode = 00000000
eax=00000000 ebx=8a20a0c8 ecx=f7737538 edx=00e800e8 esi=8a20a020 edi=8a20a098
eip=8083f083 esp=b8ddbb3c ebp=b8ddbb7c iopl=0 nv up ei pl zr na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!KeWaitForSingleObject+0x16a:
8083f083 803a02 cmp byte ptr [edx],0x2 ds:0023:00e800e8=??
.trap
Resetting default scope

STACK_TEXT:
b8ddbb7c 808412ab 00e800e8 0000001b 00000000 nt!KeWaitForSingleObject+0x16a
b8ddbbb4 80841266 00000008 00000000 8953a318 nt!ExpWaitForResource+0x30
b8ddbbd4 ba992a00 8a0ed27c 00000001 8953a318 nt!ExAcquireResourceExclusiveLite+0x8d
b8ddbc00 ba993349 89fce718 8953a318 89fba400 Npfs!NpQueryClientProcess+0x64
b8ddbc20 ba99348b 89fce718 8953a318 8953a318 Npfs!NpCommonFileSystemControl+0x161
b8ddbc38 8083f9d0 89fce718 8953a318 8936a1f0 Npfs!NpFsdFileSystemControl+0x1d
b8ddbc4c 8092d3b9 8953a388 8a20c4b8 8953a318 nt!IofCallDriver+0x45
b8ddbc60 8092e81b 89fce718 8953a318 8a20c4b8 nt!IopSynchronousServiceTail+0x10b
b8ddbd00 80924017 00000d78 00000eb4 00000000 nt!IopXxxControlFile+0x5db
b8ddbd34 80834d3f 00000d78 00000eb4 00000000 nt!NtFsControlFile+0x2a
b8ddbd34 7c82ed54 00000d78 00000eb4 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
010cfcf0 00000000 00000000 00000000 00000000 0x7c82ed54


FOLLOWUP_IP:
Npfs!NpQueryClientProcess+64
ba992a00 8b4df0 mov ecx,[ebp-0x10]

SYMBOL_STACK_INDEX: 3

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: Npfs!NpQueryClientProcess+64

MODULE_NAME: Npfs

IMAGE_NAME: Npfs.SYS

DEBUG_FLR_IMAGE_TIMESTAMP: 42435b8c

STACK_COMMAND: .trap ffffffffb8ddbac8 ; kb

FAILURE_BUCKET_ID: 0xA_Npfs!NpQueryClientProcess+64

BUCKET_ID: 0xA_Npfs!NpQueryClientProcess+64

Followup: MachineOwner
---------

eax=f773713c ebx=0000001b ecx=00000001 edx=40000000 esi=f7737120 edi=00e800e8
eip=80837ed5 esp=b8ddbab0 ebp=b8ddbac8 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x2a7:
80837ed5 833d00ee8a8000 cmp dword ptr [nt!KiFreezeFlag (808aee00)],0x0 ds:0023:808aee00=????????
ChildEBP RetAddr Args to Child
b8ddbac8 8083f083 badb0d00 00e800e8 00000001 nt!KiTrap0E+0x2a7 (FPO: [0,0] TrapFrame @ b8ddbac8)
b8ddbb7c 808412ab 00e800e8 0000001b 00000000 nt!KeWaitForSingleObject+0x16a (FPO: [Non-Fpo])
b8ddbbb4 80841266 00000008 00000000 8953a318 nt!ExpWaitForResource+0x30 (FPO: [Non-Fpo])
b8ddbbd4 ba992a00 8a0ed27c 00000001 8953a318 nt!ExAcquireResourceExclusiveLite+0x8d (FPO: [Non-Fpo])
b8ddbc00 ba993349 89fce718 8953a318 89fba400 Npfs!NpQueryClientProcess+0x64 (FPO: [Non-Fpo])
b8ddbc20 ba99348b 89fce718 8953a318 8953a318 Npfs!NpCommonFileSystemControl+0x161 (FPO: [Non-Fpo])
b8ddbc38 8083f9d0 89fce718 8953a318 8936a1f0 Npfs!NpFsdFileSystemControl+0x1d (FPO: [Non-Fpo])
b8ddbc4c 8092d3b9 8953a388 8a20c4b8 8953a318 nt!IofCallDriver+0x45 (FPO: [Non-Fpo])
b8ddbc60 8092e81b 89fce718 8953a318 8a20c4b8 nt!IopSynchronousServiceTail+0x10b (FPO: [Non-Fpo])
b8ddbd00 80924017 00000d78 00000eb4 00000000 nt!IopXxxControlFile+0x5db (FPO: [Non-Fpo])
b8ddbd34 80834d3f 00000d78 00000eb4 00000000 nt!NtFsControlFile+0x2a (FPO: [Non-Fpo])
b8ddbd34 7c82ed54 00000d78 00000eb4 00000000 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ b8ddbd64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
010cfcf0 00000000 00000000 00000000 00000000 0x7c82ed54
start end module name
80800000 80a75000 nt ntkrnlmp.exe Thu Mar 24 17:42:08 2005 (42435E60)
80a75000 80aa1000 hal halaacpi.dll Thu Mar 24 17:28:37 2005 (42435B35)
b8601000 b862e000 RDPWD RDPWD.SYS Wed Jun 15 09:33:14 2005 (42B04A3A)
b87e6000 b87f1000 TDTCP TDTCP.SYS Thu Mar 24 17:27:15 2005 (42435AE3)
b8d36000 b8d94000 srv srv.sys Tue May 03 20:44:01 2005 (427836F1)
b8fc4000 b9001000 TmXPFlt TmXPFlt.sys Fri Feb 18 04:04:33 2005 (4215CBC1)
b9001000 b90ebf60 VsapiNT VsapiNT.sys Fri Feb 18 03:43:07 2005 (4215C6BB)
b91b4000 b91bd000 ndisuio ndisuio.sys Thu Mar 24 17:33:16 2005 (42435C4C)
b922c000 b9241000 Cdfs Cdfs.SYS Thu Mar 24 17:40:55 2005 (42435E17)
ba342000 ba353000 Fips Fips.SYS Thu Mar 24 17:40:33 2005 (42435E01)
ba383000 ba38f000 tmpreflt tmpreflt.sys Fri Feb 18 04:04:32 2005 (4215CBC0)
ba3a3000 ba3ad000 Dxapi Dxapi.sys Tue Mar 25 00:06:01 2003 (3E7FFFD9)
ba3b3000 ba3be000 dump_dpti2o dump_dpti2o.sys Sun Nov 14 15:01:04 2004 (4197D5A0)
ba3c3000 ba3cd000 dump_diskdump dump_diskdump.sys Thu Mar 24 17:28:56 2005 (42435B48)
ba3f3000 ba469000 mrxsmb mrxsmb.sys Thu Mar 24 17:41:13 2005 (42435E29)
ba469000 ba499000 rdbss rdbss.sys Thu Mar 24 17:40:49 2005 (42435E11)
ba499000 ba4c3000 afd afd.sys Thu Mar 24 17:40:43 2005 (42435E0B)
ba4c3000 ba4f4000 netbt netbt.sys Thu Mar 24 17:40:31 2005 (42435DFF)
ba4f4000 ba555000 tcpip tcpip.sys Thu Mar 24 17:40:31 2005 (42435DFF)
ba555000 ba56e000 ipsec ipsec.sys Thu Mar 24 17:40:49 2005 (42435E11)
ba5b6000 ba5bd000 parvdm parvdm.sys Tue Mar 25 00:03:49 2003 (3E7FFF55)
ba5ce000 ba5d5000 dxgthk dxgthk.sys Tue Mar 25 00:05:52 2003 (3E7FFFD0)
ba65d000 ba671000 usbhub usbhub.sys Thu Mar 24 17:30:46 2005 (42435BB6)
ba711000 ba751000 update update.sys Thu Mar 24 17:40:27 2005 (42435DFB)
ba751000 ba788000 rdpdr rdpdr.sys Thu Mar 24 17:30:20 2005 (42435B9C)
ba788000 ba79b000 raspptp raspptp.sys Thu Mar 24 17:40:43 2005 (42435E0B)
ba79b000 ba7b5000 ndiswan ndiswan.sys Thu Mar 24 17:40:46 2005 (42435E0E)
ba7b5000 ba7ca000 rasl2tp rasl2tp.sys Thu Mar 24 17:40:29 2005 (42435DFD)
ba7ca000 ba7f4000 USBPORT USBPORT.SYS Thu Mar 24 17:30:43 2005 (42435BB3)
ba7f4000 ba81c000 ks ks.sys Thu Mar 24 17:41:03 2005 (42435E1F)
ba81c000 ba830000 redbook redbook.sys Thu Mar 24 17:28:46 2005 (42435B3E)
ba830000 ba845000 cdrom cdrom.sys Thu Mar 24 17:28:57 2005 (42435B49)
ba845000 ba858000 i8042prt i8042prt.sys Thu Mar 24 17:41:05 2005 (42435E21)
ba858000 ba86d000 serial serial.sys Thu Mar 24 17:28:29 2005 (42435B2D)
ba86d000 ba885000 parport parport.sys Thu Mar 24 17:28:25 2005 (42435B29)
ba885000 ba8a0000 VIDEOPRT VIDEOPRT.SYS Thu Mar 24 17:29:53 2005 (42435B81)
ba8a0000 ba8f3d80 ati2mpad ati2mpad.sys Thu Jul 18 19:13:20 2002 (3D3767B0)
ba8f4000 ba91c000 e1000325 e1000325.sys Wed Jun 29 11:49:03 2005 (42C2DF0F)
ba92c000 ba93a000 HIDCLASS HIDCLASS.SYS Tue Mar 25 00:10:17 2003 (3E8000D9)
ba93c000 ba945000 hidusb hidusb.sys Tue Mar 25 00:10:17 2003 (3E8000D9)
ba95c000 ba969000 netbios netbios.sys Thu Mar 24 17:33:21 2005 (42435C51)
ba96c000 ba979000 wanarp wanarp.sys Thu Mar 24 17:34:07 2005 (42435C7F)
ba97c000 ba98a000 msgpc msgpc.sys Thu Mar 24 17:33:31 2005 (42435C5B)
ba98c000 ba999000 Npfs Npfs.SYS Thu Mar 24 17:30:04 2005 (42435B8C)
ba99c000 ba9a7000 Msfs Msfs.SYS Thu Mar 24 17:30:04 2005 (42435B8C)
ba9ac000 ba9b8000 vga vga.sys Thu Mar 24 17:29:54 2005 (42435B82)
bf800000 bf9cf000 win32k win32k.sys Thu Mar 24 17:40:09 2005 (42435DE9)
bf9cf000 bf9e5000 dxg dxg.sys Thu Mar 24 17:27:25 2005 (42435AED)
bf9e5000 bfa3b680 ati2drad ati2drad.dll Thu Mar 24 19:30:34 2005 (424377CA)
f7144000 f7163000 Mup Mup.sys Thu Mar 24 17:40:49 2005 (42435E11)
f7163000 f7199000 NDIS NDIS.sys Thu Mar 24 17:40:26 2005 (42435DFA)
f7199000 f722e000 Ntfs Ntfs.sys Thu Mar 24 17:40:29 2005 (42435DFD)
f722e000 f7255000 KSecDD KSecDD.sys Thu Mar 24 17:28:53 2005 (42435B45)
f7255000 f731b000 dmboot dmboot.sys Thu Mar 24 17:30:03 2005 (42435B8B)
f731b000 f7340000 fltmgr fltmgr.sys Thu Mar 24 17:30:25 2005 (42435BA1)
f7340000 f7353000 CLASSPNP CLASSPNP.SYS Thu Mar 24 17:40:23 2005 (42435DF7)
f7353000 f7364000 symmpi symmpi.sys Mon Dec 13 14:03:14 2004 (41BE0392)
f7364000 f7383000 SCSIPORT SCSIPORT.SYS Thu Mar 24 17:40:26 2005 (42435DFA)
f7383000 f739f000 atapi atapi.sys Thu Mar 24 17:28:49 2005 (42435B41)
f739f000 f73c9000 volsnap volsnap.sys Thu Mar 24 17:29:10 2005 (42435B56)
f73c9000 f73f5000 dmio dmio.sys Thu Mar 24 17:30:02 2005 (42435B8A)
f73f5000 f741c000 ftdisk ftdisk.sys Thu Mar 24 17:29:00 2005 (42435B4C)
f741c000 f7432000 pci pci.sys Thu Mar 24 17:34:14 2005 (42435C86)
f7432000 f7466000 ACPI ACPI.sys Thu Mar 24 17:34:09 2005 (42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 00:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 00:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Thu Mar 24 17:28:48 2005 (42435B40)
f74b7000 f74c7000 MountMgr MountMgr.sys Thu Mar 24 17:27:23 2005 (42435AEB)
f74c7000 f74d2000 PartMgr PartMgr.sys Thu Mar 24 17:40:34 2005 (42435E02)
f74d7000 f74e2000 dpti2o dpti2o.sys Sun Nov 14 15:01:04 2004 (4197D5A0)
f74e7000 f74f7000 disk disk.sys Thu Mar 24 17:28:58 2005 (42435B4A)
f74f7000 f7503000 Dfs Dfs.sys Thu Mar 24 17:30:28 2005 (42435BA4)
f7507000 f7511000 crcdisk crcdisk.sys Thu Mar 24 17:29:40 2005 (42435B74)
f7557000 f7566000 termdd termdd.sys Thu Mar 24 17:27:15 2005 (42435AE3)
f7577000 f7581000 mouclass mouclass.sys Tue Mar 25 00:03:09 2003 (3E7FFF2D)
f7587000 f7590000 mssmbios mssmbios.sys Thu Mar 24 17:34:14 2005 (42435C86)
f75a7000 f75b0000 raspti raspti.sys Thu Mar 24 17:34:16 2005 (42435C88)
f75b7000 f75c0000 ndistapi ndistapi.sys Thu Mar 24 17:34:11 2005 (42435C83)
f75c7000 f75d2000 fdc fdc.sys Thu Mar 24 17:28:43 2005 (42435B3B)
f75e7000 f75f2000 TDI TDI.SYS Thu Mar 24 17:35:34 2005 (42435CD6)
f7607000 f7616000 raspppoe raspppoe.sys Thu Mar 24 17:34:16 2005 (42435C88)
f7627000 f7631000 kbdclass kbdclass.sys Tue Mar 25 00:03:10 2003 (3E7FFF2E)
f7637000 f7646000 intelppm intelppm.sys Thu Mar 24 17:28:40 2005 (42435B38)
f7647000 f7651000 serenum serenum.sys Thu Mar 24 17:28:27 2005 (42435B2B)
f7667000 f7675000 NDProxy NDProxy.SYS Thu Mar 24 17:34:13 2005 (42435C85)
f7687000 f7692000 ptilink ptilink.sys Thu Mar 24 17:28:25 2005 (42435B29)
f76a7000 f76b1000 flpydisk flpydisk.sys Tue Mar 25 00:04:32 2003 (3E7FFF80)
f76b7000 f76c0000 watchdog watchdog.sys Thu Mar 24 17:30:19 2005 (42435B9B)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 00:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 00:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 00:04:46 2003 (3E7FFF8E)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 00:08:08 2003 (3E800058)
f77af000 f77b3400 usbohci usbohci.sys Thu Mar 24 17:30:45 2005 (42435BB5)
f77b7000 f77bf000 audstub audstub.sys Tue Mar 25 00:09:12 2003 (3E800098)
f77d7000 f77df000 Fs_Rec Fs_Rec.SYS Tue Mar 25 00:08:36 2003 (3E800074)
f77df000 f77e6000 Null Null.SYS Tue Mar 25 00:03:05 2003 (3E7FFF29)
f77e7000 f77ee000 Beep Beep.SYS Tue Mar 25 00:03:04 2003 (3E7FFF28)
f77ef000 f77f7000 mnmdd mnmdd.SYS Tue Mar 25 00:07:53 2003 (3E800049)
f77f7000 f77ff000 RDPCDD RDPCDD.sys Tue Mar 25 00:03:05 2003 (3E7FFF29)
f77ff000 f7807000 rasacd rasacd.sys Tue Mar 25 00:11:50 2003 (3E800136)
f7807000 f780d300 HIDPARSE HIDPARSE.SYS Thu Mar 24 17:30:36 2005 (42435BAC)
f780f000 f7817000 mouhid mouhid.sys Tue Mar 25 00:03:12 2003 (3E7FFF30)
f799f000 f79a0280 swenum swenum.sys Thu Mar 24 17:27:42 2005 (42435AFE)
f79a5000 f79a6580 USBD USBD.SYS Tue Mar 25 00:10:39 2003 (3E8000EF)

