1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

BSOD ntkrpamp.exe?

Discussion in 'Windows XP' started by bigtwenty, 2008/04/01.

  1. 2008/04/01
    bigtwenty

    bigtwenty Inactive Thread Starter

    Joined:
    2008/04/01
    Messages:
    55
    Likes Received:
    0
    I have had a nightmare dell kicking my butt here. I think it is something to do with an installed program. But first, a little history...

    This woman has had BSOD's for a while now. We got so fed up, we replaced the entire system, new windows and everything. She continued to receive the BSOD's. It took a while, but they finally started showing up. She is the only one in the company who runs the surveillance software which monitors the property. It takes up quite a bit of resources, not a real lot, but noticeable. Here is one of the dmp files i caught on the 03.28.08:

    **********************************************************

    Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [c:\Mini032808-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: c:\i386
    Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_qfe.070227-2300
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
    Debug session time: Fri Mar 28 11:14:15.968 2008 (GMT-4)
    System Uptime: 3 days 19:47:38.701
    Loading Kernel Symbols
    .....................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    ...........
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000000A, {b958fffc, ff, 0, 80544e8f}



    Probably caused by : ntkrpamp.exe ( nt!SwapContext+6f )

    Followup: MachineOwner
    ---------

    0: kd> !analyze -v;r;kv;lmtn
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    IRQL_NOT_LESS_OR_EQUAL (a)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high. This is usually
    caused by drivers using improper addresses.
    If a kernel debugger is available get the stack backtrace.
    Arguments:
    Arg1: b958fffc, memory referenced
    Arg2: 000000ff, IRQL
    Arg3: 00000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
    Arg4: 80544e8f, address which referenced memory

    Debugging Details:
    ------------------




    READ_ADDRESS: b958fffc

    CURRENT_IRQL: ff

    FAULTING_IP:
    nt!SwapContext+6f
    80544e8f 0b880c020000 or ecx,dword ptr [eax+20Ch]

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0xA

    PROCESS_NAME: IEXPLORE.EXE

    LAST_CONTROL_TRANSFER: from 8054513d to 80544e8f

    STACK_TEXT:
    80550450 8054513d 00000000 0000000e 00000000 nt!SwapContext+0x6f
    80550454 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x81


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    nt!SwapContext+6f
    80544e8f 0b880c020000 or ecx,dword ptr [eax+20Ch]

