[IRQL_NOT_LESS_OR_EQUAL stop error] dump data xp sp2

IRQL_NOT_LESS_OR_EQUAL stop error
Please help, my system is experiencing several blue screens per day, I am a newbie at reading / interpreting dump file, and need some assistance. Thanks for any help.

think this is the prob but can't figure it out

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 8c7a8bf8, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 804da914, address which referenced memory

--------------------------------------------------------------------------Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
**************************************************************************
THIS DUMP FILE IS PARTIALLY CORRUPT.
KdDebuggerDataBlock is not present or unreadable.
**************************************************************************
Unable to read PsLoadedModuleList
KdDebuggerDataBlock not available!
KdDebuggerData.KernBase < SystemRangeStart
Windows XP Kernel Version 2600 UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x00000000 PsLoadedModuleList = 0x8055ab20
Debug session time: Sun Apr 3 12:11:47.156 2005 (GMT+2)
System Uptime: 0 days 0:02:14.703
Unable to read PsLoadedModuleList
KdDebuggerDataBlock not available!
KdDebuggerData.KernBase < SystemRangeStart
Loading Kernel Symbols
Unable to read PsLoadedModuleList
GetContextState failed, 0x80004005
GetContextState failed, 0x80004005
CS descriptor lookup failed
GetContextState failed, 0x80004005
GetContextState failed, 0x80004005
GetContextState failed, 0x80004005
GetContextState failed, 0x80004005
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {8c7a8bf8, 2, 0, 804da914}

***** Debugger could not find nt in module list, module list might be corrupt.
***** Followup with Debugger team

GetContextState failed, 0x80004005
<SNIP>

Followup: MachineOwner
---------

?: kd> !analyze -v;r;kv;lmtn;.logclose;q
GetContextState failed, 0x80004005
GetContextState failed, 0x80004005
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 8c7a8bf8, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 804da914, address which referenced memory

Debugging Details:
------------------

***** Debugger could not find nt in module list, module list might be corrupt.
***** Followup with Debugger team

<SNIP>

second user.dmp
--------------------------------------------------------------------------
Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Comment: 'Dr. Watson generated MiniDump'
Windows XP Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: SingleUserTS
Debug session time: Sat Apr 2 12:22:12.000 2005 (GMT+2)
System Uptime: not available
Process Uptime: 0 days 0:00:09.000
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
................................................
(fa0.e04): Access violation - code c0000005 (!!! second chance !!!)
eax=00000001 ebx=00000000 ecx=00007eb3 edx=7c90eb94 esi=00000000 edi=6b99195c
eip=6b989999 esp=0185ff54 ebp=0185ff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
6b989999 ?? ???
0:003> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll -
***** OS symbols are WRONG. Please fix symbols to do analysis.

 

for the record, that kernel dump is corrupt, no need to post them at all when they are that bad.

The user.dmp is a program crashing, not a blue screen. We are focused on trying to get a MEMORY.DMP to figure out why it blue screened.

Youll need to let it crash again and create a new dump. Make sure your pagefile is at least 1.3 times the size of your physical memory, and that you have twice that availible in free space on your c: drive. When you run the tool, make sure that you are running it on the machine in question, and that you are connected to the internet.

 

new dump

thankx for the quick reply i changed setting for pagefile and error reporting so here is new dump. think it has something to do with nvidia display drivers.
i see an error in symbols search path, i'm connect as im writting this to the internet.

free space picture

system picture

complete system report by AIDA32

IF you need more specific details please let me know, i hope you can solve this error it making me


Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntoskrnl.exe -
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_rtm.040803-2158
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055ab20
Debug session time: Sun Apr 3 17:48:03.718 2005 (GMT+2)
System Uptime: 0 days 0:10:39.290
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntoskrnl.exe -
Loading Kernel Symbols
..................................................................................................................
Loading unloaded module list
..............
Loading User Symbols
UserMode Module List Address is NULL (Addr= 00251e9c)
This is usually caused by being in the wrong process
context or by paging
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {442201b8, 2, 0, f8113971}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