Unloaded modules:
ba94c000 ba95a000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f77cf000 f77d7000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt
________________________________________

 

2003 SP1 BSOD and Reboot Dump 2

Number 2

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.5.0003.7
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\sgs dumps\Mini113005-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: LanManNt, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp1_rtm.050324-1447
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af988
Debug session time: Wed Nov 30 22:21:20.890 2005 (GMT-7)
System Uptime: 0 days 1:11:31.109
Loading Kernel Symbols
.......................................................................................................
Loading unloaded module list
..
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, 8092b1f4, f78a6b04, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExpAllocateHandleTableEntry+172 )

Followup: MachineOwner
---------

2: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8092b1f4, The address that the exception occurred at
Arg3: f78a6b04, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
nt!ExpAllocateHandleTableEntry+172
8092b1f4 8b4804 mov ecx,[eax+0x4]

TRAP_FRAME: f78a6b04 -- (.trap fffffffff78a6b04)
.trap fffffffff78a6b04
ErrCode = 00000000
eax=00000000 ebx=001f0003 ecx=00000011 edx=e1695df8 esi=8a11bca8 edi=e1695dd4
eip=8092b1f4 esp=f78a6b78 ebp=f78a6b94 iopl=0 nv up ei pl zr na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!ExpAllocateHandleTableEntry+0x172:
8092b1f4 8b4804 mov ecx,[eax+0x4] ds:0023:00000004=00000000
.trap
Resetting default scope

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

BUGCHECK_STR: 0x8E

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 8092b26b to 8092b1f4

STACK_TEXT:
f78a6b94 8092b26b e1695dc8 f78a6bac 89b19c60 nt!ExpAllocateHandleTableEntry+0x172
f78a6bb0 8092e969 e1695dc8 f78a6be4 00000000 nt!ExCreateHandle+0x19
f78a6bf4 809322eb 89b19c78 00100003 00000001 nt!ObpCreateUnnamedHandle+0x11a
f78a6cf0 80933855 89b19c78 00000000 00100003 nt!ObInsertObject+0xc0
f78a6d48 80834d3f 049e64e4 00100003 00000000 nt!NtCreateEvent+0xbd
f78a6d48 7c82ed54 049e64e4 00100003 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0138f610 00000000 00000000 00000000 00000000 0x7c82ed54


FOLLOWUP_IP:
nt!ExpAllocateHandleTableEntry+172
8092b1f4 8b4804 mov ecx,[eax+0x4]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!ExpAllocateHandleTableEntry+172