    SYMBOL_STACK_INDEX: 0

    SYMBOL_NAME: nt!SwapContext+6f

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME: ntkrpamp.exe

    DEBUG_FLR_IMAGE_TIMESTAMP: 45e5484a

    FAILURE_BUCKET_ID: 0xA_nt!SwapContext+6f

    BUCKET_ID: 0xA_nt!SwapContext+6f

    Followup: MachineOwner
    ---------

    eax=b958fdf0 ebx=ffdff000 ecx=8001003b edx=80010031 esi=86341378 edi=8055ae40
    eip=80544e8f esp=8055044c ebp=8001003b iopl=0 nv up di ng nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010082
    nt!SwapContext+0x6f:
    80544e8f 0b880c020000 or ecx,dword ptr [eax+20Ch] ds:0023:b958fffc=????????
    ChildEBP RetAddr Args to Child
    80550450 8054513d 00000000 0000000e 00000000 nt!SwapContext+0x6f (FPO: [0,2,0])
    80550454 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x81 (FPO: [0,0,0])
    start end module name
    804d7000 806e2000 nt ntkrpamp.exe Wed Feb 28 04:15:54 2007 (45E5484A)
    806e2000 80702d00 hal halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)
    b8dbd000 b8de7180 kmixer kmixer.sys Wed Jun 14 04:47:45 2006 (448FCD31)
    b97c4000 b97e6080 RDPWD RDPWD.SYS Thu Jun 09 19:52:39 2005 (42A8D647)
    b97e7000 b9827280 HTTP HTTP.sys Thu Mar 16 20:33:09 2006 (441A03C5)
    b9be5000 b9bf9400 wdmaud wdmaud.sys Wed Jun 14 05:00:44 2006 (448FD03C)
    b9d72000 b9d80d80 sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)
    b9e3e000 b9e41580 KAPFA KAPFA.SYS Fri May 11 12:31:45 2007 (46449A71)
    ba032000 ba083480 srv srv.sys Mon Aug 14 06:34:39 2006 (44E051BF)
    ba1ec000 ba217d80 mrxdav mrxdav.sys Tue Dec 18 04:51:33 2007 (47679825)
    ba508000 ba50b280 ndisuio ndisuio.sys Wed Aug 04 02:03:10 2004 (41107C1E)
    bf000000 bf011580 dxg dxg.sys Wed Aug 04 02:00:51 2004 (41107B93)
    bf012000 bf593900 nv4_disp nv4_disp.dll Wed Dec 05 05:17:08 2007 (47567AA4)
    bf800000 bf9c2180 win32k win32k.sys Thu Mar 08 08:47:34 2007 (45F013F6)
    bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 03:56:56 2004 (411096C8)
    f3e20000 f3e37480 dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
    f3e60000 f3ecea80 mrxsmb mrxsmb.sys Tue Jun 20 04:50:24 2006 (4497B6D0)
    f3ecf000 f3ef9a00 rdbss rdbss.sys Fri May 05 05:47:55 2006 (445B1F4B)
    f3efa000 f3f1bd00 afd afd.sys Wed Aug 04 02:14:13 2004 (41107EB5)
    f3f1c000 f3f3cf00 ipnat ipnat.sys Wed Sep 29 18:28:36 2004 (415B3714)
    f3f3d000 f3f64c00 netbt netbt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
    f3f8d000 f3fe4e80 tcpip tcpip.sys Tue Oct 30 13:20:52 2007 (472767F4)
    f3fe5000 f3ff7400 ipsec ipsec.sys Wed Aug 04 02:14:27 2004 (41107EC3)
    f4058000 f4060160 tifsfilt tifsfilt.sys Thu Apr 12 09:28:47 2007 (461E340F)
    f40b8000 f4117f00 Senfilt Senfilt.sys Mon Mar 13 12:40:28 2006 (4415A07C)
    f4118000 f4139700 portcls portcls.sys Tue Mar 16 14:58:17 2004 (40574E49)
    f413a000 f4189000 ADIHdAud ADIHdAud.sys Fri Aug 03 15:29:11 2007 (46B38207)
    f41a9000 f41ab900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
    f41b1000 f41b3f80 mouhid mouhid.sys Fri Aug 17 16:47:57 2001 (3B7D82FD)
    f41b5000 f41b8a00 kbdhid kbdhid.sys Wed Aug 04 01:58:33 2004 (41107B09)
    f41b9000 f41bb580 hidusb hidusb.sys Fri Aug 17 17:02:16 2001 (3B7D8658)
    f41ed000 f41ef280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
    f69d7000 f6a2fe80 update update.sys Mon Apr 23 06:32:54 2007 (462C8B56)
    f6a58000 f6a88100 rdpdr rdpdr.sys Wed Aug 04 02:01:10 2004 (41107BA6)
    f6a89000 f6a99e00 psched psched.sys Wed Aug 04 02:04:16 2004 (41107C60)
    f6a9a000 f6ab0680 ndiswan ndiswan.sys Wed Aug 04 02:14:30 2004 (41107EC6)
    f6ab1000 f6ad3680 ks ks.sys Wed Aug 04 02:15:20 2004 (41107EF8)
    f6ad4000 f6ae7900 parport parport.sys Wed Aug 04 01:59:04 2004 (41107B28)
    f6ae8000 f6b0af00 USBPORT USBPORT.SYS Tue Oct 25 19:39:41 2005 (435EC23D)
    f6b0b000 f6b36000 b57xp32 b57xp32.sys Wed Jun 06 15:50:59 2007 (46671023)
    f6b36000 f6b5c000 HDAudBus HDAudBus.sys Thu Aug 12 20:45:52 2004 (411C0F40)
    f6b5c000 f6b6ff00 VIDEOPRT VIDEOPRT.SYS Thu Aug 03 10:02:07 2006 (44D201DF)
    f6b8d000 f72a4480 nv4_mini nv4_mini.sys Wed Dec 05 05:20:59 2007 (47567B8B)
    f72ed000 f72f0c80 mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
    f72f1000 f72f4600 SSLDrv SSLDrv.sys Fri Mar 24 18:40:16 2006 (44247550)
    f7311000 f7313580 ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
    f7319000 f731cc80 serenum serenum.sys Wed Aug 04 01:59:06 2004 (41107B2A)
    f734e000 f7368580 Mup Mup.sys Wed Aug 04 02:15:20 2004 (41107EF8)
    f7369000 f7384d80 snapman snapman.sys Thu Feb 15 05:27:54 2007 (45D435AA)
    f7385000 f73e3ec0 timntr timntr.sys Mon Sep 25 09:44:11 2006 (4517DD2B)
    f73e4000 f7410a80 NDIS NDIS.sys Wed Aug 04 02:14:27 2004 (41107EC3)
    f7411000 f749d400 Ntfs Ntfs.sys Fri Feb 09 06:10:31 2007 (45CC56A7)
    f749e000 f74b4780 KSecDD KSecDD.sys Wed Aug 04 01:59:45 2004 (41107B51)