Probably caused by : nv4_mini.sys ( nv4_mini!odbDefaultDestructObject+41 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 442201b8, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: f8113971, address which referenced memory

Debugging Details:
------------------

***** Kernel symbols are WRONG. Please fix symbols to do analysis.


FAULTING_MODULE: 804d7000 nt

DEBUG_FLR_IMAGE_TIMESTAMP: 4074b958

READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPoolCodeStart
unable to get nt!MmPoolCodeEnd
unable to get nt!MiSessionPoolStart
unable to get nt!MiSessionPoolEnd
442201b8

CURRENT_IRQL: 2

FAULTING_IP:
nv4_mini!odbDefaultDestructObject+41
f8113971 e84a230000 call nv4_mini!pdbGetProperty (f8115cc0)

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xD1

LAST_CONTROL_TRANSFER: from f8113971 to 804e2158

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
f8950e38 f8113971 badb0d00 00000024 823c93c8 nt!Kei386EoiHelper+0x285d
f8950e50 804dc3c3 8202d808 00000000 8202caa8 nv4_mini!odbDefaultDestructObject+0x41
f8950eb4 f8123c4c 82220150 00000024 82221008 nt!KiDispatchInterrupt+0x5c0
f8950ec8 f814d897 82221008 82220150 006013d4 nv4_mini!osGpuReadReg008+0xc
f8950ee0 f8137d51 82220150 006013d4 82216000 nv4_mini!notifyBufferHWComplete+0xdb7
f8950efc f8157596 82216000 f8950f2c f8950fa0 nv4_mini!dacSynchronizeCRTCAccessWithVBIOS+0x131
f8950fa0 f8125231 82220150 82215dc0 821edd98 nv4_mini!objMcService+0xc6
f8950fc0 f80de18a 82295350 82216000 ffdff980 nv4_mini!RmDpcForIsr+0xd1
f8950fd0 804dc179 82295240 82295350 f8125160 VIDEOPRT!pVideoPortDpcDispatcher+0xe
ffdff980 ffdff980 f8951000 0003d76e 00000000 nt!KiDispatchInterrupt+0x376


FOLLOWUP_IP:
nv4_mini!odbDefaultDestructObject+41
f8113971 e84a230000 call nv4_mini!pdbGetProperty (f8115cc0)

SYMBOL_STACK_INDEX: 1

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nv4_mini!odbDefaultDestructObject+41

