1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

"IRQL_NOT_LESS ..." again! [DUMP DATA]

Discussion in 'Windows XP' started by GotN, 2005/04/07.

Thread Status:
Not open for further replies.
  1. 2005/04/07
    GotN

    GotN Inactive Thread Starter

    Joined:
    2005/04/05
    Messages:
    5
    Likes Received:
    0
    Dear experts, please help me. :)
    My system is experiencing blue screens with IRQL_NOT_LESS_OR_EQUAL stop error.

    Thanks for any help.

    Dump data following:


    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.4.0007.2
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\MEMORY.DMP]
    Kernel Complete Dump File: Full address space is available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_rtm.040803-2158
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055ab20
    Debug session time: Thu Apr 7 13:46:46.972 2005 (GMT+2)
    System Uptime: 1 days 13:26:12.436
    Loading Kernel Symbols
    ................................................................................................................................................................................
    Loading unloaded module list
    .....................................
    Loading User Symbols
    .....................................................................................
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck D1, {2ec7000, 1b, 0, 10187cfe}

    *** WARNING: Unable to verify checksum for core.dll
    *** ERROR: Module load completed but symbols could not be loaded for core.dll
    Probably caused by : ntoskrnl.exe ( nt!KiTrap0E+233 )

    Followup: MachineOwner
    ---------

    kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high. This is usually
    caused by drivers using improper addresses.
    If kernel debugger is available get stack backtrace.
    Arguments:
    Arg1: 02ec7000, memory referenced
    Arg2: 0000001b, IRQL
    Arg3: 00000000, value 0 = read operation, 1 = write operation
    Arg4: 10187cfe, address which referenced memory

    Debugging Details:
    ------------------


    OVERLAPPED_MODULE:

    READ_ADDRESS: 02ec7000

    CURRENT_IRQL: 1b

    FAULTING_IP:
    core+87cfe
    10187cfe f3a5 rep movsd

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0xD1

    LAST_CONTROL_TRANSFER: from 10187cfe to 804e2158

    STACK_TEXT:
    b29dcd64 10187cfe badb0d00 0000000a a8b38d98 nt!KiTrap0E+0x233
    WARNING: Stack unwind information not available. Following frames may be wrong.
    022962a0 00002e32 02249b40 021cd860 00000000 core+0x87cfe


    FOLLOWUP_IP:
    nt!KiTrap0E+233
    804e2158 f7457000000200 test dword ptr [ebp+0x70],0x20000

    SYMBOL_STACK_INDEX: 0

    FOLLOWUP_NAME: MachineOwner

    SYMBOL_NAME: nt!KiTrap0E+233

    MODULE_NAME: nt

    IMAGE_NAME: ntoskrnl.exe

    DEBUG_FLR_IMAGE_TIMESTAMP: 41108004

    STACK_COMMAND: kb

    FAILURE_BUCKET_ID: 0xD1_nt!KiTrap0E+233

    BUCKET_ID: 0xD1_nt!KiTrap0E+233

    Followup: MachineOwner
    ---------
     
    GotN,
    #1
  2. 2005/04/07
    GotN

    GotN Inactive Thread Starter

    Joined:
    2005/04/05
    Messages:
    5
    Likes Received:
    0
    ... continued