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 42435e60

STACK_COMMAND: .trap fffffffff78a6b04 ; kb

FAILURE_BUCKET_ID: 0x8E_nt!ExpAllocateHandleTableEntry+172

BUCKET_ID: 0x8E_nt!ExpAllocateHandleTableEntry+172

Followup: MachineOwner
---------

eax=00000000 ebx=001f0003 ecx=00000011 edx=e1695df8 esi=8a11bca8 edi=e1695dd4
eip=8092b1f4 esp=f78a6b78 ebp=f78a6b94 iopl=0 nv up ei pl zr na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!ExpAllocateHandleTableEntry+0x172:
8092b1f4 8b4804 mov ecx,[eax+0x4] ds:0023:00000004=00000000
ChildEBP RetAddr Args to Child
f78a6b94 8092b26b e1695dc8 f78a6bac 89b19c60 nt!ExpAllocateHandleTableEntry+0x172 (FPO: [Non-Fpo])
f78a6bb0 8092e969 e1695dc8 f78a6be4 00000000 nt!ExCreateHandle+0x19 (FPO: [Non-Fpo])
f78a6bf4 809322eb 89b19c78 00100003 00000001 nt!ObpCreateUnnamedHandle+0x11a (FPO: [Non-Fpo])
f78a6cf0 80933855 89b19c78 00000000 00100003 nt!ObInsertObject+0xc0 (FPO: [Non-Fpo])
f78a6d48 80834d3f 049e64e4 00100003 00000000 nt!NtCreateEvent+0xbd (FPO: [Non-Fpo])
f78a6d48 7c82ed54 049e64e4 00100003 00000000 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ f78a6d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0138f610 00000000 00000000 00000000 00000000 0x7c82ed54
start end module name
80800000 80a75000 nt ntkrnlmp.exe Thu Mar 24 17:42:08 2005 (42435E60)
80a75000 80aa1000 hal halaacpi.dll Thu Mar 24 17:28:37 2005 (42435B35)
b8f2a000 b8f57000 RDPWD RDPWD.SYS Wed Jun 15 09:33:14 2005 (42B04A3A)
b9517000 b9522000 TDTCP TDTCP.SYS Thu Mar 24 17:27:15 2005 (42435AE3)
b97c7000 b9825000 srv srv.sys Tue May 03 20:44:01 2005 (427836F1)
b99dd000 b9a1a000 TmXPFlt TmXPFlt.sys Fri Feb 18 04:04:33 2005 (4215CBC1)
b9a1a000 b9b04f60 VsapiNT VsapiNT.sys Fri Feb 18 03:43:07 2005 (4215C6BB)
b9c35000 b9c3e000 ndisuio ndisuio.sys Thu Mar 24 17:33:16 2005 (42435C4C)
b9c6d000 b9c82000 Cdfs Cdfs.SYS Thu Mar 24 17:40:55 2005 (42435E17)
b9d8f000 b9da0000 Fips Fips.SYS Thu Mar 24 17:40:33 2005 (42435E01)
b9da0000 b9e16000 mrxsmb mrxsmb.sys Thu Mar 24 17:41:13 2005 (42435E29)
b9e16000 b9e46000 rdbss rdbss.sys Thu Mar 24 17:40:49 2005 (42435E11)
b9ee6000 b9f10000 afd afd.sys Thu Mar 24 17:40:43 2005 (42435E0B)
b9f1a000 b9f4b000 netbt netbt.sys Thu Mar 24 17:40:31 2005 (42435DFF)
b9f4b000 b9fac000 tcpip tcpip.sys Thu Mar 24 17:40:31 2005 (42435DFF)
b9fac000 b9fc5000 ipsec ipsec.sys Thu Mar 24 17:40:49 2005 (42435E11)
ba064000 ba078000 usbhub usbhub.sys Thu Mar 24 17:30:46 2005 (42435BB6)
ba0d8000 ba0e2000 Dxapi Dxapi.sys Tue Mar 25 00:06:01 2003 (3E7FFFD9)
ba0e8000 ba0f3000 dump_dpti2o dump_dpti2o.sys Sun Nov 14 15:01:04 2004 (4197D5A0)
ba0f8000 ba102000 dump_diskdump dump_diskdump.sys Thu Mar 24 17:28:56 2005 (42435B48)
ba108000 ba114000 tmpreflt tmpreflt.sys Fri Feb 18 04:04:32 2005 (4215CBC0)
ba118000 ba158000 update update.sys Thu Mar 24 17:40:27 2005 (42435DFB)
ba158000 ba18f000 rdpdr rdpdr.sys Thu Mar 24 17:30:20 2005 (42435B9C)
ba18f000 ba1a2000 raspptp raspptp.sys Thu Mar 24 17:40:43 2005 (42435E0B)
ba1a2000 ba1bc000 ndiswan ndiswan.sys Thu Mar 24 17:40:46 2005 (42435E0E)
ba1bc000 ba1d1000 rasl2tp rasl2tp.sys Thu Mar 24 17:40:29 2005 (42435DFD)
ba1d1000 ba1fb000 USBPORT USBPORT.SYS Thu Mar 24 17:30:43 2005 (42435BB3)
ba1fb000 ba223000 ks ks.sys Thu Mar 24 17:41:03 2005 (42435E1F)
ba223000 ba237000 redbook redbook.sys Thu Mar 24 17:28:46 2005 (42435B3E)
ba237000 ba24c000 cdrom cdrom.sys Thu Mar 24 17:28:57 2005 (42435B49)
ba24c000 ba25f000 i8042prt i8042prt.sys Thu Mar 24 17:41:05 2005 (42435E21)
ba25f000 ba274000 serial serial.sys Thu Mar 24 17:28:29 2005 (42435B2D)
ba274000 ba28c000 parport parport.sys Thu Mar 24 17:28:25 2005 (42435B29)
ba28c000 ba2a7000 VIDEOPRT VIDEOPRT.SYS Thu Mar 24 17:29:53 2005 (42435B81)
ba2a7000 ba2fad80 ati2mpad ati2mpad.sys Thu Jul 18 19:13:20 2002 (3D3767B0)
ba2fb000 ba323000 e1000325 e1000325.sys Wed Jun 29 11:49:03 2005 (42C2DF0F)
ba879000 ba886000 wanarp wanarp.sys Thu Mar 24 17:34:07 2005 (42435C7F)
ba889000 ba897000 msgpc msgpc.sys Thu Mar 24 17:33:31 2005 (42435C5B)
ba899000 ba8a6000 Npfs Npfs.SYS Thu Mar 24 17:30:04 2005 (42435B8C)
ba8a9000 ba8b4000 Msfs Msfs.SYS Thu Mar 24 17:30:04 2005 (42435B8C)
ba8b9000 ba8c5000 vga vga.sys Thu Mar 24 17:29:54 2005 (42435B82)
ba909000 ba913000 flpydisk flpydisk.sys Tue Mar 25 00:04:32 2003 (3E7FFF80)
bf800000 bf9cf000 win32k win32k.sys Thu Mar 24 17:40:09 2005 (42435DE9)
bf9cf000 bf9e5000 dxg dxg.sys Thu Mar 24 17:27:25 2005 (42435AED)
bf9e5000 bfa3b680 ati2drad ati2drad.dll Thu Mar 24 19:30:34 2005 (424377CA)
f7144000 f7163000 Mup Mup.sys Thu Mar 24 17:40:49 2005 (42435E11)
f7163000 f7199000 NDIS NDIS.sys Thu Mar 24 17:40:26 2005 (42435DFA)
f7199000 f722e000 Ntfs Ntfs.sys Thu Mar 24 17:40:29 2005 (42435DFD)
f722e000 f7255000 KSecDD KSecDD.sys Thu Mar 24 17:28:53 2005 (42435B45)
f7255000 f731b000 dmboot dmboot.sys Thu Mar 24 17:30:03 2005 (42435B8B)
f731b000 f7340000 fltmgr fltmgr.sys Thu Mar 24 17:30:25 2005 (42435BA1)
f7340000 f7353000 CLASSPNP CLASSPNP.SYS Thu Mar 24 17:40:23 2005 (42435DF7)
f7353000 f7364000 symmpi symmpi.sys Mon Dec 13 14:03:14 2004 (41BE0392)
f7364000 f7383000 SCSIPORT SCSIPORT.SYS Thu Mar 24 17:40:26 2005 (42435DFA)
f7383000 f739f000 atapi atapi.sys Thu Mar 24 17:28:49 2005 (42435B41)
f739f000 f73c9000 volsnap volsnap.sys Thu Mar 24 17:29:10 2005 (42435B56)
f73c9000 f73f5000 dmio dmio.sys Thu Mar 24 17:30:02 2005 (42435B8A)
f73f5000 f741c000 ftdisk ftdisk.sys Thu Mar 24 17:29:00 2005 (42435B4C)
f741c000 f7432000 pci pci.sys Thu Mar 24 17:34:14 2005 (42435C86)
f7432000 f7466000 ACPI ACPI.sys Thu Mar 24 17:34:09 2005 (42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 00:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 00:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Thu Mar 24 17:28:48 2005 (42435B40)
f74b7000 f74c7000 MountMgr MountMgr.sys Thu Mar 24 17:27:23 2005 (42435AEB)
f74c7000 f74d2000 PartMgr PartMgr.sys Thu Mar 24 17:40:34 2005 (42435E02)
f74d7000 f74e2000 dpti2o dpti2o.sys Sun Nov 14 15:01:04 2004 (4197D5A0)
f74e7000 f74f7000 disk disk.sys Thu Mar 24 17:28:58 2005 (42435B4A)
f74f7000 f7503000 Dfs Dfs.sys Thu Mar 24 17:30:28 2005 (42435BA4)
f7507000 f7511000 crcdisk crcdisk.sys Thu Mar 24 17:29:40 2005 (42435B74)
f7547000 f7556000 intelppm intelppm.sys Thu Mar 24 17:28:40 2005 (42435B38)
f7557000 f7562000 TDI TDI.SYS Thu Mar 24 17:35:34 2005 (42435CD6)
f7567000 f7574000 netbios netbios.sys Thu Mar 24 17:33:21 2005 (42435C51)
f7587000 f7590000 ndistapi ndistapi.sys Thu Mar 24 17:34:11 2005 (42435C83)
f7597000 f75a6000 termdd termdd.sys Thu Mar 24 17:27:15 2005 (42435AE3)
f75b7000 f75c5000 HIDCLASS HIDCLASS.SYS Tue Mar 25 00:10:17 2003 (3E8000D9)
f75c7000 f75d2000 ptilink ptilink.sys Thu Mar 24 17:28:25 2005 (42435B29)
f75d7000 f75e0000 hidusb hidusb.sys Tue Mar 25 00:10:17 2003 (3E8000D9)
f75e7000 f75f0000 raspti raspti.sys Thu Mar 24 17:34:16 2005 (42435C88)
f75f7000 f7601000 serenum serenum.sys Thu Mar 24 17:28:27 2005 (42435B2B)
f7617000 f7622000 fdc fdc.sys Thu Mar 24 17:28:43 2005 (42435B3B)
f7627000 f7635000 NDProxy NDProxy.SYS Thu Mar 24 17:34:13 2005 (42435C85)
f7647000 f7651000 mouclass mouclass.sys Tue Mar 25 00:03:09 2003 (3E7FFF2D)
f7657000 f7660000 mssmbios mssmbios.sys Thu Mar 24 17:34:14 2005 (42435C86)
f7677000 f7681000 kbdclass kbdclass.sys Tue Mar 25 00:03:10 2003 (3E7FFF2E)
f7697000 f76a6000 raspppoe raspppoe.sys Thu Mar 24 17:34:16 2005 (42435C88)
f76b7000 f76c0000 watchdog watchdog.sys Thu Mar 24 17:30:19 2005 (42435B9B)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 00:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 00:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 00:04:46 2003 (3E7FFF8E)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 00:08:08 2003 (3E800058)
f779f000 f77a6000 parvdm parvdm.sys Tue Mar 25 00:03:49 2003 (3E7FFF55)
f77a7000 f77ab400 usbohci usbohci.sys Thu Mar 24 17:30:45 2005 (42435BB5)
f77af000 f77b7000 audstub audstub.sys Tue Mar 25 00:09:12 2003 (3E800098)
f77cf000 f77d7000 Fs_Rec Fs_Rec.SYS Tue Mar 25 00:08:36 2003 (3E800074)
f77d7000 f77de000 Null Null.SYS Tue Mar 25 00:03:05 2003 (3E7FFF29)
f77df000 f77e6000 Beep Beep.SYS Tue Mar 25 00:03:04 2003 (3E7FFF28)
f77e7000 f77ef000 mnmdd mnmdd.SYS Tue Mar 25 00:07:53 2003 (3E800049)
f77ef000 f77f7000 RDPCDD RDPCDD.sys Tue Mar 25 00:03:05 2003 (3E7FFF29)
f77f7000 f77ff000 rasacd rasacd.sys Tue Mar 25 00:11:50 2003 (3E800136)
f77ff000 f7805300 HIDPARSE HIDPARSE.SYS Thu Mar 24 17:30:36 2005 (42435BAC)
f7807000 f780f000 mouhid mouhid.sys Tue Mar 25 00:03:12 2003 (3E7FFF30)
f780f000 f7816000 dxgthk dxgthk.sys Tue Mar 25 00:05:52 2003 (3E7FFFD0)
f7995000 f7996280 swenum swenum.sys Thu Mar 24 17:27:42 2005 (42435AFE)
f7997000 f7998580 USBD USBD.SYS Tue Mar 25 00:10:39 2003 (3E8000EF)

Unloaded modules:
f75a7000 f75b5000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f77c7000 f77cf000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

2003 SP1 BSOD and Reboot Dump 3

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.5.0003.7
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\sgs dumps\Mini120105-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: LanManNt, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp1_rtm.050324-1447
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af988
Debug session time: Thu Dec 1 01:05:36.820 2005 (GMT-7)
System Uptime: 0 days 2:42:37.203
Loading Kernel Symbols
........................................................................................................
Loading unloaded module list
..
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {20, 8878a410, 8878a450, a080005}

*** ERROR: Symbol file could not be found. Defaulted to export symbols for tmpreflt.sys -
Probably caused by : fltmgr.sys ( fltmgr!FltpDispatch+6f )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: 8878a410, The pool entry we were looking for within the page.
Arg3: 8878a450, The next pool entry.
Arg4: 0a080005, (reserved)

Debugging Details:
------------------


BUGCHECK_STR: 0x19_20

POOL_ADDRESS: 8878a410

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 8089c8f4 to 8087b6be

STACK_TEXT:
f78ca958 8089c8f4 00000019 00000020 8878a410 nt!KeBugCheckEx+0x1b
f78ca9c0 f71a24ae 8878a418 00000000 f78caa20 nt!ExFreePoolWithTag+0x477
f78ca9d4 f71c8f3b 8878a418 8a305260 e5b7b4e8 Ntfs!NtfsFreeEresource+0x76
f78ca9f8 f719c569 8861c0a8 f78caa20 f78caa2b Ntfs!NtfsDeleteFcb+0x67
f78caa44 f71c90a8 8861c0a8 8a305100 e5d32cd8 Ntfs!NtfsTeardownFromLcb+0x1fc
f78caa9c f719ff5d 8861c0a8 e5d32da0 00000000 Ntfs!NtfsTeardownStructures+0x12c
f78caac8 f71cd5ae 8861c0a8 e5d32da0 00000000 Ntfs!NtfsDecrementCloseCounts+0xa9
f78cab50 f71cd8de 8861c0a8 e5d32da0 e5d32cd8 Ntfs!NtfsCommonClose+0x3a1
f78cabf0 8083f9d0 8a305020 88306638 8a2e3600 Ntfs!NtfsFsdClose+0x23e
f78cac04 f731fc53 8a2e3600 88306638 000007ff nt!IofCallDriver+0x45
f78cac2c 8083f9d0 8a3a1ee8 88306638 8a1137d8 fltmgr!FltpDispatch+0x6f
f78cac40 b9ef283c f78cac58 b9ef7438 8a12c750 nt!IofCallDriver+0x45
WARNING: Stack unwind information not available. Following frames may be wrong.
f78cac48 b9ef7438 8a12c750 88306638 f78cac6c tmpreflt!TmpAddRdr+0x468
f78cac58 8083f9d0 8a12c750 88306638 88306648 tmpreflt!TmpQueryFullName+0x4b7c
f78cac6c 80937b66 80a78be4 00000000 895309b8 nt!IofCallDriver+0x45
f78caca4 8092ac38 005309d0 895309b8 00000000 nt!IopDeleteFile+0x13a
f78cacbc 80840172 895309d0 00000000 88de406c nt!ObpRemoveObjectRoutine+0xde
f78cacdc 8084f899 80a79150 88de4008 80a791d0 nt!ObfDereferenceObject+0x67
f78cad08 8083075f 00000001 808acbb0 887c7228 nt!CcDeleteSharedCacheMap+0xe6
f78cad40 8082fbf4 8a398db0 808b70a0 8a399690 nt!CcWriteBehind+0x359
f78cad80 8083f72e 8a399690 00000000 8a398db0 nt!CcWorkerThread+0x12c
f78cadac 8092ccff 8a399690 00000000 00000000 nt!ExpWorkerThread+0xeb
f78caddc 80841a96 8083f671 00000000 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_IP:
fltmgr!FltpDispatch+6f
f731fc53 e9df000000 jmp fltmgr!FltpDispatch+0x153 (f731fd37)

SYMBOL_STACK_INDEX: a

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: fltmgr!FltpDispatch+6f

MODULE_NAME: fltmgr

IMAGE_NAME: fltmgr.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 42435ba1