MODULE_NAME: nv4_mini

IMAGE_NAME: nv4_mini.sys

STACK_COMMAND: kb

BUCKET_ID: WRONG_SYMBOLS

Followup: MachineOwner
---------

eax=ffdff13c ebx=00000002 ecx=00000000 edx=40000000 esi=f8113971 edi=442201b8
eip=804e2158 esp=f8950e20 ebp=f8950e38 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00200286
nt!Kei386EoiHelper+0x285d:
804e2158 f7457000000200 test dword ptr [ebp+0x70],0x20000 ss:0010:f8950ea8=00210286
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
f8950e38 f8113971 badb0d00 00000024 823c93c8 nt!Kei386EoiHelper+0x285d
f8950e50 804dc3c3 8202d808 00000000 8202caa8 nv4_mini!odbDefaultDestructObject+0x41 (FPO: [2,0,0])
f8950eb4 f8123c4c 82220150 00000024 82221008 nt!KiDispatchInterrupt+0x5c0
f8950ec8 f814d897 82221008 82220150 006013d4 nv4_mini!osGpuReadReg008+0xc (FPO: [3,0,0])
f8950ee0 f8137d51 82220150 006013d4 82216000 nv4_mini!notifyBufferHWComplete+0xdb7 (FPO: [2,0,0])
f8950efc f8157596 82216000 f8950f2c f8950fa0 nv4_mini!dacSynchronizeCRTCAccessWithVBIOS+0x131 (FPO: [EBP 0x82216000] [6,0,0])
f8950fa0 f8125231 82220150 82215dc0 821edd98 nv4_mini!objMcService+0xc6 (FPO: [EBP 0x82221008] [2,30,0])
f8950fc0 f80de18a 82295350 82216000 ffdff980 nv4_mini!RmDpcForIsr+0xd1 (FPO: [EBP 0xf8950fd0] [2,1,0])
f8950fd0 804dc179 82295240 82295350 f8125160 VIDEOPRT!pVideoPortDpcDispatcher+0xe (FPO: [Non-Fpo])
ffdff980 ffdff980 f8951000 0003d76e 00000000 nt!KiDispatchInterrupt+0x376
start end module name
804d7000 806eb780 nt ntoskrnl.exe Wed Aug 04 08:19:48 2004 (41108004)
806ec000 8070c380 hal halaacpi.dll Wed Aug 04 07:59:05 2004 (41107B29)
bf000000 bf011580 dxg dxg.sys Wed Aug 04 08:00:51 2004 (41107B93)
bf012000 bf425a80 nv4_disp nv4_disp.dll Wed Aug 04 09:57:11 2004 (411096D7)
bf800000 bf9c0380 win32k win32k.sys Wed Aug 04 08:17:30 2004 (41107F7A)
f38f1000 f391af00 kmixer kmixer.sys Wed Aug 04 08:07:46 2004 (41107D32)
f4551000 f4568480 dump_atapi dump_atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
f4723000 f4763100 HTTP HTTP.sys Sat Oct 09 01:48:20 2004 (41672744)
f4cb4000 f4d06180 srv srv.sys Wed Aug 04 08:14:44 2004 (41107ED4)
f4e1f000 f4e4b400 mrxdav mrxdav.sys Wed Aug 04 08:00:49 2004 (41107B91)
f5121000 f5135400 wdmaud wdmaud.sys Wed Aug 04 08:15:03 2004 (41107EE7)
f516a000 f516c680 ElbyCDIO ElbyCDIO.sys Wed Jul 21 23:45:25 2004 (40FEE3F5)
f5ba2000 f5ba5280 ndisuio ndisuio.sys Wed Aug 04 08:03:10 2004 (41107C1E)
f5c1e000 f5c2cd80 sysaudio sysaudio.sys Wed Aug 04 08:15:54 2004 (41107F1A)
f6b9e000 f6c0c400 mrxsmb mrxsmb.sys Wed Jan 19 05:26:50 2005 (41EDE18A)
f6c35000 f6c5fa00 rdbss rdbss.sys Thu Oct 28 03:13:57 2004 (418047D5)
f6c60000 f6c81d00 afd afd.sys Wed Aug 04 08:14:13 2004 (41107EB5)
f6c82000 f6ca2f00 ipnat ipnat.sys Thu Sep 30 00:28:36 2004 (415B3714)
f6ca3000 f6ccac00 netbt netbt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
f6ccb000 f6d22a80 tcpip tcpip.sys Wed Aug 04 08:14:39 2004 (41107ECF)
f6d23000 f6d35400 ipsec ipsec.sys Wed Aug 04 08:14:27 2004 (41107EC3)
f7e7e000 f7eb1200 update update.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7eb6000 f7eb8900 Dxapi Dxapi.sys Fri Aug 17 22:53:19 2001 (3B7D843F)
f7eda000 f7f0a100 rdpdr rdpdr.sys Wed Aug 04 08:01:10 2004 (41107BA6)
f7f0b000 f7f1be00 psched psched.sys Wed Aug 04 08:04:16 2004 (41107C60)