    eax=ffdff13c ebx=0000001b ecx=00000000 edx=40000000 esi=10187cfe edi=02ec7000
    eip=804e2158 esp=b29dcd4c ebp=b29dcd64 iopl=0 nv up ei ng nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00200286
    nt!KiTrap0E+0x233:
    804e2158 f7457000000200 test dword ptr [ebp+0x70],0x20000 ss:0010:b29dcdd4=00210212
    ChildEBP RetAddr Args to Child
    b29dcd64 10187cfe badb0d00 0000000a a8b38d98 nt!KiTrap0E+0x233 (FPO: [0,0] TrapFrame @ b29dcd64)
    WARNING: Stack unwind information not available. Following frames may be wrong.
    022962a0 00002e32 02249b40 021cd860 00000000 core+0x87cfe
    start end module name
    00420000 00426000 ogg ogg.dll Sat Jul 31 00:18:28 2004 (410AC934)
    00430000 0044f000 vorbis vorbis.dll Sat Jul 31 00:19:11 2004 (410AC95F)
    00450000 00610000 editor editor.dll Thu Mar 03 20:16:15 2005 (4227627F)
    00610000 00ca6000 Engine Engine.dll Thu Mar 03 20:12:38 2005 (422761A6)
    00cb0000 00cec000 IFC23 IFC23.dll Fri Apr 04 03:09:56 2003 (3E8CDB64)
    01d70000 01d80000 imhook imhook.dll Thu Jan 22 17:28:33 2004 (400FFA31)
    01e90000 01eb9000 ophookSE2 ophookSE2.dll Thu May 08 12:00:45 2003 (3EBA2ACD)
    01fe0000 01ff0000 ctagent ctagent.dll Mon Oct 06 08:57:48 2003 (3F81126C)
    02330000 02356000 WinDrv WinDrv.dll Thu Mar 03 20:17:26 2005 (422762C6)
    02470000 0255e000 D3DDRV D3DDRV.dll Thu Mar 03 20:16:55 2005 (422762A7)
    026e0000 026f0000 Gameplay Gameplay.dll Thu Mar 03 20:13:09 2005 (422761C5)
    029e0000 02a34000 gbxAI gbxAI.dll Thu Mar 03 20:14:59 2005 (42276233)
    02a40000 02a55000 gbxVehicles gbxVehicles.dll Thu Mar 03 20:14:49 2005 (42276229)
    02b00000 02b10000 gbxInventory gbxInventory.dll Thu Mar 03 20:16:28 2005 (4227628C)
    02b90000 02ba6000 gbxCharacters gbxCharacters.dll Thu Mar 03 20:14:28 2005 (42276214)
    02c10000 02c17000 gbxGameplay gbxGameplay.dll Thu Mar 03 20:15:06 2005 (4227623A)
    02c50000 02ca2000 IpDrv IpDrv.dll Thu Mar 03 20:14:41 2005 (42276221)
    02f50000 02f5e000 gbxEnvironment gbxEnvironment.dll Thu Mar 03 20:15:12 2005 (42276240)
    030c0000 030d2000 gbxScripted gbxScripted.dll Thu Mar 03 20:15:32 2005 (42276254)
    03100000 03118000 gbxHUD gbxHUD.dll Thu Mar 03 20:17:17 2005 (422762BD)
    03470000 03494000 ALAudio ALAudio.dll Thu Mar 03 20:17:08 2005 (422762B4)
    034a0000 03583000 DefOpenAL32 DefOpenAL32.dll Thu Mar 27 20:24:48 2003 (3E835000)
    04010000 0407d000 GUI GUI.dll Thu Mar 03 20:18:06 2005 (422762EE)
    043a0000 043b1000 gbxMP gbxMP.dll Thu Mar 03 20:16:41 2005 (42276299)
    09130000 0913d000 MouseHook MouseHook.dll Tue Dec 14 10:47:55 2004 (41BEB6CB)
    10000000 10008000 vorbisfile vorbisfile.dll Sat Jul 31 00:19:29 2004 (410AC971)
    10100000 1022c000 core core.dll Thu Mar 03 20:09:31 2005 (422760EB)
    10400000 10411000 gbxEffects gbxEffects.dll Thu Mar 03 20:16:34 2005 (42276292)
    10600000 1069e000 gbxBase gbxBase.dll Thu Mar 03 20:13:00 2005 (422761BC)
    10700000 107fe000 GameService GameService.dll Thu Mar 03 20:14:15 2005 (42276207)
    10900000 10967000 bia bia.exe Tue Sep 15 16:18:48 1987 (214D4C48)
    11000000 1114c000 window window.dll Thu Mar 03 20:15:23 2005 (4227624B)