STACK_COMMAND: kb

FAILURE_BUCKET_ID: 0x19_20_fltmgr!FltpDispatch+6f

BUCKET_ID: 0x19_20_fltmgr!FltpDispatch+6f

Followup: MachineOwner
---------

eax=f772713c ebx=8878a410 ecx=00000000 edx=00000007 esi=f7727120 edi=000001ff
eip=8087b6be esp=f78ca940 ebp=f78ca958 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
8087b6be 5d pop ebp
ChildEBP RetAddr Args to Child
f78ca958 8089c8f4 00000019 00000020 8878a410 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
f78ca9c0 f71a24ae 8878a418 00000000 f78caa20 nt!ExFreePoolWithTag+0x477 (FPO: [Non-Fpo])
f78ca9d4 f71c8f3b 8878a418 8a305260 e5b7b4e8 Ntfs!NtfsFreeEresource+0x76 (FPO: [Non-Fpo])
f78ca9f8 f719c569 8861c0a8 f78caa20 f78caa2b Ntfs!NtfsDeleteFcb+0x67 (FPO: [Non-Fpo])
f78caa44 f71c90a8 8861c0a8 8a305100 e5d32cd8 Ntfs!NtfsTeardownFromLcb+0x1fc (FPO: [Non-Fpo])
f78caa9c f719ff5d 8861c0a8 e5d32da0 00000000 Ntfs!NtfsTeardownStructures+0x12c (FPO: [Non-Fpo])
f78caac8 f71cd5ae 8861c0a8 e5d32da0 00000000 Ntfs!NtfsDecrementCloseCounts+0xa9 (FPO: [Non-Fpo])
f78cab50 f71cd8de 8861c0a8 e5d32da0 e5d32cd8 Ntfs!NtfsCommonClose+0x3a1 (FPO: [Non-Fpo])
f78cabf0 8083f9d0 8a305020 88306638 8a2e3600 Ntfs!NtfsFsdClose+0x23e (FPO: [Non-Fpo])
f78cac04 f731fc53 8a2e3600 88306638 000007ff nt!IofCallDriver+0x45 (FPO: [Non-Fpo])
f78cac2c 8083f9d0 8a3a1ee8 88306638 8a1137d8 fltmgr!FltpDispatch+0x6f (FPO: [Non-Fpo])
f78cac40 b9ef283c f78cac58 b9ef7438 8a12c750 nt!IofCallDriver+0x45 (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
f78cac48 b9ef7438 8a12c750 88306638 f78cac6c tmpreflt!TmpAddRdr+0x468
f78cac58 8083f9d0 8a12c750 88306638 88306648 tmpreflt!TmpQueryFullName+0x4b7c
f78cac6c 80937b66 80a78be4 00000000 895309b8 nt!IofCallDriver+0x45 (FPO: [Non-Fpo])
f78caca4 8092ac38 005309d0 895309b8 00000000 nt!IopDeleteFile+0x13a (FPO: [Non-Fpo])
f78cacbc 80840172 895309d0 00000000 88de406c nt!ObpRemoveObjectRoutine+0xde (FPO: [Non-Fpo])
f78cacdc 8084f899 80a79150 88de4008 80a791d0 nt!ObfDereferenceObject+0x67 (FPO: [Non-Fpo])
f78cad08 8083075f 00000001 808acbb0 887c7228 nt!CcDeleteSharedCacheMap+0xe6 (FPO: [Non-Fpo])
f78cad40 8082fbf4 8a398db0 808b70a0 8a399690 nt!CcWriteBehind+0x359 (FPO: [Non-Fpo])
start end module name
80800000 80a75000 nt ntkrnlmp.exe Thu Mar 24 17:42:08 2005 (42435E60)
80a75000 80aa1000 hal halaacpi.dll Thu Mar 24 17:28:37 2005 (42435B35)
b7f63000 b7f8d000 Fastfat Fastfat.SYS Thu Mar 24 17:40:20 2005 (42435DF4)
b80a5000 b80d2000 RDPWD RDPWD.SYS Wed Jun 15 09:33:14 2005 (42B04A3A)
b83b2000 b83bd000 TDTCP TDTCP.SYS Thu Mar 24 17:27:15 2005 (42435AE3)
b8942000 b89a0000 srv srv.sys Tue May 03 20:44:01 2005 (427836F1)
b8b58000 b8b95000 TmXPFlt TmXPFlt.sys Fri Feb 18 04:04:33 2005 (4215CBC1)
b8b95000 b8c7ff60 VsapiNT VsapiNT.sys Fri Feb 18 03:43:07 2005 (4215C6BB)
b8d90000 b8d99000 ndisuio ndisuio.sys Thu Mar 24 17:33:16 2005 (42435C4C)
b8de8000 b8dfd000 Cdfs Cdfs.SYS Thu Mar 24 17:40:55 2005 (42435E17)
b9ee0000 b9ef1000 Fips Fips.SYS Thu Mar 24 17:40:33 2005 (42435E01)
b9ef1000 b9efd000 tmpreflt tmpreflt.sys Fri Feb 18 04:04:32 2005 (4215CBC0)
b9f91000 ba007000 mrxsmb mrxsmb.sys Thu Mar 24 17:41:13 2005 (42435E29)
ba007000 ba037000 rdbss rdbss.sys Thu Mar 24 17:40:49 2005 (42435E11)
ba037000 ba061000 afd afd.sys Thu Mar 24 17:40:43 2005 (42435E0B)
ba061000 ba092000 netbt netbt.sys Thu Mar 24 17:40:31 2005 (42435DFF)
ba092000 ba0f3000 tcpip tcpip.sys Thu Mar 24 17:40:31 2005 (42435DFF)
ba0f3000 ba10c000 ipsec ipsec.sys Thu Mar 24 17:40:49 2005 (42435E11)
ba1ab000 ba1bf000 usbhub usbhub.sys Thu Mar 24 17:30:46 2005 (42435BB6)
ba1ff000 ba209000 Dxapi Dxapi.sys Tue Mar 25 00:06:01 2003 (3E7FFFD9)
ba22f000 ba23a000 dump_dpti2o dump_dpti2o.sys Sun Nov 14 15:01:04 2004 (4197D5A0)
ba23f000 ba249000 dump_diskdump dump_diskdump.sys Thu Mar 24 17:28:56 2005 (42435B48)
ba25f000 ba29f000 update update.sys Thu Mar 24 17:40:27 2005 (42435DFB)
ba29f000 ba2d6000 rdpdr rdpdr.sys Thu Mar 24 17:30:20 2005 (42435B9C)
ba2d6000 ba2e9000 raspptp raspptp.sys Thu Mar 24 17:40:43 2005 (42435E0B)
ba2e9000 ba303000 ndiswan ndiswan.sys Thu Mar 24 17:40:46 2005 (42435E0E)
ba303000 ba318000 rasl2tp rasl2tp.sys Thu Mar 24 17:40:29 2005 (42435DFD)
ba318000 ba342000 USBPORT USBPORT.SYS Thu Mar 24 17:30:43 2005 (42435BB3)
ba342000 ba36a000 ks ks.sys Thu Mar 24 17:41:03 2005 (42435E1F)
ba36a000 ba37e000 redbook redbook.sys Thu Mar 24 17:28:46 2005 (42435B3E)
ba37e000 ba393000 cdrom cdrom.sys Thu Mar 24 17:28:57 2005 (42435B49)
ba393000 ba3a6000 i8042prt i8042prt.sys Thu Mar 24 17:41:05 2005 (42435E21)
ba3a6000 ba3bb000 serial serial.sys Thu Mar 24 17:28:29 2005 (42435B2D)
ba3bb000 ba3d3000 parport parport.sys Thu Mar 24 17:28:25 2005 (42435B29)
ba3d3000 ba3ee000 VIDEOPRT VIDEOPRT.SYS Thu Mar 24 17:29:53 2005 (42435B81)
ba3ee000 ba441d80 ati2mpad ati2mpad.sys Thu Jul 18 19:13:20 2002 (3D3767B0)
ba442000 ba46a000 e1000325 e1000325.sys Wed Jun 29 11:49:03 2005 (42C2DF0F)
ba474000 ba47b000 parvdm parvdm.sys Tue Mar 25 00:03:49 2003 (3E7FFF55)
ba6fa000 ba707000 netbios netbios.sys Thu Mar 24 17:33:21 2005 (42435C51)
ba70a000 ba717000 wanarp wanarp.sys Thu Mar 24 17:34:07 2005 (42435C7F)
ba71a000 ba728000 msgpc msgpc.sys Thu Mar 24 17:33:31 2005 (42435C5B)
ba72a000 ba737000 Npfs Npfs.SYS Thu Mar 24 17:30:04 2005 (42435B8C)
ba73a000 ba745000 Msfs Msfs.SYS Thu Mar 24 17:30:04 2005 (42435B8C)
ba74a000 ba756000 vga vga.sys Thu Mar 24 17:29:54 2005 (42435B82)
ba78a000 ba794000 flpydisk flpydisk.sys Tue Mar 25 00:04:32 2003 (3E7FFF80)
bf800000 bf9cf000 win32k win32k.sys Thu Mar 24 17:40:09 2005 (42435DE9)
bf9cf000 bf9e5000 dxg dxg.sys Thu Mar 24 17:27:25 2005 (42435AED)
bf9e5000 bfa3b680 ati2drad ati2drad.dll Thu Mar 24 19:30:34 2005 (424377CA)
f7144000 f7163000 Mup Mup.sys Thu Mar 24 17:40:49 2005 (42435E11)
f7163000 f7199000 NDIS NDIS.sys Thu Mar 24 17:40:26 2005 (42435DFA)
f7199000 f722e000 Ntfs Ntfs.sys Thu Mar 24 17:40:29 2005 (42435DFD)
f722e000 f7255000 KSecDD KSecDD.sys Thu Mar 24 17:28:53 2005 (42435B45)
f7255000 f731b000 dmboot dmboot.sys Thu Mar 24 17:30:03 2005 (42435B8B)
f731b000 f7340000 fltmgr fltmgr.sys Thu Mar 24 17:30:25 2005 (42435BA1)
f7340000 f7353000 CLASSPNP CLASSPNP.SYS Thu Mar 24 17:40:23 2005 (42435DF7)
f7353000 f7364000 symmpi symmpi.sys Mon Dec 13 14:03:14 2004 (41BE0392)
f7364000 f7383000 SCSIPORT SCSIPORT.SYS Thu Mar 24 17:40:26 2005 (42435DFA)
f7383000 f739f000 atapi atapi.sys Thu Mar 24 17:28:49 2005 (42435B41)
f739f000 f73c9000 volsnap volsnap.sys Thu Mar 24 17:29:10 2005 (42435B56)
f73c9000 f73f5000 dmio dmio.sys Thu Mar 24 17:30:02 2005 (42435B8A)
f73f5000 f741c000 ftdisk ftdisk.sys Thu Mar 24 17:29:00 2005 (42435B4C)
f741c000 f7432000 pci pci.sys Thu Mar 24 17:34:14 2005 (42435C86)
f7432000 f7466000 ACPI ACPI.sys Thu Mar 24 17:34:09 2005 (42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 00:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 00:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Thu Mar 24 17:28:48 2005 (42435B40)
f74b7000 f74c7000 MountMgr MountMgr.sys Thu Mar 24 17:27:23 2005 (42435AEB)
f74c7000 f74d2000 PartMgr PartMgr.sys Thu Mar 24 17:40:34 2005 (42435E02)
f74d7000 f74e2000 dpti2o dpti2o.sys Sun Nov 14 15:01:04 2004 (4197D5A0)
f74e7000 f74f7000 disk disk.sys Thu Mar 24 17:28:58 2005 (42435B4A)
f74f7000 f7503000 Dfs Dfs.sys Thu Mar 24 17:30:28 2005 (42435BA4)
f7507000 f7511000 crcdisk crcdisk.sys Thu Mar 24 17:29:40 2005 (42435B74)
f7547000 f7550000 hidusb hidusb.sys Tue Mar 25 00:10:17 2003 (3E8000D9)
f7557000 f7565000 NDProxy NDProxy.SYS Thu Mar 24 17:34:13 2005 (42435C85)
f7567000 f7572000 ptilink ptilink.sys Thu Mar 24 17:28:25 2005 (42435B29)
f7597000 f75a1000 kbdclass kbdclass.sys Tue Mar 25 00:03:10 2003 (3E7FFF2E)
f75a7000 f75b1000 mouclass mouclass.sys Tue Mar 25 00:03:09 2003 (3E7FFF2D)
f75b7000 f75c1000 serenum serenum.sys Thu Mar 24 17:28:27 2005 (42435B2B)
f75c7000 f75d6000 raspppoe raspppoe.sys Thu Mar 24 17:34:16 2005 (42435C88)
f75d7000 f75e6000 termdd termdd.sys Thu Mar 24 17:27:15 2005 (42435AE3)
f75e7000 f75f0000 ndistapi ndistapi.sys Thu Mar 24 17:34:11 2005 (42435C83)
f75f7000 f7606000 intelppm intelppm.sys Thu Mar 24 17:28:40 2005 (42435B38)
f7627000 f7635000 HIDCLASS HIDCLASS.SYS Tue Mar 25 00:10:17 2003 (3E8000D9)
f7647000 f7650000 mssmbios mssmbios.sys Thu Mar 24 17:34:14 2005 (42435C86)
f7657000 f7660000 raspti raspti.sys Thu Mar 24 17:34:16 2005 (42435C88)
f7667000 f7672000 fdc fdc.sys Thu Mar 24 17:28:43 2005 (42435B3B)
f7687000 f7690000 watchdog watchdog.sys Thu Mar 24 17:30:19 2005 (42435B9B)
f76b7000 f76c2000 TDI TDI.SYS Thu Mar 24 17:35:34 2005 (42435CD6)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 00:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 00:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 00:04:46 2003 (3E7FFF8E)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 00:08:08 2003 (3E800058)
f779f000 f77a3400 usbohci usbohci.sys Thu Mar 24 17:30:45 2005 (42435BB5)
f77a7000 f77af000 audstub audstub.sys Tue Mar 25 00:09:12 2003 (3E800098)
f77c7000 f77cf000 Fs_Rec Fs_Rec.SYS Tue Mar 25 00:08:36 2003 (3E800074)
f77cf000 f77d6000 Null Null.SYS Tue Mar 25 00:03:05 2003 (3E7FFF29)
f77d7000 f77de000 Beep Beep.SYS Tue Mar 25 00:03:04 2003 (3E7FFF28)
f77df000 f77e7000 mnmdd mnmdd.SYS Tue Mar 25 00:07:53 2003 (3E800049)
f77e7000 f77ef000 RDPCDD RDPCDD.sys Tue Mar 25 00:03:05 2003 (3E7FFF29)
f77ef000 f77f7000 rasacd rasacd.sys Tue Mar 25 00:11:50 2003 (3E800136)
f77f7000 f77fd300 HIDPARSE HIDPARSE.SYS Thu Mar 24 17:30:36 2005 (42435BAC)
f77ff000 f7807000 mouhid mouhid.sys Tue Mar 25 00:03:12 2003 (3E7FFF30)
f7817000 f781e000 dxgthk dxgthk.sys Tue Mar 25 00:05:52 2003 (3E7FFFD0)
f7991000 f7992280 swenum swenum.sys Thu Mar 24 17:27:42 2005 (42435AFE)
f7993000 f7994580 USBD USBD.SYS Tue Mar 25 00:10:39 2003 (3E8000EF)