f7f1c000 f7f32680 ndiswan ndiswan.sys Wed Aug 04 08:14:30 2004 (41107EC6)
f7fd3000 f7fe6900 parport parport.sys Wed Aug 04 07:59:04 2004 (41107B28)
f7fe7000 f8009680 ks ks.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f800a000 f802d980 portcls portcls.sys Wed Aug 04 08:15:47 2004 (41107F13)
f802e000 f80b9980 kx kx.sys Mon Feb 16 22:46:33 2004 (40313A39)
f80ba000 f80dce80 USBPORT USBPORT.SYS Wed Aug 04 08:08:34 2004 (41107D62)
f80dd000 f80f0780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 08:07:04 2004 (41107D08)
f80f1000 f82c03c0 nv4_mini nv4_mini.sys Thu Apr 08 04:30:48 2004 (4074B958)
f82fd000 f8300c80 mssmbios mssmbios.sys Wed Aug 04 08:07:47 2004 (41107D33)
f8331000 f834b580 Mup Mup.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f834c000 f8378a80 NDIS NDIS.sys Wed Aug 04 08:14:27 2004 (41107EC3)
f8379000 f8405480 Ntfs Ntfs.sys Wed Aug 04 08:15:06 2004 (41107EEA)
f8406000 f841c780 KSecDD KSecDD.sys Wed Aug 04 07:59:45 2004 (41107B51)
f841d000 f842ef00 sr sr.sys Wed Aug 04 08:06:22 2004 (41107CDE)
f842f000 f844d780 fltMgr fltMgr.sys Wed Aug 04 08:01:17 2004 (41107BAD)
f844e000 f845f380 fasttrak fasttrak.sys Fri Nov 23 00:08:03 2001 (3BFD8553)
f8460000 f8477480 atapi atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
f8478000 f848f800 SCSIPORT SCSIPORT.SYS Wed Aug 04 07:59:39 2004 (41107B4B)
f8490000 f84b5700 dmio dmio.sys Wed Aug 04 08:07:13 2004 (41107D11)
f84b6000 f84d4880 ftdisk ftdisk.sys Fri Aug 17 22:52:41 2001 (3B7D8419)
f84d5000 f84e5a80 pci pci.sys Wed Aug 04 08:07:45 2004 (41107D31)
f84e6000 f8513d80 ACPI ACPI.sys Wed Aug 04 08:07:35 2004 (41107D27)
f8535000 f853dc00 isapnp isapnp.sys Fri Aug 17 22:58:01 2001 (3B7D8559)
f8545000 f8553e80 ohci1394 ohci1394.sys Wed Aug 04 08:10:05 2004 (41107DBD)
f8555000 f8562000 1394BUS 1394BUS.SYS Wed Aug 04 08:10:03 2004 (41107DBB)
f8565000 f856f500 MountMgr MountMgr.sys Wed Aug 04 07:58:29 2004 (41107B05)
f8575000 f8581c80 VolSnap VolSnap.sys Wed Aug 04 08:00:14 2004 (41107B6E)
f8585000 f858de00 disk disk.sys Wed Aug 04 07:59:53 2004 (41107B59)
f8595000 f85a1200 CLASSPNP CLASSPNP.SYS Wed Aug 04 08:14:26 2004 (41107EC2)
f85a5000 f85af500 viaagp viaagp.sys Wed Aug 04 08:07:42 2004 (41107D2E)
f85e5000 f85ee200 amdk7 amdk7.sys Wed Aug 04 07:59:19 2004 (41107B37)
f85f5000 f8604180 nic1394 nic1394.sys Wed Aug 04 07:58:28 2004 (41107B04)
f8605000 f8613b80 drmk drmk.sys Wed Aug 04 08:07:54 2004 (41107D3A)
f8615000 f86246a0 dc21x4 dc21x4.sys Mon Oct 30 16:56:19 2000 (39FD9A23)
f8625000 f8634d80 serial serial.sys Wed Aug 04 08:15:51 2004 (41107F17)
f8635000 f8641e00 i8042prt i8042prt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
f8645000 f86514a0 L8042mou L8042mou.Sys Thu Oct 21 22:31:05 2004 (41781C89)
f8655000 f8664be0 LMouKE LMouKE.Sys Thu Oct 21 22:30:56 2004 (41781C80)
f8665000 f866f380 imapi imapi.sys Wed Aug 04 08:00:12 2004 (41107B6C)
f8675000 f8681180 cdrom cdrom.sys Wed Aug 04 07:59:52 2004 (41107B58)
f8685000 f8693080 redbook redbook.sys Wed Aug 04 07:59:34 2004 (41107B46)
f8695000 f86a1880 rasl2tp rasl2tp.sys Wed Aug 04 08:14:21 2004 (41107EBD)
f86a5000 f86af200 raspppoe raspppoe.sys Wed Aug 04 08:05:06 2004 (41107C92)
f86b5000 f86c0d00 raspptp raspptp.sys Wed Aug 04 08:14:26 2004 (41107EC2)
f86c5000 f86cd900 msgpc msgpc.sys Wed Aug 04 08:04:11 2004 (41107C5B)