    12000000 121d4000 xerces_c_2_5_0 xerces-c_2_5_0.dll Tue Aug 24 20:52:48 2004 (412B8E80)
    18000000 18068000 binkw32 binkw32.dll Sun Jan 09 03:53:35 2005 (41E09CAF)
    20000000 202d9000 xpsp2res xpsp2res.dll Wed Aug 04 09:58:21 2004 (4110971D)
    4fd50000 4fef6000 d3d9 d3d9.dll Wed Aug 04 09:54:47 2004 (41109647)
    5b0f0000 5b128000 uxtheme uxtheme.dll Wed Aug 04 09:56:49 2004 (411096C1)
    5d450000 5d4e7000 COMCTL32 COMCTL32.dll Wed Aug 04 09:55:07 2004 (4110965B)
    67330000 6735f000 asOEHook asOEHook.dll Mon Dec 20 18:56:58 2004 (41C7126A)
    68d90000 68d99000 HID HID.DLL Wed Aug 04 09:55:06 2004 (4110965A)
    6d2f0000 6d329000 DINPUT8 DINPUT8.dll Wed Aug 04 09:55:16 2004 (41109664)
    6de80000 6de86000 d3d8thk d3d8thk.dll Wed Aug 04 09:54:46 2004 (41109646)
    71a00000 71a08000 WS2HELP WS2HELP.dll Wed Aug 04 09:57:58 2004 (41109706)
    71a10000 71a27000 WS2_32 WS2_32.dll Wed Aug 04 09:57:57 2004 (41109705)
    72210000 7223b000 dinput dinput.dll Wed Aug 04 09:55:15 2004 (41109663)
    72c80000 72c88000 msacm32 msacm32.drv Sat Aug 18 13:50:14 2001 (3B7E5676)
    72c90000 72c99000 wdmaud_72c90000 wdmaud.drv Wed Aug 04 09:57:03 2004 (411096CF)
    73250000 73255000 RICHED32 RICHED32.DLL Sat Aug 18 13:50:11 2001 (3B7E5673)
    736d0000 73719000 ddraw ddraw.dll Wed Aug 04 09:55:00 2004 (41109654)
    73b30000 73b36000 DCIMAN32 DCIMAN32.dll Wed Aug 04 09:54:59 2004 (41109653)
    73e40000 73e44000 KsUser KsUser.dll Wed Aug 04 09:55:36 2004 (41109678)
    73e70000 73ecc000 dsound dsound.dll Wed Aug 04 09:55:52 2004 (41109688)
    746a0000 746eb000 MSCTF MSCTF.dll Wed Aug 04 09:56:38 2004 (411096B6)
    74db0000 74e1c000 RICHED20 RICHED20.dll Wed Aug 04 09:56:04 2004 (41109694)
    76330000 7634d000 IMM32 IMM32.dll Wed Aug 04 09:55:29 2004 (41109671)
    76350000 7639a000 comdlg32 comdlg32.dll Wed Aug 04 09:55:08 2004 (4110965C)
    76620000 766d5000 USERENV USERENV.dll Wed Aug 04 09:56:47 2004 (411096BF)
    76af0000 76b1e000 WINMM WINMM.dll Wed Aug 04 09:57:19 2004 (411096DF)
    76bf0000 76c1e000 WINTRUST WINTRUST.dll Wed Aug 04 09:57:00 2004 (411096CC)
    76c50000 76c78000 IMAGEHLP IMAGEHLP.dll Wed Aug 04 09:55:24 2004 (4110966C)
    76f90000 7700f000 CLBCATQ CLBCATQ.DLL Wed Aug 04 09:54:54 2004 (4110964E)
    77010000 770e3000 COMRes COMRes.dll Wed Aug 04 09:55:12 2004 (41109660)
    770f0000 7717c000 OLEAUT32 OLEAUT32.dll Wed Aug 04 09:57:08 2004 (411096D4)
    77180000 77227000 WININET WININET.dll Thu Jan 27 18:13:37 2005 (41F92141)
    773a0000 774a2000 comctl32_773a0000 comctl32.dll Wed Aug 04 09:54:27 2004 (41109633)
    774b0000 775ed000 ole32 ole32.dll Fri Jan 14 09:57:03 2005 (41E7895F)
    778f0000 779e4000 SETUPAPI SETUPAPI.DLL Wed Aug 04 09:56:11 2004 (4110969B)
    77a50000 77ae5000 CRYPT32 CRYPT32.dll Wed Aug 04 09:54:43 2004 (41109643)
    77af0000 77b02000 MSASN1 MSASN1.dll Wed Aug 04 09:56:31 2004 (411096AF)
    77ba0000 77ba7000 midimap midimap.dll Wed Aug 04 09:55:33 2004 (41109675)
    77bb0000 77bc5000 MSACM32_77bb0000 MSACM32.dll Wed Aug 04 09:56:11 2004 (4110969B)
    77bd0000 77bd8000 VERSION VERSION.dll Wed Aug 04 09:56:47 2004 (411096BF)
    77be0000 77c38000 msvcrt msvcrt.dll Wed Aug 04 09:58:22 2004 (4110971E)