Unloaded modules:
f7677000 f7685000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f77bf000 f77c7000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

2003 SP1 BSOD and Reboot Dump 4

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.5.0003.7
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\sgs dumps\Mini120105-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: LanManNt, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp1_rtm.050324-1447
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af988
Debug session time: Thu Dec 1 02:40:04.845 2005 (GMT-7)
System Uptime: 0 days 1:32:33.421
Loading Kernel Symbols
.......................................................................................................
Loading unloaded module list
..
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, 8092b1f4, b8d3cb04, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExpAllocateHandleTableEntry+172 )

Followup: MachineOwner
---------

3: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8092b1f4, The address that the exception occurred at
Arg3: b8d3cb04, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
nt!ExpAllocateHandleTableEntry+172
8092b1f4 8b4804 mov ecx,[eax+0x4]

TRAP_FRAME: b8d3cb04 -- (.trap ffffffffb8d3cb04)
.trap ffffffffb8d3cb04
ErrCode = 00000000
eax=00000000 ebx=001f01ff ecx=00000011 edx=e1626b80 esi=8a093cb0 edi=e1626b68
eip=8092b1f4 esp=b8d3cb78 ebp=b8d3cb94 iopl=0 nv up ei pl zr na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!ExpAllocateHandleTableEntry+0x172:
8092b1f4 8b4804 mov ecx,[eax+0x4] ds:0023:00000004=00000000
.trap
Resetting default scope

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

BUGCHECK_STR: 0x8E

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 8092b26b to 8092b1f4

STACK_TEXT:
b8d3cb94 8092b26b e1626b50 b8d3cbac 896a3138 nt!ExpAllocateHandleTableEntry+0x172
b8d3cbb0 8092e969 e1626b50 b8d3cbe4 00000000 nt!ExCreateHandle+0x19
b8d3cbf4 809322eb 896a3150 00100003 00000001 nt!ObpCreateUnnamedHandle+0x11a
b8d3ccf0 80933855 896a3150 00000000 00100003 nt!ObInsertObject+0xc0
b8d3cd48 80834d3f 049a2c7c 00100003 00000000 nt!NtCreateEvent+0xbd
b8d3cd48 7c82ed54 049a2c7c 00100003 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0144f610 00000000 00000000 00000000 00000000 0x7c82ed54


FOLLOWUP_IP:
nt!ExpAllocateHandleTableEntry+172
8092b1f4 8b4804 mov ecx,[eax+0x4]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!ExpAllocateHandleTableEntry+172

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 42435e60

STACK_COMMAND: .trap ffffffffb8d3cb04 ; kb

FAILURE_BUCKET_ID: 0x8E_nt!ExpAllocateHandleTableEntry+172

BUCKET_ID: 0x8E_nt!ExpAllocateHandleTableEntry+172

Followup: MachineOwner
---------

eax=00000000 ebx=001f01ff ecx=00000011 edx=e1626b80 esi=8a093cb0 edi=e1626b68
eip=8092b1f4 esp=b8d3cb78 ebp=b8d3cb94 iopl=0 nv up ei pl zr na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!ExpAllocateHandleTableEntry+0x172:
8092b1f4 8b4804 mov ecx,[eax+0x4] ds:0023:00000004=00000000
ChildEBP RetAddr Args to Child
b8d3cb94 8092b26b e1626b50 b8d3cbac 896a3138 nt!ExpAllocateHandleTableEntry+0x172 (FPO: [Non-Fpo])
b8d3cbb0 8092e969 e1626b50 b8d3cbe4 00000000 nt!ExCreateHandle+0x19 (FPO: [Non-Fpo])
b8d3cbf4 809322eb 896a3150 00100003 00000001 nt!ObpCreateUnnamedHandle+0x11a (FPO: [Non-Fpo])
b8d3ccf0 80933855 896a3150 00000000 00100003 nt!ObInsertObject+0xc0 (FPO: [Non-Fpo])
b8d3cd48 80834d3f 049a2c7c 00100003 00000000 nt!NtCreateEvent+0xbd (FPO: [Non-Fpo])
b8d3cd48 7c82ed54 049a2c7c 00100003 00000000 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ b8d3cd64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0144f610 00000000 00000000 00000000 00000000 0x7c82ed54
start end module name
80800000 80a75000 nt ntkrnlmp.exe Thu Mar 24 17:42:08 2005 (42435E60)
80a75000 80aa1000 hal halaacpi.dll Thu Mar 24 17:28:37 2005 (42435B35)
b8006000 b8033000 RDPWD RDPWD.SYS Wed Jun 15 09:33:14 2005 (42B04A3A)
b835b000 b8366000 TDTCP TDTCP.SYS Thu Mar 24 17:27:15 2005 (42435AE3)
b88a3000 b8901000 srv srv.sys Tue May 03 20:44:01 2005 (427836F1)
b8ab9000 b8af6000 TmXPFlt TmXPFlt.sys Fri Feb 18 04:04:33 2005 (4215CBC1)
b8af6000 b8be0f60 VsapiNT VsapiNT.sys Fri Feb 18 03:43:07 2005 (4215C6BB)
b8d49000 b8d5e000 Cdfs Cdfs.SYS Thu Mar 24 17:40:55 2005 (42435E17)
b9e47000 b9e58000 Fips Fips.SYS Thu Mar 24 17:40:33 2005 (42435E01)
b9e68000 b9e74000 tmpreflt tmpreflt.sys Fri Feb 18 04:04:32 2005 (4215CBC0)
b9ef8000 b9f6e000 mrxsmb mrxsmb.sys Thu Mar 24 17:41:13 2005 (42435E29)
b9f6e000 b9f9e000 rdbss rdbss.sys Thu Mar 24 17:40:49 2005 (42435E11)
b9f9e000 b9fc8000 afd afd.sys Thu Mar 24 17:40:43 2005 (42435E0B)
b9fc8000 b9ff9000 netbt netbt.sys Thu Mar 24 17:40:31 2005 (42435DFF)
b9ff9000 ba05a000 tcpip tcpip.sys Thu Mar 24 17:40:31 2005 (42435DFF)
ba05a000 ba073000 ipsec ipsec.sys Thu Mar 24 17:40:49 2005 (42435E11)
ba09b000 ba0a2000 parvdm parvdm.sys Tue Mar 25 00:03:49 2003 (3E7FFF55)
ba1ff000 ba213000 usbhub usbhub.sys Thu Mar 24 17:30:46 2005 (42435BB6)
ba293000 ba29c000 ndisuio ndisuio.sys Thu Mar 24 17:33:16 2005 (42435C4C)
ba2a3000 ba2ad000 Dxapi Dxapi.sys Tue Mar 25 00:06:01 2003 (3E7FFFD9)
ba2b3000 ba2f3000 update update.sys Thu Mar 24 17:40:27 2005 (42435DFB)
ba2f3000 ba32a000 rdpdr rdpdr.sys Thu Mar 24 17:30:20 2005 (42435B9C)
ba32a000 ba33d000 raspptp raspptp.sys Thu Mar 24 17:40:43 2005 (42435E0B)
ba33d000 ba357000 ndiswan ndiswan.sys Thu Mar 24 17:40:46 2005 (42435E0E)
ba357000 ba36c000 rasl2tp rasl2tp.sys Thu Mar 24 17:40:29 2005 (42435DFD)
ba36c000 ba396000 USBPORT USBPORT.SYS Thu Mar 24 17:30:43 2005 (42435BB3)
ba396000 ba3be000 ks ks.sys Thu Mar 24 17:41:03 2005 (42435E1F)
ba3be000 ba3d2000 redbook redbook.sys Thu Mar 24 17:28:46 2005 (42435B3E)
ba3d2000 ba3e7000 cdrom cdrom.sys Thu Mar 24 17:28:57 2005 (42435B49)
ba3e7000 ba3fa000 i8042prt i8042prt.sys Thu Mar 24 17:41:05 2005 (42435E21)
ba3fa000 ba40f000 serial serial.sys Thu Mar 24 17:28:29 2005 (42435B2D)
ba40f000 ba427000 parport parport.sys Thu Mar 24 17:28:25 2005 (42435B29)
ba427000 ba442000 VIDEOPRT VIDEOPRT.SYS Thu Mar 24 17:29:53 2005 (42435B81)
ba442000 ba495d80 ati2mpad ati2mpad.sys Thu Jul 18 19:13:20 2002 (3D3767B0)
ba496000 ba4be000 e1000325 e1000325.sys Wed Jun 29 11:49:03 2005 (42C2DF0F)
ba6a7000 ba6b5000 HIDCLASS HIDCLASS.SYS Tue Mar 25 00:10:17 2003 (3E8000D9)
ba6b7000 ba6c0000 hidusb hidusb.sys Tue Mar 25 00:10:17 2003 (3E8000D9)
ba6d7000 ba6e4000 netbios netbios.sys Thu Mar 24 17:33:21 2005 (42435C51)
ba6e7000 ba6f4000 wanarp wanarp.sys Thu Mar 24 17:34:07 2005 (42435C7F)
ba6f7000 ba705000 msgpc msgpc.sys Thu Mar 24 17:33:31 2005 (42435C5B)
ba707000 ba714000 Npfs Npfs.SYS Thu Mar 24 17:30:04 2005 (42435B8C)
ba717000 ba722000 Msfs Msfs.SYS Thu Mar 24 17:30:04 2005 (42435B8C)
ba727000 ba733000 vga vga.sys Thu Mar 24 17:29:54 2005 (42435B82)
ba737000 ba741000 flpydisk flpydisk.sys Tue Mar 25 00:04:32 2003 (3E7FFF80)
bf800000 bf9cf000 win32k win32k.sys Thu Mar 24 17:40:09 2005 (42435DE9)
bf9cf000 bf9e5000 dxg dxg.sys Thu Mar 24 17:27:25 2005 (42435AED)
bf9e5000 bfa3b680 ati2drad ati2drad.dll Thu Mar 24 19:30:34 2005 (424377CA)
f7144000 f7163000 Mup Mup.sys Thu Mar 24 17:40:49 2005 (42435E11)
f7163000 f7199000 NDIS NDIS.sys Thu Mar 24 17:40:26 2005 (42435DFA)
f7199000 f722e000 Ntfs Ntfs.sys Thu Mar 24 17:40:29 2005 (42435DFD)
f722e000 f7255000 KSecDD KSecDD.sys Thu Mar 24 17:28:53 2005 (42435B45)
f7255000 f731b000 dmboot dmboot.sys Thu Mar 24 17:30:03 2005 (42435B8B)
f731b000 f7340000 fltmgr fltmgr.sys Thu Mar 24 17:30:25 2005 (42435BA1)
f7340000 f7353000 CLASSPNP CLASSPNP.SYS Thu Mar 24 17:40:23 2005 (42435DF7)
f7353000 f7364000 symmpi symmpi.sys Mon Dec 13 14:03:14 2004 (41BE0392)
f7364000 f7383000 SCSIPORT SCSIPORT.SYS Thu Mar 24 17:40:26 2005 (42435DFA)
f7383000 f739f000 atapi atapi.sys Thu Mar 24 17:28:49 2005 (42435B41)
f739f000 f73c9000 volsnap volsnap.sys Thu Mar 24 17:29:10 2005 (42435B56)
f73c9000 f73f5000 dmio dmio.sys Thu Mar 24 17:30:02 2005 (42435B8A)
f73f5000 f741c000 ftdisk ftdisk.sys Thu Mar 24 17:29:00 2005 (42435B4C)
f741c000 f7432000 pci pci.sys Thu Mar 24 17:34:14 2005 (42435C86)
f7432000 f7466000 ACPI ACPI.sys Thu Mar 24 17:34:09 2005 (42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 00:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 00:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Thu Mar 24 17:28:48 2005 (42435B40)
f74b7000 f74c7000 MountMgr MountMgr.sys Thu Mar 24 17:27:23 2005 (42435AEB)
f74c7000 f74d2000 PartMgr PartMgr.sys Thu Mar 24 17:40:34 2005 (42435E02)
f74d7000 f74e2000 dpti2o dpti2o.sys Sun Nov 14 15:01:04 2004 (4197D5A0)
f74e7000 f74f7000 disk disk.sys Thu Mar 24 17:28:58 2005 (42435B4A)
f74f7000 f7503000 Dfs Dfs.sys Thu Mar 24 17:30:28 2005 (42435BA4)
f7507000 f7511000 crcdisk crcdisk.sys Thu Mar 24 17:29:40 2005 (42435B74)
f7547000 f7556000 raspppoe raspppoe.sys Thu Mar 24 17:34:16 2005 (42435C88)
f7557000 f7562000 ptilink ptilink.sys Thu Mar 24 17:28:25 2005 (42435B29)
f7567000 f7576000 intelppm intelppm.sys Thu Mar 24 17:28:40 2005 (42435B38)
f7577000 f7581000 serenum serenum.sys Thu Mar 24 17:28:27 2005 (42435B2B)
f7587000 f7590000 watchdog watchdog.sys Thu Mar 24 17:30:19 2005 (42435B9B)
f7597000 f75a1000 kbdclass kbdclass.sys Tue Mar 25 00:03:10 2003 (3E7FFF2E)
f75a7000 f75b6000 termdd termdd.sys Thu Mar 24 17:27:15 2005 (42435AE3)
f75b7000 f75c0000 mssmbios mssmbios.sys Thu Mar 24 17:34:14 2005 (42435C86)
f75e7000 f75f2000 TDI TDI.SYS Thu Mar 24 17:35:34 2005 (42435CD6)
f75f7000 f7601000 mouclass mouclass.sys Tue Mar 25 00:03:09 2003 (3E7FFF2D)
f7637000 f7641000 dump_diskdump dump_diskdump.sys Thu Mar 24 17:28:56 2005 (42435B48)
f7657000 f7660000 raspti raspti.sys Thu Mar 24 17:34:16 2005 (42435C88)
f7677000 f7682000 dump_dpti2o dump_dpti2o.sys Sun Nov 14 15:01:04 2004 (4197D5A0)
f7687000 f7692000 fdc fdc.sys Thu Mar 24 17:28:43 2005 (42435B3B)
f7697000 f76a5000 NDProxy NDProxy.SYS Thu Mar 24 17:34:13 2005 (42435C85)
f76b7000 f76c0000 ndistapi ndistapi.sys Thu Mar 24 17:34:11 2005 (42435C83)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 00:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 00:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 00:04:46 2003 (3E7FFF8E)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 00:08:08 2003 (3E800058)
f779f000 f77a3400 usbohci usbohci.sys Thu Mar 24 17:30:45 2005 (42435BB5)
f77a7000 f77af000 audstub audstub.sys Tue Mar 25 00:09:12 2003 (3E800098)
f77bf000 f77c7000 Fs_Rec Fs_Rec.SYS Tue Mar 25 00:08:36 2003 (3E800074)
f77c7000 f77ce000 Null Null.SYS Tue Mar 25 00:03:05 2003 (3E7FFF29)
f77cf000 f77d6000 Beep Beep.SYS Tue Mar 25 00:03:04 2003 (3E7FFF28)
f77d7000 f77df000 mnmdd mnmdd.SYS Tue Mar 25 00:07:53 2003 (3E800049)
f77df000 f77e7000 RDPCDD RDPCDD.sys Tue Mar 25 00:03:05 2003 (3E7FFF29)
f77e7000 f77ef000 rasacd rasacd.sys Tue Mar 25 00:11:50 2003 (3E800136)
f77ef000 f77f5300 HIDPARSE HIDPARSE.SYS Thu Mar 24 17:30:36 2005 (42435BAC)
f77f7000 f77ff000 mouhid mouhid.sys Tue Mar 25 00:03:12 2003 (3E7FFF30)
f77ff000 f7806000 dxgthk dxgthk.sys Tue Mar 25 00:05:52 2003 (3E7FFFD0)
f79a1000 f79a2280 swenum swenum.sys Thu Mar 24 17:27:42 2005 (42435AFE)
f79a3000 f79a4580 USBD USBD.SYS Tue Mar 25 00:10:39 2003 (3E8000EF)