    f74b5000 f74c6f00 sr sr.sys Wed Aug 04 02:06:22 2004 (41107CDE)
    f74c7000 f74e6780 fltMgr fltMgr.sys Mon Aug 21 05:14:57 2006 (44E97991)
    f74e7000 f74fe480 atapi atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
    f74ff000 f7524700 dmio dmio.sys Wed Aug 04 02:07:13 2004 (41107D11)
    f7525000 f7543880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
    f7544000 f7554a80 pci pci.sys Wed Aug 04 02:07:45 2004 (41107D31)
    f7555000 f7582d80 ACPI ACPI.sys Wed Aug 04 02:07:35 2004 (41107D27)
    f7684000 f768cc00 isapnp isapnp.sys Fri Aug 17 16:58:01 2001 (3B7D8559)
    f7694000 f769e500 MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
    f76a4000 f76b0c80 VolSnap VolSnap.sys Wed Aug 04 02:00:14 2004 (41107B6E)
    f76b4000 f76bce00 disk disk.sys Wed Aug 04 01:59:53 2004 (41107B59)
    f76c4000 f76d0200 CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
    f76e4000 f76ecd80 HIDCLASS HIDCLASS.SYS Wed Aug 04 02:08:18 2004 (41107D52)
    f7794000 f779cd00 intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)
    f77a4000 f77b3d80 serial serial.sys Wed Aug 04 02:15:51 2004 (41107F17)
    f77b4000 f77be380 imapi imapi.sys Wed Aug 04 02:00:12 2004 (41107B6C)
    f77c4000 f77d0180 cdrom cdrom.sys Wed Aug 04 01:59:52 2004 (41107B58)
    f77d4000 f77e2080 redbook redbook.sys Wed Aug 04 01:59:34 2004 (41107B46)
    f77e4000 f77f0880 rasl2tp rasl2tp.sys Wed Aug 04 02:14:21 2004 (41107EBD)
    f77f4000 f77fe200 raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
    f7804000 f780fd00 raspptp raspptp.sys Wed Aug 04 02:14:26 2004 (41107EC2)
    f7814000 f781c900 msgpc msgpc.sys Wed Aug 04 02:04:11 2004 (41107C5B)
    f7834000 f783df00 termdd termdd.sys Wed Aug 04 01:58:52 2004 (41107B1C)
    f7864000 f786d480 NDProxy NDProxy.SYS Fri Aug 17 16:55:30 2001 (3B7D84C2)
    f7874000 f7882b80 drmk drmk.sys Wed Aug 04 02:07:54 2004 (41107D3A)
    f7894000 f78a2100 usbhub usbhub.sys Wed Aug 04 02:08:40 2004 (41107D68)
    f78b4000 f78bc700 netbios netbios.sys Wed Aug 04 02:03:19 2004 (41107C27)
    f78c4000 f78cc700 wanarp wanarp.sys Wed Aug 04 02:04:57 2004 (41107C89)
    f78d4000 f78dc880 Fips Fips.SYS Fri Aug 17 21:31:49 2001 (3B7DC585)
    f78f4000 f7903900 Cdfs Cdfs.SYS Wed Aug 04 02:14:09 2004 (41107EB1)
    f7904000 f790a200 PCIIDEX PCIIDEX.SYS Wed Aug 04 01:59:40 2004 (41107B4C)
    f790c000 f7910900 PartMgr PartMgr.sys Fri Aug 17 21:32:23 2001 (3B7DC5A7)
    f7954000 f7959000 usbuhci usbuhci.sys Wed Aug 04 02:08:34 2004 (41107D62)
    f795c000 f7962a80 usbehci usbehci.sys Tue Oct 25 19:39:41 2005 (435EC23D)
    f7964000 f7968880 TDI TDI.SYS Wed Aug 04 02:07:47 2004 (41107D33)
    f7974000 f7978580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
    f797c000 f7980080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
    f7984000 f798a000 kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
    f798c000 f7991a00 mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
    f79b4000 f79ba180 HIDPARSE HIDPARSE.SYS Wed Aug 04 02:08:15 2004 (41107D4F)
    f79bc000 f79c1200 vga vga.sys Wed Aug 04 02:07:06 2004 (41107D0A)
    f79c4000 f79c8a80 Msfs Msfs.SYS Wed Aug 04 02:00:37 2004 (41107B85)
    f79cc000 f79d3880 Npfs Npfs.SYS Wed Aug 04 02:00:38 2004 (41107B86)
    f79dc000 f79e0f40 avgmfx86 avgmfx86.sys Mon Dec 03 22:13:43 2007 (4754C5E7)
    f79f4000 f79f8500 watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)
    f7a64000 f7a69500 TDTCP TDTCP.SYS Wed Aug 04 01:58:52 2004 (41107B1C)
    f7a94000 f7a97000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
    f7b84000 f7b85b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
    f7b86000 f7b87100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
    f7b88000 f7b89700 dmload dmload.sys Fri Aug 17 16:58:15 2001 (3B7D8567)
    f7ba4000 f7ba5100 swenum swenum.sys Wed Aug 04 01:58:41 2004 (41107B11)
    f7bc2000 f7bc3280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
    f7bc4000 f7bc6000 i2omgmt i2omgmt.SYS Wed Aug 04 02:00:50 2004 (41107B92)
    f7bc6000 f7bc7f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
    f7bc8000 f7bc9080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
    f7bca000 f7bcb080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
    f7bcc000 f7bcd080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
    f7bd8000 f7bd9100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
    f7c3c000 f7c3d360 avgtdi avgtdi.sys Thu Aug 25 05:59:58 2005 (430D969E)
    f7c4c000 f7c4cd00 pciide pciide.sys Fri Aug 17 16:51:49 2001 (3B7D83E5)
    f7c4d000 f7c4dd80 atiide atiide.sys Thu Sep 07 16:37:20 2006 (45008300)
    f7d2c000 f7d2cc00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
    f7d36000 f7d36d00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
    f7d38000 f7d38b80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
    f7d4b000 f7d4c000 avgclean avgclean.sys Mon Dec 03 07:09:01 2007 (4753F1DD)