    77d10000 77da0000 USER32 USER32.dll Wed Aug 04 09:56:46 2004 (411096BE)
    77da0000 77e4a000 ADVAPI32 ADVAPI32.dll Wed Aug 04 09:54:54 2004 (4110964E)
    77e50000 77ee1000 RPCRT4 RPCRT4.dll Wed Aug 04 09:56:06 2004 (41109696)
    77ef0000 77f36000 GDI32 GDI32.dll Wed Aug 04 09:55:00 2004 (41109654)
    77f40000 77fb6000 SHLWAPI SHLWAPI.dll Thu Jan 27 18:13:37 2005 (41F92141)
    7c000000 7c054000 MSVCR70 MSVCR70.dll Sat Jan 05 12:37:24 2002 (3C36E574)
    7c060000 7c071000 MSVCI70 MSVCI70.dll Sat Jan 05 12:38:36 2002 (3C36E5BC)
    7c340000 7c396000 MSVCR71 MSVCR71.dll Fri Feb 21 13:42:20 2003 (3E561EAC)
    7c3a0000 7c41b000 MSVCP71 MSVCP71.dll Wed Mar 19 05:14:51 2003 (3E77EEBB)
    7c800000 7c906000 kernel32 kernel32.dll Wed Aug 04 09:57:08 2004 (411096D4)
    7c910000 7c9c7000 ntdll ntdll.dll Wed Aug 04 09:57:08 2004 (411096D4)
    7c9d0000 7d1ee000 SHELL32 SHELL32.dll Tue Dec 21 20:58:51 2004 (41C8807B)
    804d7000 806ec080 nt ntoskrnl.exe Wed Aug 04 08:19:48 2004 (41108004)
    806ed000 8070d380 hal halaacpi.dll Wed Aug 04 07:59:05 2004 (41107B29)
    a695b000 a6984f00 kmixer kmixer.sys Wed Aug 04 08:07:46 2004 (41107D32)
    b99b1000 b99c1960 NAVENG NAVENG.Sys Thu Dec 30 22:46:10 2004 (41D47722)
    b99c2000 b9a5aa60 NavEx15 NavEx15.Sys Thu Dec 30 22:45:19 2004 (41D476EF)
    ba121000 ba144000 Fastfat Fastfat.SYS Wed Aug 04 08:14:15 2004 (41107EB7)
    bf800000 bf9c0400 win32k win32k.sys Wed Aug 04 08:17:30 2004 (41107F7A)
    bf9c1000 bf9d2580 dxg dxg.sys Wed Aug 04 08:00:51 2004 (41107B93)
    bf9d3000 bfddfc00 nv4_disp nv4_disp.dll Tue Oct 07 02:03:41 2003 (3F8202DD)
    bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 09:55:27 2004 (4110966F)
    f2546000 f2586100 HTTP HTTP.sys Sat Oct 09 01:48:20 2004 (41672744)
    f2a14000 f2a28400 wdmaud wdmaud.sys Wed Aug 04 08:15:03 2004 (41107EE7)
    f33c3000 f341a000 SAVRT SAVRT.SYS Sat Jul 24 04:26:42 2004 (4101C8E2)
    f35fa000 f3621f00 secdrv secdrv.sys Tue Aug 31 15:42:55 2004 (4134805F)
    f366a000 f3678d80 sysaudio sysaudio.sys Wed Aug 04 08:15:54 2004 (41107F1A)
    f3712000 f3764180 srv srv.sys Wed Aug 04 08:14:44 2004 (41107ED4)
    f378d000 f37b2220 CAPI20 CAPI20.SYS Sun Dec 09 14:52:43 2001 (3C136CAB)
    f37db000 f3807400 mrxdav mrxdav.sys Wed Aug 04 08:00:49 2004 (41107B91)
    f3810000 f3813da0 PfModNT PfModNT.sys Wed Mar 05 05:19:28 2003 (3E657AD0)
    f3860000 f386f000 rvsport rvsport.sys Tue Nov 27 18:20:05 2001 (3C03CB45)
    f3908000 f39107c0 detewecp detewecp.sys Tue Sep 18 16:37:53 2001 (3BA75C41)
    f3998000 f399bb80 Aspi32 Aspi32.SYS Tue Dec 23 03:02:44 1997 (349F1BC4)
    f3b28000 f3b2a0a0 CDAC15BA CDAC15BA.SYS Fri Jul 27 18:54:52 2001 (3B619CDC)
    f4468000 f447d580 irda irda.sys Wed Aug 04 08:00:50 2004 (41107B92)
    f458a000 f458d280 ndisuio ndisuio.sys Wed Aug 04 08:03:10 2004 (41107C1E)
    f576f000 f5775000 symlcbrd symlcbrd.sys Sun Aug 22 10:10:18 2004 (412854EA)
    f577f000 f5796480 dump_atapi dump_atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
    f57e7000 f5855400 mrxsmb mrxsmb.sys Wed Jan 19 05:26:50 2005 (41EDE18A)
    f5856000 f5880a00 rdbss rdbss.sys Thu Oct 28 03:13:57 2004 (418047D5)
    f5881000 f5894000 SAVRTPEL SAVRTPEL.SYS Sat Jul 24 04:26:47 2004 (4101C8E7)