Unloaded modules:
ba6c7000 ba6d5000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f77b7000 f77bf000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

2003 SP1 BSOD and Reboot Dump 5

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.5.0003.7
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\sgs dumps\Mini120105-03.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: LanManNt, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp1_rtm.050324-1447
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af988
Debug session time: Thu Dec 1 05:23:54.968 2005 (GMT-7)
System Uptime: 0 days 2:42:12.468
Loading Kernel Symbols
.......................................................................................................
Loading unloaded module list
..
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {5000000, 2, 1, 80a79133}

Probably caused by : hardware ( nt!KiTrap0E+2a7 )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 05000000, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 80a79133, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: 05000000

CURRENT_IRQL: 2

FAULTING_IP:
hal!HalpDispatchInterrupt+b
80a79133 44 inc esp

CUSTOMER_CRASH_COUNT: 3

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 000c5010 to 80a79133

MISALIGNED_IP:
hal!HalpDispatchInterrupt+b
80a79133 44 inc esp

STACK_TEXT:
b8bd6be0 000c5010 8965c554 00000001 89a75f68 hal!HalpDispatchInterrupt+0xb
WARNING: Frame IP not in any known module. Following frames may be wrong.
b8bd6c50 89a75f68 b8bd6c70 89a75f68 89fc1aa0 0xc5010
ba8c888c c183ba8c 1c15ff18 8bba8c30 358bf845 0x89a75f68
ba8c8890 1c15ff18 8bba8c30 358bf845 ba8c3018 0xc183ba8c
ba8c8894 8bba8c30 358bf845 ba8c3018 3bf84d8d 0x1c15ff18
ba8c8898 358bf845 ba8c3018 3bf84d8d 8b1274c1 0x8bba8c30
ba8c889c ba8c3018 3bf84d8d 8b1274c1 a8488d18 0x358bf845
ba8c88a0 3bf84d8d 8b1274c1 a8488d18 d6ff01b2 Npfs!_imp_IofCompleteRequest
ba8c88a4 8b1274c1 a8488d18 d6ff01b2 3bf84d8d 0x3bf84d8d
ba8c88a8 a8488d18 d6ff01b2 3bf84d8d 75c38bd9 0x8b1274c1
ba8c88ac d6ff01b2 3bf84d8d 75c38bd9 24a164ee 0xa8488d18
ba8c88b0 3bf84d8d 75c38bd9 24a164ee 66000001 0xd6ff01b2
ba8c88b4 75c38bd9 24a164ee 66000001 667040ff 0x3bf84d8d
ba8c88b8 24a164ee 66000001 667040ff 7570488b 0x75c38bd9
ba8c88bc 66000001 667040ff 7570488b 28488d14 0x24a164ee
ba8c88c0 667040ff 7570488b 28488d14 0d740939 0x66000001
ba8c88c4 7570488b 28488d14 0d740939 72788366 0x667040ff
ba8c88c8 28488d14 0d740939 72788366 ff067500 0x7570488b
ba8c88cc 0d740939 72788366 ff067500 8c302415 0x28488d14
ba8c88d0 72788366 ff067500 8c302415 f05d8bba 0xd740939
ba8c88d4 ff067500 8c302415 f05d8bba 0103fb81 0x72788366
ba8c88d8 8c302415 f05d8bba 0103fb81 0f740000 0xff067500
ba8c88dc f05d8bba 0103fb81 0f740000 b2f4458b 0x8c302415
ba8c88e0 0103fb81 0f740000 b2f4458b 89cf8b01 0xf05d8bba
ba8c88e4 0f740000 b2f4458b 89cf8b01 5f891c47 0x103fb81
ba8c88e8 b2f4458b 89cf8b01 5f891c47 5fd6ff18 0xf740000
ba8c88ec 89cf8b01 5f891c47 5fd6ff18 5bc38b5e 0xb2f4458b
ba8c88f0 5f891c47 5fd6ff18 5bc38b5e 0008c2c9 0x89cf8b01
ba8c88f4 5fd6ff18 5bc38b5e 0008c2c9 cccccccc 0x5f891c47
ba8c88f8 5bc38b5e 0008c2c9 cccccccc ff8bcccc 0x5fd6ff18
ba8c88fc 0008c2c9 cccccccc ff8bcccc 51ec8b55 0x5bc38b5e
ba8c8900 cccccccc ff8bcccc 51ec8b55 f8458d51 0x8c2c9
ba8c8904 ff8bcccc 51ec8b55 f8458d51 89fc4589 0xcccccccc
ba8c8908 51ec8b55 f8458d51 89fc4589 a164f845 0xff8bcccc
ba8c890c f8458d51 89fc4589 a164f845 00000124 0x51ec8b55
ba8c8910 89fc4589 a164f845 00000124 7048ff66 0xf8458d51
ba8c8914 a164f845 00000124 7048ff66 4094a153 0x89fc4589
ba8c8918 00000000 7048ff66 4094a153 016aba8c 0xa164f845


FOLLOWUP_IP:
nt!KiTrap0E+2a7
80837ed5 833d00ee8a8000 cmp dword ptr [nt!KiFreezeFlag (808aee00)],0x0