    Unloaded modules:
    b925d000 b9288000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b9b97000 b9bc2000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7cea000 f7ceb000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b9fea000 b9ff7000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b9bc2000 b9be5000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7844000 f7852000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7bb8000 f7bba000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f41f1000 f41f5000 kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f78a4000 f78b1000 i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f79ac000 f79b1000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f41f5000 f41f8000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    **********************************************************

    I have also this one from 03.31.08:

    *********************************************************

    Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [c:\Mini033108-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: c:\i386
    Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_qfe.070227-2300
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
    Debug session time: Sun Mar 30 16:33:30.460 2008 (GMT-4)
    System Uptime: 2 days 5:18:48.395
    Loading Kernel Symbols
    .......................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    ............
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 10000050, {f7765c6c, 1, 80510782, 0}


    Could not read faulting driver name


    Probably caused by : memory_corruption ( nt!MmOutPageKernelStack+a6 )

    Followup: MachineOwner
    ---------

    1: kd> !analyze -v;r;kv;lmtn
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    PAGE_FAULT_IN_NONPAGED_AREA (50)
    Invalid system memory was referenced. This cannot be protected by try-except,
    it must be protected by a Probe. Typically the address is just plain bad or it
    is pointing at freed memory.
    Arguments:
    Arg1: f7765c6c, memory referenced.
    Arg2: 00000001, value 0 = read operation, 1 = write operation.
    Arg3: 80510782, If non-zero, the instruction address which referenced the bad memory
    address.
    Arg4: 00000000, (reserved)