    f6894000 f68be900 anvioctl anvioctl.sys Mon Aug 11 10:16:06 2003 (3F3750C6)
    f68bf000 f68e0d00 afd afd.sys Wed Aug 04 08:14:13 2004 (41107EB5)
    f68e1000 f6908c00 netbt netbt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
    f6909000 f6924ee0 ulisa ulisa.sys Thu Nov 15 15:49:17 2001 (3BF3D5ED)
    f6925000 f696b460 symidsco symidsco.sys Fri Mar 04 03:55:44 2005 (4227CE30)
    f6a0c000 f6a349e0 SYMFW SYMFW.SYS Sat Jan 22 06:57:51 2005 (41F1EB5F)
    f6a35000 f6a55f00 ipnat ipnat.sys Thu Sep 30 00:28:36 2004 (415B3714)
    f6a56000 f6a6fa80 SYMEVENT SYMEVENT.SYS Tue Oct 19 23:18:08 2004 (41758490)
    f6a70000 f6aafda0 SYMTDI SYMTDI.SYS Sat Jan 22 06:55:40 2005 (41F1EADC)
    f6ab0000 f6b07a80 tcpip tcpip.sys Wed Aug 04 08:14:39 2004 (41107ECF)
    f6b08000 f6b1a400 ipsec ipsec.sys Wed Aug 04 08:14:27 2004 (41107EC3)
    f6b3b000 f6b89000 SSHDRV86 SSHDRV86.sys Mon Oct 18 09:10:10 2004 (41736C52)
    f6b89000 f6bd3000 SSHDRV84 SSHDRV84.sys Thu Jun 17 15:04:38 2004 (40D196E6)
    f6bdb000 f6bdd900 Dxapi Dxapi.sys Fri Aug 17 22:53:19 2001 (3B7D843F)
    f6ca8000 f6d457e0 ctac32k ctac32k.sys Mon Feb 23 08:16:09 2004 (4039A8B9)
    f6d46000 f6d65be0 ctsfm2k ctsfm2k.sys Wed Oct 08 04:09:07 2003 (3F8371C3)
    f6d66000 f6d87660 emupia2k emupia2k.sys Mon Oct 13 11:42:10 2003 (3F8A7372)
    f6d88000 f6e64d40 ha10kx2k ha10kx2k.sys Tue Feb 24 05:17:00 2004 (403AD03C)
    f6e65000 f6e892c0 hap16v2k hap16v2k.sys Tue Oct 21 11:23:40 2003 (3F94FB1C)
    f6ea6000 f6ea8280 rasacd rasacd.sys Fri Aug 17 22:55:39 2001 (3B7D84CB)
    f7fb2000 f7fd3020 windrvr windrvr.sys Thu Jan 09 20:13:12 2003 (3E1DC9C8)
    f7fd4000 f7fe7480 MarvinBus MarvinBus.sys Mon Jun 21 16:03:21 2004 (40D6EAA9)
    f8010000 f8043200 update update.sys Wed Aug 04 07:58:32 2004 (41107B08)
    f8044000 f8074100 rdpdr rdpdr.sys Wed Aug 04 08:01:10 2004 (41107BA6)
    f8075000 f8085e00 psched psched.sys Wed Aug 04 08:04:16 2004 (41107C60)
    f8106000 f8115900 Cdfs Cdfs.SYS Wed Aug 04 08:14:09 2004 (41107EB1)
    f8116000 f811ed80 HIDCLASS HIDCLASS.SYS Wed Aug 04 08:08:18 2004 (41107D52)
    f8126000 f813c680 ndiswan ndiswan.sys Wed Aug 04 08:14:30 2004 (41107EC6)
    f813d000 f8150a00 parport parport.sys Wed Aug 04 07:59:04 2004 (41107B28)
    f815d000 f8160720 pclepci pclepci.sys Fri Sep 07 11:09:39 2001 (3B988ED3)
    f8179000 f8189180 serial serial.sys Wed Aug 04 08:15:51 2004 (41107F17)
    f818a000 f81a9000 dig_v dig_v.sys unavailable (FFFFFFFE)
    f81a9000 f81d48e0 ctoss2k ctoss2k.sys Wed Oct 08 04:06:48 2003 (3F837138)
    f81d5000 f81f8980 portcls portcls.sys Wed Aug 04 08:15:47 2004 (41107F13)
    f81f9000 f82539a0 ctaud2k ctaud2k.sys Mon Oct 18 09:21:20 2004 (41736EF0)
    f8254000 f8276e80 USBPORT USBPORT.SYS Wed Aug 04 08:08:34 2004 (41107D62)
    f8277000 f8299680 ks ks.sys Wed Aug 04 08:15:20 2004 (41107EF8)
    f829a000 f82ad780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 08:07:04 2004 (41107D08)
    f82ae000 f8413be0 nv4_mini nv4_mini.sys Tue Oct 07 01:56:53 2003 (3F820145)
    f8434000 f8436160 pctvnet pctvnet.sys Mon Apr 05 17:10:09 2004 (407176D1)
    f845c000 f8476580 Mup Mup.sys Wed Aug 04 08:15:20 2004 (41107EF8)
     