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!KiTrap0E+2a7

IMAGE_NAME: hardware

DEBUG_FLR_IMAGE_TIMESTAMP: 0

STACK_COMMAND: .trap ffffffffb8bd6b50 ; kb

MODULE_NAME: hardware

FAILURE_BUCKET_ID: IP_MISALIGNED

BUCKET_ID: IP_MISALIGNED

Followup: MachineOwner
---------

eax=f772713c ebx=00000002 ecx=00000001 edx=40000000 esi=f7727120 edi=05000000
eip=80837ed5 esp=b8bd6b38 ebp=b8bd6b50 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x2a7:
80837ed5 833d00ee8a8000 cmp dword ptr [nt!KiFreezeFlag (808aee00)],0x0 ds:0023:808aee00=????????
ChildEBP RetAddr Args to Child
b8bd6b50 80a79133 badb0d00 05000000 00000000 nt!KiTrap0E+0x2a7 (FPO: [0,0] TrapFrame @ b8bd6b50)
b8bd6be0 000c5010 8965c554 00000001 89a75f68 hal!HalpDispatchInterrupt+0xb (FPO: [0,2] TrapFrame @ b8bd6be0)
WARNING: Frame IP not in any known module. Following frames may be wrong.
b8bd6c50 89a75f68 b8bd6c70 89a75f68 89fc1aa0 0xc5010
ba8c888c c183ba8c 1c15ff18 8bba8c30 358bf845 0x89a75f68
ba8c8890 1c15ff18 8bba8c30 358bf845 ba8c3018 0xc183ba8c
ba8c8894 8bba8c30 358bf845 ba8c3018 3bf84d8d 0x1c15ff18
ba8c8898 358bf845 ba8c3018 3bf84d8d 8b1274c1 0x8bba8c30
ba8c889c ba8c3018 3bf84d8d 8b1274c1 a8488d18 0x358bf845
ba8c88a0 3bf84d8d 8b1274c1 a8488d18 d6ff01b2 Npfs!_imp_IofCompleteRequest
ba8c88a4 8b1274c1 a8488d18 d6ff01b2 3bf84d8d 0x3bf84d8d
ba8c88a8 a8488d18 d6ff01b2 3bf84d8d 75c38bd9 0x8b1274c1
ba8c88ac d6ff01b2 3bf84d8d 75c38bd9 24a164ee 0xa8488d18
ba8c88b0 3bf84d8d 75c38bd9 24a164ee 66000001 0xd6ff01b2
ba8c88b4 75c38bd9 24a164ee 66000001 667040ff 0x3bf84d8d
ba8c88b8 24a164ee 66000001 667040ff 7570488b 0x75c38bd9
ba8c88bc 66000001 667040ff 7570488b 28488d14 0x24a164ee
ba8c88c0 667040ff 7570488b 28488d14 0d740939 0x66000001
ba8c88c4 7570488b 28488d14 0d740939 72788366 0x667040ff
ba8c88c8 28488d14 0d740939 72788366 ff067500 0x7570488b
ba8c88cc 0d740939 72788366 ff067500 8c302415 0x28488d14
start end module name
80800000 80a75000 nt ntkrnlmp.exe Thu Mar 24 17:42:08 2005 (42435E60)
80a75000 80aa1000 hal halaacpi.dll Thu Mar 24 17:28:37 2005 (42435B35)
b8128000 b8155000 RDPWD RDPWD.SYS Wed Jun 15 09:33:14 2005 (42B04A3A)
b844d000 b8458000 TDTCP TDTCP.SYS Thu Mar 24 17:27:15 2005 (42435AE3)
b894d000 b89ab000 srv srv.sys Tue May 03 20:44:01 2005 (427836F1)
b8c2b000 b8c68000 TmXPFlt TmXPFlt.sys Fri Feb 18 04:04:33 2005 (4215CBC1)
b8c90000 b8d7af60 VsapiNT VsapiNT.sys Fri Feb 18 03:43:07 2005 (4215C6BB)
b8e83000 b8e8c000 ndisuio ndisuio.sys Thu Mar 24 17:33:16 2005 (42435C4C)
b8ebb000 b8ed0000 Cdfs Cdfs.SYS Thu Mar 24 17:40:55 2005 (42435E17)
b9fb9000 b9fca000 Fips Fips.SYS Thu Mar 24 17:40:33 2005 (42435E01)
ba06a000 ba0e0000 mrxsmb mrxsmb.sys Thu Mar 24 17:41:13 2005 (42435E29)
ba0e0000 ba110000 rdbss rdbss.sys Thu Mar 24 17:40:49 2005 (42435E11)
ba110000 ba13a000 afd afd.sys Thu Mar 24 17:40:43 2005 (42435E0B)
ba13a000 ba16b000 netbt netbt.sys Thu Mar 24 17:40:31 2005 (42435DFF)
ba16b000 ba1cc000 tcpip tcpip.sys Thu Mar 24 17:40:31 2005 (42435DFF)
ba1cc000 ba1e5000 ipsec ipsec.sys Thu Mar 24 17:40:49 2005 (42435E11)
ba2a2000 ba2a9000 parvdm parvdm.sys Tue Mar 25 00:03:49 2003 (3E7FFF55)
ba371000 ba385000 usbhub usbhub.sys Thu Mar 24 17:30:46 2005 (42435BB6)
ba3e5000 ba3ef000 Dxapi Dxapi.sys Tue Mar 25 00:06:01 2003 (3E7FFFD9)
ba3f5000 ba400000 dump_dpti2o dump_dpti2o.sys Sun Nov 14 15:01:04 2004 (4197D5A0)
ba405000 ba40f000 dump_diskdump dump_diskdump.sys Thu Mar 24 17:28:56 2005 (42435B48)
ba425000 ba465000 update update.sys Thu Mar 24 17:40:27 2005 (42435DFB)
ba465000 ba49c000 rdpdr rdpdr.sys Thu Mar 24 17:30:20 2005 (42435B9C)
ba49c000 ba4af000 raspptp raspptp.sys Thu Mar 24 17:40:43 2005 (42435E0B)
ba4d7000 ba4f1000 ndiswan ndiswan.sys Thu Mar 24 17:40:46 2005 (42435E0E)
ba4f1000 ba506000 rasl2tp rasl2tp.sys Thu Mar 24 17:40:29 2005 (42435DFD)
ba506000 ba530000 USBPORT USBPORT.SYS Thu Mar 24 17:30:43 2005 (42435BB3)
ba530000 ba558000 ks ks.sys Thu Mar 24 17:41:03 2005 (42435E1F)
ba558000 ba56c000 redbook redbook.sys Thu Mar 24 17:28:46 2005 (42435B3E)
ba56c000 ba581000 cdrom cdrom.sys Thu Mar 24 17:28:57 2005 (42435B49)
ba581000 ba594000 i8042prt i8042prt.sys Thu Mar 24 17:41:05 2005 (42435E21)
ba594000 ba5a9000 serial serial.sys Thu Mar 24 17:28:29 2005 (42435B2D)
ba5a9000 ba5c1000 parport parport.sys Thu Mar 24 17:28:25 2005 (42435B29)
ba5c1000 ba5dc000 VIDEOPRT VIDEOPRT.SYS Thu Mar 24 17:29:53 2005 (42435B81)
ba5dc000 ba62fd80 ati2mpad ati2mpad.sys Thu Jul 18 19:13:20 2002 (3D3767B0)
ba630000 ba658000 e1000325 e1000325.sys Wed Jun 29 11:49:03 2005 (42C2DF0F)
ba871000 ba87a000 hidusb hidusb.sys Tue Mar 25 00:10:17 2003 (3E8000D9)
ba881000 ba88d000 tmpreflt tmpreflt.sys Fri Feb 18 04:04:32 2005 (4215CBC0)
ba891000 ba89e000 netbios netbios.sys Thu Mar 24 17:33:21 2005 (42435C51)
ba8a1000 ba8ae000 wanarp wanarp.sys Thu Mar 24 17:34:07 2005 (42435C7F)
ba8b1000 ba8bf000 msgpc msgpc.sys Thu Mar 24 17:33:31 2005 (42435C5B)
ba8c1000 ba8ce000 Npfs Npfs.SYS Thu Mar 24 17:30:04 2005 (42435B8C)
ba8d1000 ba8dc000 Msfs Msfs.SYS Thu Mar 24 17:30:04 2005 (42435B8C)
ba8e1000 ba8ed000 vga vga.sys Thu Mar 24 17:29:54 2005 (42435B82)
bf800000 bf9cf000 win32k win32k.sys Thu Mar 24 17:40:09 2005 (42435DE9)
bf9cf000 bf9e5000 dxg dxg.sys Thu Mar 24 17:27:25 2005 (42435AED)
bf9e5000 bfa3b680 ati2drad ati2drad.dll Thu Mar 24 19:30:34 2005 (424377CA)
f7144000 f7163000 Mup Mup.sys Thu Mar 24 17:40:49 2005 (42435E11)
f7163000 f7199000 NDIS NDIS.sys Thu Mar 24 17:40:26 2005 (42435DFA)
f7199000 f722e000 Ntfs Ntfs.sys Thu Mar 24 17:40:29 2005 (42435DFD)
f722e000 f7255000 KSecDD KSecDD.sys Thu Mar 24 17:28:53 2005 (42435B45)
f7255000 f731b000 dmboot dmboot.sys Thu Mar 24 17:30:03 2005 (42435B8B)
f731b000 f7340000 fltmgr fltmgr.sys Thu Mar 24 17:30:25 2005 (42435BA1)
f7340000 f7353000 CLASSPNP CLASSPNP.SYS Thu Mar 24 17:40:23 2005 (42435DF7)
f7353000 f7364000 symmpi symmpi.sys Mon Dec 13 14:03:14 2004 (41BE0392)
f7364000 f7383000 SCSIPORT SCSIPORT.SYS Thu Mar 24 17:40:26 2005 (42435DFA)
f7383000 f739f000 atapi atapi.sys Thu Mar 24 17:28:49 2005 (42435B41)
f739f000 f73c9000 volsnap volsnap.sys Thu Mar 24 17:29:10 2005 (42435B56)
f73c9000 f73f5000 dmio dmio.sys Thu Mar 24 17:30:02 2005 (42435B8A)
f73f5000 f741c000 ftdisk ftdisk.sys Thu Mar 24 17:29:00 2005 (42435B4C)
f741c000 f7432000 pci pci.sys Thu Mar 24 17:34:14 2005 (42435C86)
f7432000 f7466000 ACPI ACPI.sys Thu Mar 24 17:34:09 2005 (42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 00:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 00:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Thu Mar 24 17:28:48 2005 (42435B40)
f74b7000 f74c7000 MountMgr MountMgr.sys Thu Mar 24 17:27:23 2005 (42435AEB)
f74c7000 f74d2000 PartMgr PartMgr.sys Thu Mar 24 17:40:34 2005 (42435E02)
f74d7000 f74e2000 dpti2o dpti2o.sys Sun Nov 14 15:01:04 2004 (4197D5A0)
f74e7000 f74f7000 disk disk.sys Thu Mar 24 17:28:58 2005 (42435B4A)
f74f7000 f7503000 Dfs Dfs.sys Thu Mar 24 17:30:28 2005 (42435BA4)
f7507000 f7511000 crcdisk crcdisk.sys Thu Mar 24 17:29:40 2005 (42435B74)
f7547000 f7552000 TDI TDI.SYS Thu Mar 24 17:35:34 2005 (42435CD6)
f7557000 f7566000 intelppm intelppm.sys Thu Mar 24 17:28:40 2005 (42435B38)
f7567000 f7571000 flpydisk flpydisk.sys Tue Mar 25 00:04:32 2003 (3E7FFF80)
f7597000 f75a0000 ndistapi ndistapi.sys Thu Mar 24 17:34:11 2005 (42435C83)
f75a7000 f75b5000 HIDCLASS HIDCLASS.SYS Tue Mar 25 00:10:17 2003 (3E8000D9)
f75d7000 f75e1000 mouclass mouclass.sys Tue Mar 25 00:03:09 2003 (3E7FFF2D)
f75e7000 f75f5000 NDProxy NDProxy.SYS Thu Mar 24 17:34:13 2005 (42435C85)
f75f7000 f7602000 fdc fdc.sys Thu Mar 24 17:28:43 2005 (42435B3B)
f7617000 f7620000 watchdog watchdog.sys Thu Mar 24 17:30:19 2005 (42435B9B)
f7627000 f7631000 serenum serenum.sys Thu Mar 24 17:28:27 2005 (42435B2B)
f7637000 f7646000 termdd termdd.sys Thu Mar 24 17:27:15 2005 (42435AE3)
f7647000 f7650000 mssmbios mssmbios.sys Thu Mar 24 17:34:14 2005 (42435C86)
f7677000 f7686000 raspppoe raspppoe.sys Thu Mar 24 17:34:16 2005 (42435C88)
f7687000 f7692000 ptilink ptilink.sys Thu Mar 24 17:28:25 2005 (42435B29)
f7697000 f76a0000 raspti raspti.sys Thu Mar 24 17:34:16 2005 (42435C88)
f76b7000 f76c1000 kbdclass kbdclass.sys Tue Mar 25 00:03:10 2003 (3E7FFF2E)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 00:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 00:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 00:04:46 2003 (3E7FFF8E)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 00:08:08 2003 (3E800058)
f77a7000 f77ab400 usbohci usbohci.sys Thu Mar 24 17:30:45 2005 (42435BB5)
f77af000 f77b7000 audstub audstub.sys Tue Mar 25 00:09:12 2003 (3E800098)
f77cf000 f77d7000 Fs_Rec Fs_Rec.SYS Tue Mar 25 00:08:36 2003 (3E800074)
f77d7000 f77de000 Null Null.SYS Tue Mar 25 00:03:05 2003 (3E7FFF29)
f77df000 f77e6000 Beep Beep.SYS Tue Mar 25 00:03:04 2003 (3E7FFF28)
f77e7000 f77ef000 mnmdd mnmdd.SYS Tue Mar 25 00:07:53 2003 (3E800049)
f77ef000 f77f7000 RDPCDD RDPCDD.sys Tue Mar 25 00:03:05 2003 (3E7FFF29)
f77f7000 f77ff000 rasacd rasacd.sys Tue Mar 25 00:11:50 2003 (3E800136)
f77ff000 f7805300 HIDPARSE HIDPARSE.SYS Thu Mar 24 17:30:36 2005 (42435BAC)
f7807000 f780f000 mouhid mouhid.sys Tue Mar 25 00:03:12 2003 (3E7FFF30)
f7817000 f781e000 dxgthk dxgthk.sys Tue Mar 25 00:05:52 2003 (3E7FFFD0)
f7995000 f7996280 swenum swenum.sys Thu Mar 24 17:27:42 2005 (42435AFE)
f7997000 f7998580 USBD USBD.SYS Tue Mar 25 00:10:39 2003 (3E8000EF)

Unloaded modules:
ba881000 ba88f000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f77c7000 f77cf000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

Link for more dumps

Hi,
I've posted more of the dumps to access via ftp. All of the txt files from the dumps can be found here:
ftp://lyle.homedns.org
Username: ftp@home.local
Password: guest
They are all a little different.
Any assistance is greatly appreciated.
Thanks
Lyle

 

Hi,

One minidump is crashed at IRQL x'1b' (profile level IRQL - performance monitoring) which is the symptom of faulty memory. A minidump is crashed with 3927 memory corruption errors and it is symptom of faulty paging space.

Suggestion
1. chkdsk /r
2. Re-allocate paging space
3. Reseat RAM
4. Check overheat
5. Check the PSU has adequate power supply to drive all devices including USB device.