    Debugging Details:
    ------------------


    Could not read faulting driver name



    WRITE_ADDRESS: f7765c6c

    FAULTING_IP:
    nt!MmOutPageKernelStack+a6
    80510782 8941fc mov dword ptr [ecx-4],eax

    MM_INTERNAL_CODE: 0

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0x50

    PROCESS_NAME: System

    LAST_CONTROL_TRANSFER: from 8053f499 to 80510782

    STACK_TEXT:
    f7affd74 8053f499 c07bbb10 00000000 00000000 nt!MmOutPageKernelStack+0xa6
    f7affda8 8053f59d 805cea08 00000000 00000000 nt!KiOutSwapKernelStacks+0xe5
    f7affdac 805cea08 00000000 00000000 00000000 nt!KeSwapProcessOrStack+0x43
    f7affddc 8054546e 8053f55a 00000000 00000000 nt!PspSystemThreadStartup+0x34
    00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    nt!MmOutPageKernelStack+a6
    80510782 8941fc mov dword ptr [ecx-4],eax

    SYMBOL_STACK_INDEX: 0

    SYMBOL_NAME: nt!MmOutPageKernelStack+a6

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: nt

    DEBUG_FLR_IMAGE_TIMESTAMP: 45e5484a

    IMAGE_NAME: memory_corruption

    FAILURE_BUCKET_ID: 0x50_W_nt!MmOutPageKernelStack+a6

    BUCKET_ID: 0x50_W_nt!MmOutPageKernelStack+a6

    Followup: MachineOwner
    ---------

    eax=867fada8 ebx=c07bbb18 ecx=f7765c70 edx=00000078 esi=c07bbb28 edi=0000000f
    eip=80510782 esp=f7affd04 ebp=f7affd74 iopl=0 nv up ei ng nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
    nt!MmOutPageKernelStack+0xa6:
    80510782 8941fc mov dword ptr [ecx-4],eax ds:0023:f7765c6c=????????
    ChildEBP RetAddr Args to Child
    f7affd74 8053f499 c07bbb10 00000000 00000000 nt!MmOutPageKernelStack+0xa6 (FPO: [Non-Fpo])
    f7affda8 8053f59d 805cea08 00000000 00000000 nt!KiOutSwapKernelStacks+0xe5 (FPO: [Non-Fpo])
    f7affdac 805cea08 00000000 00000000 00000000 nt!KeSwapProcessOrStack+0x43 (FPO: [1,0,0])
    f7affddc 8054546e 8053f55a 00000000 00000000 nt!PspSystemThreadStartup+0x34 (FPO: [Non-Fpo])
    00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
    start end module name
    804d7000 806e2000 nt ntkrpamp.exe Wed Feb 28 04:15:54 2007 (45E5484A)
    806e2000 80702d00 hal halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)
    b6ccb000 b6cee000 Fastfat Fastfat.SYS Wed Aug 04 02:14:15 2004 (41107EB7)
    b9729000 b9769280 HTTP HTTP.sys Thu Mar 16 20:33:09 2006 (441A03C5)
    b98fa000 b991c080 RDPWD RDPWD.SYS Thu Jun 09 19:52:39 2005 (42A8D647)
    b9b39000 b9b3c580 KAPFA KAPFA.SYS Fri May 11 12:31:45 2007 (46449A71)
    b9dcc000 b9e1d480 srv srv.sys Mon Aug 14 06:34:39 2006 (44E051BF)
    ba15f000 ba173400 wdmaud wdmaud.sys Wed Jun 14 05:00:44 2006 (448FD03C)
    ba1ec000 ba217d80 mrxdav mrxdav.sys Tue Dec 18 04:51:33 2007 (47679825)
    ba480000 ba48ed80 sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)
    ba508000 ba50b280 ndisuio ndisuio.sys Wed Aug 04 02:03:10 2004 (41107C1E)
    bf000000 bf011580 dxg dxg.sys Wed Aug 04 02:00:51 2004 (41107B93)
    bf012000 bf593900 nv4_disp nv4_disp.dll Wed Dec 05 05:17:08 2007 (47567AA4)
    bf800000 bf9c2180 win32k win32k.sys Thu Mar 08 08:47:34 2007 (45F013F6)
    bff60000 bff76780 RDPDD RDPDD.dll Wed Aug 04 03:56:37 2004 (411096B5)
    bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 03:56:56 2004 (411096C8)
    f3e20000 f3e37480 dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
    f3e60000 f3ecea80 mrxsmb mrxsmb.sys Tue Jun 20 04:50:24 2006 (4497B6D0)
    f3ecf000 f3ef9a00 rdbss rdbss.sys Fri May 05 05:47:55 2006 (445B1F4B)
    f3efa000 f3f1bd00 afd afd.sys Wed Aug 04 02:14:13 2004 (41107EB5)
    f3f1c000 f3f3cf00 ipnat ipnat.sys Wed Sep 29 18:28:36 2004 (415B3714)
    f3f3d000 f3f64c00 netbt netbt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