    GotN,
    #2

  3. to hide this advert.

  4. 2005/04/07
    GotN

    GotN Inactive Thread Starter

    Joined:
    2005/04/05
    Messages:
    5
    Likes Received:
    0
    ... continued

    f8477000 f8493000 prohlp02 prohlp02.sys unavailable (FFFFFFFE)
    f8493000 f84bfa80 NDIS NDIS.sys Wed Aug 04 08:14:27 2004 (41107EC3)
    f84c0000 f854c480 Ntfs Ntfs.sys Wed Aug 04 08:15:06 2004 (41107EEA)
    f854d000 f8563780 KSecDD KSecDD.sys Wed Aug 04 07:59:45 2004 (41107B51)
    f8564000 f8575f00 sr sr.sys Wed Aug 04 08:06:22 2004 (41107CDE)
    f8576000 f8595000 fltmgr fltmgr.sys unavailable (FFFFFFFE)
    f8595000 f85ac800 SCSIPORT SCSIPORT.SYS Wed Aug 04 07:59:39 2004 (41107B4B)
    f85ad000 f85c4480 Unknown_Module_f85ad000 Unknown_Module_f85ad000 Wed Aug 04 07:59:41 2004 (41107B4D)
    f85c5000 f85eaa00 dmio dmio.sys Wed Aug 04 08:07:13 2004 (41107D11)
    f85eb000 f8609d80 ftdisk ftdisk.sys Fri Aug 17 22:52:41 2001 (3B7D8419)
    f860a000 f861aa80 pci pci.sys Wed Aug 04 08:07:45 2004 (41107D31)
    f861b000 f8649180 ACPI ACPI.sys Wed Aug 04 08:07:35 2004 (41107D27)
    f864a000 f866fe00 d347bus d347bus.sys Sun Aug 22 15:31:09 2004 (4128A01D)
    f8691000 f8699d80 isapnp isapnp.sys Fri Aug 17 22:58:01 2001 (3B7D8559)
    f86a1000 f86ab500 MountMgr MountMgr.sys Wed Aug 04 07:58:29 2004 (41107B05)
    f86b1000 f86be200 VolSnap VolSnap.sys Wed Aug 04 08:00:14 2004 (41107B6E)
    f86c1000 f86c9e00 disk disk.sys Wed Aug 04 07:59:53 2004 (41107B59)
    f86d1000 f86dd200 CLASSPNP CLASSPNP.SYS Wed Aug 04 08:14:26 2004 (41107EC2)
    f86e1000 f86eb500 viaagp viaagp.sys Wed Aug 04 08:07:42 2004 (41107D2E)
    f86f1000 f86fcf80 sisidex sisidex.sys Thu Oct 17 09:14:44 2002 (3DAE6364)
    f8701000 f870fe80 ohci1394 ohci1394.sys Wed Aug 04 08:10:05 2004 (41107DBD)
    f8711000 f871e000 1394BUS 1394BUS.SYS Wed Aug 04 08:10:03 2004 (41107DBB)
    f8741000 f874cd00 raspptp raspptp.sys Wed Aug 04 08:14:26 2004 (41107EC2)
    f8751000 f8760180 nic1394 nic1394.sys Wed Aug 04 07:58:28 2004 (41107B04)
    f8761000 f8769900 msgpc msgpc.sys Wed Aug 04 08:04:11 2004 (41107C5B)
    f8771000 f87796e0 Pcouffin Pcouffin.sys Wed Jan 07 00:53:59 2004 (3FFB4A97)
    f8781000 f878af00 termdd termdd.sys Wed Aug 04 07:58:52 2004 (41107B1C)
    f8791000 f879bd60 WmXlCore WmXlCore.sys Fri May 14 08:54:23 2004 (40A46D1F)
    f87b1000 f87ba480 NDProxy NDProxy.SYS Fri Aug 17 22:55:30 2001 (3B7D84C2)
    f87c1000 f87cf100 usbhub usbhub.sys Wed Aug 04 08:08:40 2004 (41107D68)
    f87e1000 f87e9700 wanarp wanarp.sys Wed Aug 04 08:04:57 2004 (41107C89)
    f87f1000 f87fb000 SYMNDIS SYMNDIS.SYS Sat Jan 22 06:57:07 2005 (41F1EB33)
    f8811000 f881fd80 arp1394 arp1394.sys Wed Aug 04 07:58:28 2004 (41107B04)
    f8821000 f8829700 netbios netbios.sys Wed Aug 04 08:03:19 2004 (41107C27)
    f8841000 f884f000 prodrv06 prodrv06.sys unavailable (FFFFFFFE)
    f8851000 f8859900 Fips Fips.SYS Sat Aug 18 03:31:49 2001 (3B7DC585)
    f8861000 f886b200 amdk7 amdk7.sys Wed Aug 04 07:59:19 2004 (41107B37)
    f8871000 f887e000 i8042prt i8042prt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
    f8881000 f888b380 imapi imapi.sys Wed Aug 04 08:00:12 2004 (41107B6C)
    f8891000 f889d180 cdrom cdrom.sys Wed Aug 04 07:59:52 2004 (41107B58)
    f88a1000 f88af100 redbook redbook.sys Wed Aug 04 07:59:34 2004 (41107B46)
    f88b1000 f88bfb80 drmk drmk.sys Wed Aug 04 08:07:54 2004 (41107D3A)
    f88e1000 f88ece00 STREAM STREAM.SYS Wed Aug 04 08:07:58 2004 (41107D3E)
    f88f1000 f88fd880 rasl2tp rasl2tp.sys Wed Aug 04 08:14:21 2004 (41107EBD)
    f8901000 f890b200 raspppoe raspppoe.sys Wed Aug 04 08:05:06 2004 (41107C92)
    f8911000 f8917200 PCIIDEX PCIIDEX.SYS Wed Aug 04 07:59:40 2004 (41107B4C)
    f8919000 f891d900 PartMgr PartMgr.sys Sat Aug 18 03:32:23 2001 (3B7DC5A7)
    f8921000 f89250a0 PxHelp20 PxHelp20.sys Sat Jul 26 01:49:00 2003 (3F21C1EC)
    f8929000 f8930880 SISAGPX SISAGPX.sys Thu Oct 31 04:58:41 2002 (3DC0AA71)
    f8969000 f896f180 HIDPARSE HIDPARSE.SYS Wed Aug 04 08:08:15 2004 (41107D4F)
    f8971000 f8976200 vga vga.sys Wed Aug 04 08:07:06 2004 (41107D0A)
    f8979000 f897e000 Msfs Msfs.SYS unavailable (FFFFFFFE)