Mini113005-01.dmp BugCheck A, {e800e8, 1b, 0, 8083f083}
Probably caused by : Npfs.SYS ( Npfs!NpQueryClientProcess+64 )

Mini111605-01.dmp BugCheck 1000007E, {c0000005, 0, f78c6c28, f78c6924}
Probably caused by : memory_corruption

STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
f78c6cec 8092d307 88ed21f0 00000002 00000000 0x0
f78c6d20 80840172 88ed21f0 00000000 8083fb69 nt!ObpRemoveObjectRoutine+0xc2
f78c6d40 b9e59fc6 b9e776a8 8932b134 f78c6d80 nt!ObfDereferenceObject+0x67
f78c6d50 b9e59a5e 00000000 8932b0c0 00000000 netbt!DelayedWipeOutLowerconn+0x15
f78c6d80 8083f72e b9e776bc 00000000 8a399810 netbt!NTExecuteWorker+0x6a
f78c6dac 8092ccff b9e776bc 00000000 00000000 nt!ExpWorkerThread+0xeb
f78c6ddc 80841a96 8083f671 00000000 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FAILED_INSTRUCTION_ADDRESS:
+0
00000000 0000 add [eax],al

CHKIMG_EXTENSION: !chkimg -lo 50 -d !hal
!chkimg -lo 50 -d !hal
80a78000-80a78070 113 bytes - hal!HalInitApicInterruptHandlers+28

[ e8 10 66 89 44 ca 06 b9:a0 89 a7 80 a4 89 a7 80 ]
80a78072-80a78080 15 bytes - hal!Dr_HReboot_a+3e (+0x72)

[ 3d 20 00 00 00 8b 9f f8:a7 80 46 8b a7 80 46 8b ]
80a78083-80a780a4 34 bytes - hal!Dr_HReboot_a+4f (+0x11)

[ 0f 23 c3 0f 23 c9 8b 9f:ff ff ff ff 0f b6 44 24 ]
80a780a7-80a78130 138 bytes - hal!Dr_HReboot_a+73 (+0x24)

[ 0f 23 f3 0f 23 f9 e9 c8:64 00 00 00 f0 0f ab 05 ]
80a78132-80a78155 36 bytes - hal!HalpApicRebootService+2a (+0x8b)

[ 66 8e e3 66 8e d8 66 8e:00 00 b8 7c 81 a7 80 66 ]
80a78157-80a78185 47 bytes - hal!HalpApicRebootService+4f (+0x25)

[ 0f 82 57 ff ff ff c7 44:00 b8 c0 88 a7 80 66 89 ]
80a78187-80a78191 11 bytes - hal!HalpApicRebootService+7f (+0x30)

[ 0d db ba 89 5d 00 89 7d:75 0a f6 45 6c 01 0f 84 ]
80a78193-80a781bf 45 bytes - hal!HalpApicRebootService+8b (+0x0c)

[ 00 00 8b 0d 80 00 fe ff:0f 21 c3 0f 21 c9 0f 21 ]
80a781c1 - hal!Dr_HGeneric_a+5 (+0x2e)

[ 02:00 ]
80a781c3-80a781cc 10 bytes - hal!Dr_HGeneric_a+7 (+0x02)

[ 75 0a f6 45 6c 01 0f 84:8b 9f f8 02 00 00 8b 8f ]
80a781d0 - hal!Dr_HGeneric_a+14 (+0x0d)

[ 21:23 ]
80a781d3 - hal!Dr_HGeneric_a+17 (+0x03)

[ 21:23 ]
80a781d5-80a781e0 12 bytes - hal!Dr_HGeneric_a+19 (+0x02)

[ 0f 21 d7 89 5d 18 89 4d:8b 9f 00 03 00 00 8b 8f ]
80a781e2-80a781e3 2 bytes - hal!Dr_HGeneric_a+26 (+0x0d)

[ 21 db:23 d3 ]
80a781e5-80a781fb 23 bytes - hal!Dr_HGeneric_a+29 (+0x03)

[ 21 f1 0f 21 ff 89 5d 24:23 d9 8b 9f 08 03 00 00 ]
80a781fe-80a78227 42 bytes - hal!Dr_HGeneric_a+42 (+0x19)

[ 00 8b 9f f8 02 00 00 8b:8b ff 8b 44 24 64 b9 10 ]
80a78229-80a78236 14 bytes - hal!Dr_HGeneric_a+6d (+0x2b)

[ 8b 8f 0c 03 00 00 0f 23:00 00 90 8b 85 84 00 00 ]
80a78238-80a78270 57 bytes - hal!Dr_HGeneric_a+7c (+0x0f)

[ 00 00 8b ff 8b 44 24 64:8b 4d 7c 8b 95 80 00 00 ]
80a78272-80a7827a 9 bytes - hal!V86_HGeneric_a+a (+0x3a)

[ 00 00 8b 4d 7c 8b 95 80:75 b8 bb 30 00 00 00 b8 ]
80a7827d-80a78280 4 bytes - hal!V86_HGeneric_a+15 (+0x0b)

[ 66 89 45 50:00 66 8e e3 ]
80a78282-80a782ac 43 bytes - hal!V86_HGeneric_a+1a (+0x05)

[ 89 5d 30 66 89 4d 34 66:8e d8 66 8e c0 64 8b 1d ]
80a782ae-80a782de 49 bytes - hal!HalpBroadcastCallService+1e (+0x2c)

[ 75 b8 66 83 7c 24 6c 08:00 00 00 64 8b 0d 24 01 ]
80a782e2-80a782e4 3 bytes - hal!HalpBroadcastCallService+52 (+0x34)

[ 64 c7 05:8b 0d 80 ]
80a782e6-80a782f3 14 bytes - hal!HalpBroadcastCallService+56 (+0x04)

[ 00 00 00 ff ff ff ff 89:fe ff 51 a3 80 00 fe ff ]
80a782f5 - hal!HalpBroadcastCallService+65 (+0x0f)

[ 01:00 ]
80a782f7-80a7830e 24 bytes - hal!HalpBroadcastCallService+67 (+0x02)

[ 0f 82 3f ff ff ff c7 44:00 e8 c1 52 00 00 58 a3 ]
80a78310-80a7834d 62 bytes - hal!HalpBroadcastCallService+80 (+0x19)

[ f6 41 03 ff 0f 85 a2 fe:00 02 00 75 0a f6 45 6c ]
80a7834f-80a78359 11 bytes - hal!HalpBroadcastCallService+bf (+0x3f)

[ 00 ff 25 10 60 a7 80 8b:8b 9f f8 02 00 00 8b 8f ]
80a7835b-80a78364 10 bytes - hal!HalpGenericCall+3 (+0x0c)

[ 00 00 f7 05 00 02 a8 80:0f 23 c3 0f 23 c9 8b 9f ]
80a78367-80a78399 51 bytes - hal!HalpGenericCall+f (+0x0c)

[ 75 ef f0 0f ba 2d 00 02:8b 8f 04 03 00 00 0f 23 ]
80a7839c-80a783b4 25 bytes - hal!HalpGenericCall+44 (+0x35)

[ e8 6f 42 00 00 e8 16 00:8b 52 04 8b 52 1c c1 e0 ]
80a783b7-80a783ba 4 bytes - hal!HalpGenericCall+5f (+0x1b)

[ 00 00 c2 0c:90 8b 85 84 ]
80a783bc-80a783f9 62 bytes - hal!HalpPollForBroadcast (+0x05)

[ a1 48 f0 df ff 85 05 0c:00 00 8b 9d 88 00 00 00 ]
80a783fb-80a78434 58 bytes - hal!Dr_HApicErr_a+7 (+0x3f)

[ 75 0a f6 45 6c 01 0f 84:00 02 00 75 b8 66 83 7c ]
80a78437-80a78452 28 bytes - hal!Dr_HApicErr_a+43 (+0x3c)

[ 8b 9f f8 02 00 00 8b 8f:00 00 ff ff ff ff 89 5c ]
80a78455-80a7845f 11 bytes - hal!Dr_HApicErr_a+61 (+0x1e)

[ 0f 23 d3 0f 23 d9 8b 9f:64 8b 0d 24 01 00 00 fc ]
80a78461-80a78482 34 bytes - hal!Dr_HApicErr_a+6d (+0x0c)

[ 8b 8f 0c 03 00 00 0f 23:f6 41 03 ff 0f 85 a1 fe ]
80a78484-80a784a9 38 bytes - hal!Abios_HApicErr_a+10 (+0x23)

[ 8b 52 04 8b 52 1c c1 e0:00 00 83 ec 04 54 68 c1 ]
80a784ac-80a784b3 8 bytes - hal!V86_HApicErr_a+c (+0x28)

[ 8b 4d 7c 8b 95 80 00 00:00 f7 05 10 02 a8 80 01 ]
80a784b5-80a784d5 33 bytes - hal!V86_HApicErr_a+15 (+0x09)

[ 66 89 45 50 66 89 5d 30:00 00 75 ef f0 0f ba 2d ]
80a784d7-80a78506 48 bytes - hal!HalpLocalApicErrorService+f (+0x22)

[ 4c 24 40 89 54 24 3c f7:15 18 02 a8 80 a3 1c 02 ]
80a78509-80a78532 42 bytes - hal!HalpLocalApicErrorService+41 (+0x32)

[ 00 66 8e e3 66 8e d8 66:c2 0c 00 64 a1 48 00 00 ]
80a78534-80a78538 5 bytes - hal!HalpLocalApicErrorService+6c (+0x2b)

[ ff c7 44 24 64:f7 02 00 10 00 ]
80a7853a-80a78546 13 bytes - hal!HalpLocalApicErrorService+72 (+0x06)

[ 00 00 00 8b 0d 24 f1 df:74 03 49 75 f5 8b c1 c3 ]
80a78548-80a78591 74 bytes - hal!HalpLocalApicErrorService+80 (+0x0e)

[ f6 41 03 ff 0f 85 a2 fe:00 02 00 75 0a f6 45 6c ]
80a78593-80a785d1 63 bytes - hal!HalpLocalApicErrorService+cb (+0x4b)

[ 00 00 00 a1 20 f0 df ff:0f 23 c3 0f 23 c9 8b 9f ]
80a785d3-80a7864d 123 bytes - hal!Dr_Hipi_a+7 (+0x40)

[ 75 0a f6 45 6c 01 0f 84:00 8b 52 04 8b 52 1c c1 ]
80a7864f-80a78651 3 bytes - hal!Abios_Hipi_a+3 (+0x7c)

[ 64 b9 10:30 bb 30 ]
80a78655-80a78658 4 bytes - hal!Abios_Hipi_a+9 (+0x06)

[ 64 8b 15 20:b8 23 00 00 ]
80a7865a-80a78669 16 bytes - hal!Abios_Hipi_a+e (+0x05)

[ 00 00 8b 52 04 8b 52 1c:66 8e e3 66 8e d8 66 8e ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.

3927 errors : !hal (80a78000-80a78fff)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: LARGE_4096
STACK_COMMAND: .cxr fffffffff78c6924 ; kb
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE_4096
BUCKET_ID: MEMORY_CORRUPTION_LARGE_4096

 

Hi,

The stack trace of mini120105-03.dmp shows that the stack trace is corrupted, it may be caused by hardware problem. Probably it is faulty ram or PSU.

Mini120105-03.dmp

BugCheck A, {5000000, 2, 1, 80a79133}
Probably caused by : hardware ( nt!KiTrap0E+2a7 )

ebugging Details:
------------------
WRITE_ADDRESS: 05000000
CURRENT_IRQL: 2

FAULTING_IP:
hal!HalpDispatchInterrupt+b
80a79133 44 inc esp

CUSTOMER_CRASH_COUNT: 3
DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP
BUGCHECK_STR: 0xA
LAST_CONTROL_TRANSFER: from 000c5010 to 80a79133

MISALIGNED_IP:
hal!HalpDispatchInterrupt+b
80a79133 44 inc esp

STACK_TEXT:
b8bd6be0 000c5010 8965c554 00000001 89a75f68 hal!HalpDispatchInterrupt+0xb
WARNING: Frame IP not in any known module. Following frames may be wrong.
b8bd6c50 89a75f68 b8bd6c70 89a75f68 89fc1aa0 0xc5010
ba8c888c c183ba8c 1c15ff18 8bba8c30 358bf845 0x89a75f68
ba8c8890 1c15ff18 8bba8c30 358bf845 ba8c3018 0xc183ba8c
ba8c8894 8bba8c30 358bf845 ba8c3018 3bf84d8d 0x1c15ff18
ba8c8898 358bf845 ba8c3018 3bf84d8d 8b1274c1 0x8bba8c30
ba8c889c ba8c3018 3bf84d8d 8b1274c1 a8488d18 0x358bf845