    f3f8d000 f3fe4e80 tcpip tcpip.sys Tue Oct 30 13:20:52 2007 (472767F4)
    f3fe5000 f3ff7400 ipsec ipsec.sys Wed Aug 04 02:14:27 2004 (41107EC3)
    f4058000 f4060160 tifsfilt tifsfilt.sys Thu Apr 12 09:28:47 2007 (461E340F)
    f40b8000 f4117f00 Senfilt Senfilt.sys Mon Mar 13 12:40:28 2006 (4415A07C)
    f4118000 f4139700 portcls portcls.sys Tue Mar 16 14:58:17 2004 (40574E49)
    f413a000 f4189000 ADIHdAud ADIHdAud.sys Fri Aug 03 15:29:11 2007 (46B38207)
    f41a5000 f41a7900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
    f41b5000 f41b7f80 mouhid mouhid.sys Fri Aug 17 16:47:57 2001 (3B7D82FD)
    f41b9000 f41bca00 kbdhid kbdhid.sys Wed Aug 04 01:58:33 2004 (41107B09)
    f41bd000 f41bf580 hidusb hidusb.sys Fri Aug 17 17:02:16 2001 (3B7D8658)
    f41f1000 f41f3280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
    f69d7000 f6a2fe80 update update.sys Mon Apr 23 06:32:54 2007 (462C8B56)
    f6a58000 f6a88100 rdpdr rdpdr.sys Wed Aug 04 02:01:10 2004 (41107BA6)
    f6a89000 f6a99e00 psched psched.sys Wed Aug 04 02:04:16 2004 (41107C60)
    f6a9a000 f6ab0680 ndiswan ndiswan.sys Wed Aug 04 02:14:30 2004 (41107EC6)
    f6ab1000 f6ad3680 ks ks.sys Wed Aug 04 02:15:20 2004 (41107EF8)
    f6ad4000 f6ae7900 parport parport.sys Wed Aug 04 01:59:04 2004 (41107B28)
    f6b05000 f6b27f00 USBPORT USBPORT.SYS Tue Oct 25 19:39:41 2005 (435EC23D)
    f6b28000 f6b53000 b57xp32 b57xp32.sys Wed Jun 06 15:50:59 2007 (46671023)
    f6b53000 f6b79000 HDAudBus HDAudBus.sys Thu Aug 12 20:45:52 2004 (411C0F40)
    f6b79000 f6b8cf00 VIDEOPRT VIDEOPRT.SYS Thu Aug 03 10:02:07 2006 (44D201DF)
    f6b8d000 f72a4480 nv4_mini nv4_mini.sys Wed Dec 05 05:20:59 2007 (47567B8B)
    f72f5000 f72f8c80 mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
    f72fd000 f7300600 SSLDrv SSLDrv.sys Fri Mar 24 18:40:16 2006 (44247550)
    f734e000 f7368580 Mup Mup.sys Wed Aug 04 02:15:20 2004 (41107EF8)
    f7369000 f7384d80 snapman snapman.sys Thu Feb 15 05:27:54 2007 (45D435AA)
    f7385000 f73e3ec0 timntr timntr.sys Mon Sep 25 09:44:11 2006 (4517DD2B)
    f73e4000 f7410a80 NDIS NDIS.sys Wed Aug 04 02:14:27 2004 (41107EC3)
    f7411000 f749d400 Ntfs Ntfs.sys Fri Feb 09 06:10:31 2007 (45CC56A7)
    f749e000 f74b4780 KSecDD KSecDD.sys Wed Aug 04 01:59:45 2004 (41107B51)
    f74b5000 f74c6f00 sr sr.sys Wed Aug 04 02:06:22 2004 (41107CDE)
    f74c7000 f74e6780 fltMgr fltMgr.sys Mon Aug 21 05:14:57 2006 (44E97991)
    f74e7000 f74fe480 atapi atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
    f74ff000 f7524700 dmio dmio.sys Wed Aug 04 02:07:13 2004 (41107D11)
    f7525000 f7543880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
    f7544000 f7554a80 pci pci.sys Wed Aug 04 02:07:45 2004 (41107D31)
    f7555000 f7582d80 ACPI ACPI.sys Wed Aug 04 02:07:35 2004 (41107D27)
    f7684000 f768cc00 isapnp isapnp.sys Fri Aug 17 16:58:01 2001 (3B7D8559)
    f7694000 f769e500 MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
    f76a4000 f76b0c80 VolSnap VolSnap.sys Wed Aug 04 02:00:14 2004 (41107B6E)
    f76b4000 f76bce00 disk disk.sys Wed Aug 04 01:59:53 2004 (41107B59)
    f76c4000 f76d0200 CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
    f76e4000 f76ec700 wanarp wanarp.sys Wed Aug 04 02:04:57 2004 (41107C89)
    f76f4000 f76fc880 Fips Fips.SYS Fri Aug 17 21:31:49 2001 (3B7DC585)
    f7714000 f7723900 Cdfs Cdfs.SYS Wed Aug 04 02:14:09 2004 (41107EB1)
    f7724000 f772cd80 HIDCLASS HIDCLASS.SYS Wed Aug 04 02:08:18 2004 (41107D52)
    f77d4000 f77dcd00 intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)
    f77e4000 f77f3d80 serial serial.sys Wed Aug 04 02:15:51 2004 (41107F17)
    f77f4000 f77fe380 imapi imapi.sys Wed Aug 04 02:00:12 2004 (41107B6C)