    f8981000 f8986c00 mouclass mouclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
    f8989000 f898f280 kbdclass kbdclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
    f8991000 f8999000 ASAPIW2k ASAPIW2k.sys Fri Nov 28 18:34:39 2003 (3FC7872F)
    f8999000 f899d280 usbohci usbohci.sys Wed Aug 04 08:08:34 2004 (41107D62)
    f89a1000 f89a7800 usbehci usbehci.sys Wed Aug 04 08:08:34 2004 (41107D62)
    f89a9000 f89b0e00 sisnic sisnic.sys Wed Jul 10 10:39:32 2002 (3D2BF2C4)
    f89b1000 f89b8880 Npfs Npfs.SYS Wed Aug 04 08:00:38 2004 (41107B86)
    f89b9000 f89be000 dig_ts dig_ts.sys unavailable (FFFFFFFE)
    f89c1000 f89c5900 irsir irsir.sys Fri Aug 17 22:51:28 2001 (3B7D83D0)
    f89c9000 f89d0680 Modem Modem.SYS Wed Aug 04 08:08:04 2004 (41107D44)
    f89d1000 f89d5c80 rasirda rasirda.sys Fri Aug 17 22:51:29 2001 (3B7D83D1)
    f89d9000 f89dd880 TDI TDI.SYS Wed Aug 04 08:07:47 2004 (41107D33)
    f89e1000 f89e5580 ptilink ptilink.sys Fri Aug 17 22:49:53 2001 (3B7D8371)
    f89e9000 f89ed080 raspti raspti.sys Fri Aug 17 22:55:32 2001 (3B7D84C4)
    f89f9000 f89fe060 SYMREDRV SYMREDRV.SYS Sat Jan 22 06:58:32 2005 (41F1EB88)
    f8a09000 f8a101e0 SYMIDS SYMIDS.SYS Sat Jan 22 06:59:16 2005 (41F1EBB4)
    f8a21000 f8a27500 usbprint usbprint.sys Wed Aug 04 08:01:23 2004 (41107BB3)
    f8a39000 f8a3d2c0 asuskbnt asuskbnt.sys Thu Apr 24 05:28:09 2003 (3EA759C9)
    f8a59000 f8a5d500 watchdog watchdog.sys Wed Aug 04 08:07:32 2004 (41107D24)
    f8aa1000 f8aa4000 BOOTVID BOOTVID.dll Fri Aug 17 22:49:09 2001 (3B7D8345)
    f8aa5000 f8aa7500 sisperf sisperf.sys Tue Aug 20 11:19:07 2002 (3D62098B)
    f8b35000 f8b38c80 mssmbios mssmbios.sys Wed Aug 04 08:07:47 2004 (41107D33)
    f8b3d000 f8b3f7a0 WmBEnum WmBEnum.sys Fri May 14 08:54:27 2004 (40A46D23)
    f8b55000 f8b57580 hidusb hidusb.sys Fri Aug 17 23:02:16 2001 (3B7D8658)
    f8b71000 f8b73980 gameenum gameenum.sys Wed Aug 04 08:08:20 2004 (41107D54)
    f8b75000 f8b78c80 serenum serenum.sys Wed Aug 04 07:59:06 2004 (41107B2A)
    f8b7d000 f8b7fc00 irenum irenum.sys Wed Aug 04 08:00:45 2004 (41107B8D)
    f8b8d000 f8b8f580 ndistapi ndistapi.sys Fri Aug 17 22:55:29 2001 (3B7D84C1)
    f8b91000 f8b92b80 kdcom kdcom.dll Fri Aug 17 22:49:10 2001 (3B7D8346)
    f8b93000 f8b94100 WMILIB WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
    f8b95000 f8b96800 viaidexp viaidexp.sys Thu Oct 18 08:12:14 2001 (3BCE72BE)
    f8b97000 f8b99000 dmload dmload.sys unavailable (FFFFFFFE)
    f8b99000 f8b9a480 d347prt d347prt.sys Sun Aug 22 15:31:48 2004 (4128A044)
    f8b9b000 f8b9c2e0 sfhlp01 sfhlp01.sys Mon Dec 01 16:20:51 2003 (3FCB5C53)
    f8b9d000 f8b9eb80 prosync1 prosync1.sys Mon Jul 19 16:49:53 2004 (40FBDF91)
    f8ba3000 f8ba4f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 22:49:37 2001 (3B7D8361)
    f8ba5000 f8ba6080 Beep Beep.SYS Fri Aug 17 22:47:33 2001 (3B7D82E5)
    f8ba7000 f8ba8080 mnmdd mnmdd.SYS Fri Aug 17 22:57:28 2001 (3B7D8538)
    f8ba9000 f8baa080 RDPCDD RDPCDD.sys Fri Aug 17 22:46:56 2001 (3B7D82C0)
    f8bad000 f8bae640 SYMDNS SYMDNS.SYS Sat Jan 22 06:56:20 2005 (41F1EB04)
    f8bc1000 f8bc26c0 ctprxy2k ctprxy2k.sys Wed Oct 08 04:08:11 2003 (3F83718B)
    f8bc5000 f8bc6900 pctvvbi pctvvbi.sys Mon Nov 11 18:52:52 2002 (3DCFEE74)
    f8bc7000 f8bc8700 RootMdm RootMdm.sys Fri Aug 17 22:57:36 2001 (3B7D8540)
    f8bc9000 f8bca100 swenum swenum.sys Wed Aug 04 07:58:41 2004 (41107B11)
    f8bdf000 f8be0100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
    f8be9000 f8bea280 USBD USBD.SYS Fri Aug 17 23:02:58 2001 (3B7D8682)
    f8c2f000 f8c31000 ParVdm ParVdm.SYS unavailable (FFFFFFFE)
    f8c33000 f8c342c0 CDRPDACC CDRPDACC.SYS Tue Oct 28 22:01:25 2003 (3F9ED925)
    f8c59000 f8c59d00 pciide pciide.sys Fri Aug 17 22:51:49 2001 (3B7D83E5)
    f8c5a000 f8c5b000 siside siside.sys Tue Mar 25 10:50:44 2003 (3E802674)
    f8c95000 f8c95b80 mbmiodrvr mbmiodrvr.sys Sat Apr 10 16:42:35 2004 (407807DB)
    f8caf000 f8cb0000 Null Null.SYS unavailable (FFFFFFFE)
    f8cb0000 f8cb0d00 dxgthk dxgthk.sys Fri Aug 17 22:53:12 2001 (3B7D8438)
    f8ce7000 f8ce7c00 audstub audstub.sys Fri Aug 17 22:59:40 2001 (3B7D85BC)
     