f86d5000 f86def00 termdd termdd.sys Wed Aug 04 07:58:52 2004 (41107B1C)
f86e5000 f86f3100 usbhub usbhub.sys Wed Aug 04 08:08:40 2004 (41107D68)
f86f5000 f86fe480 NDProxy NDProxy.SYS Fri Aug 17 22:55:30 2001 (3B7D84C2)
f8715000 f871d700 netbios netbios.sys Wed Aug 04 08:03:19 2004 (41107C27)
f8725000 f872d880 Fips Fips.SYS Sat Aug 18 03:31:49 2001 (3B7DC585)
f8745000 f8754900 Cdfs Cdfs.SYS Wed Aug 04 08:14:09 2004 (41107EB1)
f8755000 f875d700 wanarp wanarp.sys Wed Aug 04 08:04:57 2004 (41107C89)
f8765000 f8773d80 arp1394 arp1394.sys Wed Aug 04 07:58:28 2004 (41107B04)
f87b5000 f87bb200 PCIIDEX PCIIDEX.SYS Wed Aug 04 07:59:40 2004 (41107B4C)
f87bd000 f87c1900 PartMgr PartMgr.sys Sat Aug 18 03:32:23 2001 (3B7DC5A7)
f87c5000 f87ca880 VClone VClone.sys Thu Sep 02 15:45:13 2004 (413723E9)
f87fd000 f8802000 usbuhci usbuhci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f8805000 f880b800 usbehci usbehci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f8825000 f882c000 fdc fdc.sys unavailable (FFFFFFFE)
f8835000 f883b000 kbdclass kbdclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f8845000 f884aa00 mouclass mouclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f8875000 f8879880 TDI TDI.SYS Wed Aug 04 08:07:47 2004 (41107D33)
f8885000 f8889580 ptilink ptilink.sys Fri Aug 17 22:49:53 2001 (3B7D8371)
f8895000 f8899080 raspti raspti.sys Fri Aug 17 22:55:32 2001 (3B7D84C4)
f88a5000 f88aa000 flpydisk flpydisk.sys Wed Aug 04 07:59:24 2004 (41107B3C)
f88bd000 f88c2200 vga vga.sys Wed Aug 04 08:07:06 2004 (41107D0A)
f88cd000 f88d1a80 Msfs Msfs.SYS Wed Aug 04 08:00:37 2004 (41107B85)
f88dd000 f88e4880 Npfs Npfs.SYS Wed Aug 04 08:00:38 2004 (41107B86)
f8915000 f8919500 watchdog watchdog.sys Wed Aug 04 08:07:32 2004 (41107D24)
f8945000 f8948000 BOOTVID BOOTVID.dll Fri Aug 17 22:49:09 2001 (3B7D8345)
f89e9000 f89eb280 rasacd rasacd.sys Fri Aug 17 22:55:39 2001 (3B7D84CB)
f8a05000 f8a08c80 serenum serenum.sys Wed Aug 04 07:59:06 2004 (41107B2A)
f8a0d000 f8a0fe60 L8042Kbd L8042Kbd.sys Thu Oct 21 22:32:12 2004 (41781CCC)
f8a1d000 f8a1f580 ndistapi ndistapi.sys Fri Aug 17 22:55:29 2001 (3B7D84C1)
f8a35000 f8a36b80 kdcom kdcom.dll Fri Aug 17 22:49:10 2001 (3B7D8346)
f8a37000 f8a38100 WMILIB WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f8a39000 f8a3a500 viaide viaide.sys Wed Aug 04 07:59:42 2004 (41107B4E)
f8a3b000 f8a3c700 dmload dmload.sys Fri Aug 17 22:58:15 2001 (3B7D8567)
f8a43000 f8a44100 swenum swenum.sys Wed Aug 04 07:58:41 2004 (41107B11)
f8a47000 f8a48280 USBD USBD.SYS Fri Aug 17 23:02:58 2001 (3B7D8682)
f8a51000 f8a52f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 22:49:37 2001 (3B7D8361)
f8a55000 f8a56080 Beep Beep.SYS Fri Aug 17 22:47:33 2001 (3B7D82E5)
f8a59000 f8a5a080 mnmdd mnmdd.SYS Fri Aug 17 22:57:28 2001 (3B7D8538)
f8a5d000 f8a5e080 RDPCDD RDPCDD.sys Fri Aug 17 22:46:56 2001 (3B7D82C0)
f8a63000 f8a64100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f8af7000 f8af8a80 ParVdm ParVdm.SYS Fri Aug 17 22:49:49 2001 (3B7D836D)
f8c11000 f8c11d00 dxgthk dxgthk.sys Fri Aug 17 22:53:12 2001 (3B7D8438)
f8c21000 f8c21f80 ElbyDelay ElbyDelay.sys Thu Feb 12 18:11:28 2004 (402BB3C0)
f8c24000 f8c24c00 audstub audstub.sys Fri Aug 17 22:59:40 2001 (3B7D85BC)
f8c63000 f8c63b80 Null Null.SYS Fri Aug 17 22:47:39 2001 (3B7D82EB)