    f7804000 f7810180 cdrom cdrom.sys Wed Aug 04 01:59:52 2004 (41107B58)
    f7814000 f7822080 redbook redbook.sys Wed Aug 04 01:59:34 2004 (41107B46)
    f7824000 f7830880 rasl2tp rasl2tp.sys Wed Aug 04 02:14:21 2004 (41107EBD)
    f7834000 f783e200 raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
    f7844000 f784fd00 raspptp raspptp.sys Wed Aug 04 02:14:26 2004 (41107EC2)
    f7854000 f785c900 msgpc msgpc.sys Wed Aug 04 02:04:11 2004 (41107C5B)
    f7874000 f787df00 termdd termdd.sys Wed Aug 04 01:58:52 2004 (41107B1C)
    f7884000 f788d480 NDProxy NDProxy.SYS Fri Aug 17 16:55:30 2001 (3B7D84C2)
    f7894000 f78a2b80 drmk drmk.sys Wed Aug 04 02:07:54 2004 (41107D3A)
    f78d4000 f78e2100 usbhub usbhub.sys Wed Aug 04 02:08:40 2004 (41107D68)
    f78f4000 f78fc700 netbios netbios.sys Wed Aug 04 02:03:19 2004 (41107C27)
    f7904000 f790a200 PCIIDEX PCIIDEX.SYS Wed Aug 04 01:59:40 2004 (41107B4C)
    f790c000 f7910900 PartMgr PartMgr.sys Fri Aug 17 21:32:23 2001 (3B7DC5A7)
    f7954000 f7959000 usbuhci usbuhci.sys Wed Aug 04 02:08:34 2004 (41107D62)
    f795c000 f7962a80 usbehci usbehci.sys Tue Oct 25 19:39:41 2005 (435EC23D)
    f7964000 f7968880 TDI TDI.SYS Wed Aug 04 02:07:47 2004 (41107D33)
    f796c000 f7970580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
    f7974000 f7978080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
    f797c000 f7982000 kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
    f7984000 f7989a00 mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
    f79a4000 f79aa180 HIDPARSE HIDPARSE.SYS Wed Aug 04 02:08:15 2004 (41107D4F)
    f79ac000 f79b1200 vga vga.sys Wed Aug 04 02:07:06 2004 (41107D0A)
    f79b4000 f79b8a80 Msfs Msfs.SYS Wed Aug 04 02:00:37 2004 (41107B85)
    f79bc000 f79c3880 Npfs Npfs.SYS Wed Aug 04 02:00:38 2004 (41107B86)
    f79c4000 f79ca780 USBSTOR USBSTOR.SYS Wed Aug 04 02:08:44 2004 (41107D6C)
    f79cc000 f79d0f40 avgmfx86 avgmfx86.sys Mon Dec 03 22:13:43 2007 (4754C5E7)
    f79e4000 f79e8500 watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)
    f7a14000 f7a19500 TDTCP TDTCP.SYS Wed Aug 04 01:58:52 2004 (41107B1C)
    f7a94000 f7a97000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
    f7b78000 f7b7bc80 serenum serenum.sys Wed Aug 04 01:59:06 2004 (41107B2A)
    f7b80000 f7b82580 ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
    f7b84000 f7b85b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
    f7b86000 f7b87100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
    f7b88000 f7b89700 dmload dmload.sys Fri Aug 17 16:58:15 2001 (3B7D8567)
    f7ba2000 f7ba3360 avgtdi avgtdi.sys Thu Aug 25 05:59:58 2005 (430D969E)
    f7bac000 f7bad100 swenum swenum.sys Wed Aug 04 01:58:41 2004 (41107B11)
    f7bc0000 f7bc1280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
    f7bc6000 f7bc8000 i2omgmt i2omgmt.SYS Wed Aug 04 02:00:50 2004 (41107B92)
    f7bc8000 f7bc9f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
    f7bca000 f7bcb080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
    f7bcc000 f7bcd080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
    f7bce000 f7bcf080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
    f7bd8000 f7bd9100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
    f7c4c000 f7c4cd00 pciide pciide.sys Fri Aug 17 16:51:49 2001 (3B7D83E5)
    f7c4d000 f7c4dd80 atiide atiide.sys Thu Sep 07 16:37:20 2006 (45008300)
    f7d74000 f7d74c00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
    f7d89000 f7d89d00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
    f7d8d000 f7d8db80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
    f7d9b000 f7d9c000 avgclean avgclean.sys Mon Dec 03 07:09:01 2007 (4753F1DD)