    GotN,
    #3
  5. 2005/04/07
    GotN

    GotN Inactive Thread Starter

    Joined:
    2005/04/05
    Messages:
    5
    Likes Received:
    0
    I hope that's no overkill! :rolleyes:
    Perhabs I don't have to repost the "start end module name... "-section in upcoming dump-posts!

    And again: Thanks in advance! :)
     
    GotN,
    #4
  6. 2005/04/07
    zer0byte

    zer0byte Inactive

    Joined:
    2005/03/21
    Messages:
    5
    Likes Received:
    0
    I didnt read all the debug file of course, and i wont, but it seems from the first lines that you have installed new driver and that driver is making this error, try to roll back the driver in safe mode.

    also you can check if increasing the page file to more than its current value will be effective.

    Regards.
     
  7. 2005/04/07
    JoeHobart

    JoeHobart Inactive Alumni

    Joined:
    2004/05/19
    Messages:
    919
    Likes Received:
    1
    This kind of crash has to be hand debugged, it didnt actually crash the way you think it did. You had a driver that done a bad thing. Hes up on the stack, you could DDS esp-50 and see whats up there, but its a fishing expidition.
     
  8. 2005/04/07
    vray

    vray Inactive

    Joined:
    2005/04/07
    Messages:
    3
    Likes Received:
    0
    I'm curious. Is there any way to easily narrow such crashes down a bit more? Can Windows XP be booted in a mode that checks if drivers overflows a buffer, or writes into kmem it does not 'own'? In Solaris, I can turn on kmem_flags and do auditing or redzone checking - what is available in Windows that can help out? I have random occurrences of crashes on my new Dell 8400 PC, same sort of symptoms as in this thread. Unfortunatly, I am a UNIX expert and know little about debugging Windows kernel crashes.

    Oh yeah, Dell Support wants to replace my hard drive - but I am against such shotgunning troubleshooting methods. :)
     
    Last edited: 2005/04/07
    vray,
    #7
  9. 2005/04/07
    vray

    vray Inactive

    Joined:
    2005/04/07
    Messages:
    3
    Likes Received:
    0
    Joe, the link to your Dump Data Collection Tool is invalid...
     
    vray,
    #8
  10. 2005/04/07
    JoeHobart

    JoeHobart Inactive Alumni

    Joined:
    2004/05/19
    Messages:
    919
    Likes Received:
    1
    Ahh thx for reminding me. I asked arie to take the tool down, i have to take a break from the board, and wont have time to crack dumps, didnt want folks posting dumps when noones around to read them. I sent you a PM where to pick up the tool. Start a new thread and ill check it out.

    This specific dump can't be narrowed down any further without exploring the stack above ESP. A driver's ISR didnt lower the IRQL when it returned, and this is a naughty thing to do. The reminants of the isr should still be there somewhere..
     
  11. 2005/04/07
    vray

    vray Inactive

    Joined:
    2005/04/07
    Messages:
    3
    Likes Received:
    0
    Ah, ok, thanks Joe. I can understand what you mean - I look at Solaris crashdumps all day log - but at least I get paid to do it! Thanks..
     
  12. 2005/04/11
    Marcelo_Brasil

    Marcelo_Brasil Inactive

    Joined:
    2005/04/11
    Messages:
    2
    Likes Received:
    0
    Probally Randex Virus.

    Hi GotN...
    Shortly i have an similar problem and a virus called Randex is the response by that blue screen.
    To be sure if this is a Randex viruses, follow theses steps...
    1) Open Regedit an if it closes automatically after some seconds, you are infected with Randex.
    2) Using notepad open Hosts file.(C:/windows/system32/drivers/etc). If you hosts file have lines similar of this bellow:
    127.0.0.1 www.symantec.com
    127.0.0.1 www.mcaffee.com
    127.0.0.1 www.trendmicro.com
    and so on...
    You are infected!!!
    Remove the virus using an good antiviral tool like norton antivirus or kaspersky up-to-date of course...
    Regards...
    Marcelo.
     
  13. 2005/04/14
    GotN

    GotN Inactive Thread Starter

    Joined:
    2005/04/05
    Messages:
    5
    Likes Received:
    0
    Thank you for all your efforts!

    @ Marcelo_Brasil: Thanks, but that wasn't the problem, 'cause there's been no Randexwithin me system! I'm glad that it worked out for you!

    @ all: Some later dumps pointed me via the "nv4_disp.dll" to my detonator diplay driver, wich wasn't up to date and perhabs somewhat corrupt. So I uninstalled that old one with the additional help of "Driver Cleaner Pro" and installed the newest NVidia driver. No crashes since then!!! (*knocks on wood*) :D

    Thank you!

    Cheers!
    GotN

    UP THE IRONS!
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.