    Unloaded modules:
    b9403000 b942e000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b95e6000 b9611000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba049000 ba074000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7c8c000 f7c8d000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba5a0000 ba5ad000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba4b0000 ba4be000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba13c000 ba15f000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7b98000 f7b9a000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f41f5000 f41f9000 kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f78e4000 f78f1000 i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f799c000 f79a1000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f41f9000 f41fc000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000

    Sorry for the long post
     
  2. 2008/04/01
    mailman Lifetime Subscription

    mailman Geek Member

    Joined:
    2004/01/17
    Messages:
    1,901
    Likes Received:
    11
    Hi, bigtwenty. Welcome to Windows BBS! :)

    No need to apologize for the long post. We often like to see two or three dump logs to help determine whether there may be a pattern or not. Differing BSOD bugcheck codes seem to often implicate hardware.

    NOTE:
    One of your dump logs states,
    In case you decide to test your RAM for errors, all of the following RAM testers have been recommended in this forum. However, opinions differ about which RAM tester is "best ".
    If you discover an error with any of these RAM testers and the RAM tester does not identify which RAM module is defective, then re-run the test with only a single RAM module installed until you identify which module is defective. (I am not familiar with the exact information output of any of these RAM testers when they find errors.)
    • Microsoft KB134503:
    ==========

    A More Reliable RAM Testing Method:
    1. Remove some of the memory modules from the computer (while the computer is off, of course).
      • For example, if two RAM modules are installed in your computer, remove one of the RAM modules.
    2. Start your computer and see if the problem goes away.
    3. If you continue to have unexpected reboots or BSODs, then replace that RAM module with another module, or install the module in a different memory slot.
    4. Start your computer and see if the problem goes away.
    Continue this process to see if you can pinpoint the cause of your problem to a specific RAM module or slot.
     
    Last edited: 2008/04/01

  3. to hide this advert.

  4. 2008/04/01
    mailman Lifetime Subscription

    mailman Geek Member

    Joined:
    2004/01/17
    Messages:
    1,901
    Likes Received:
    11

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.