Unloaded modules:
f38f1000 f391b000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f38f1000 f391b000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f38f1000 f391b000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4527000 f4551000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4569000 f4593000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6ae6000 f6afe000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
f5034000 f505e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8b80000 f8b81000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7f33000 f7f40000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f505e000 f5081000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5bee000 f5bfc000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8ab7000 f8ab9000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f88b5000 f88ba000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f82c5000 f82c8000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

I agree with you, this looks like a problem with your video driver.

However, without good symbols, I cant be super confident. Its a good place to start though. Good sticky in the hardware forum on how to clean and reinstall your drivers.

 

please tell me how to obtain those symbols.

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
isn't working

thankx in advance

 

new dump

found the problem with the symbols and replaced the nvidia drivers but still got blue screen errors therefore new dump, please help.

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_rtm.040803-2158
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055ab20
Debug session time: Mon Apr 4 21:50:52.609 2005 (GMT+2)
System Uptime: 0 days 0:26:33.183
Loading Kernel Symbols
...................................................................................................................
Loading unloaded module list
............
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffd400c). Type ".hh dbgerr001" for details
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {ed74f096, 1e, 1, 806ee8ec}

Probably caused by : atapi.sys ( atapi!IdePortInterrupt+34 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: ed74f096, memory referenced
Arg2: 0000001e, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 806ee8ec, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: ed74f096 Nonpaged pool

CURRENT_IRQL: 1e

FAULTING_IP:
hal!HalRequestSoftwareInterrupt+3c
806ee8ec c60596f0dfff01 mov byte ptr [ffdff096],0x1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 804e3eda to 806ee8ec

TRAP_FRAME: f436cc9c -- (.trap fffffffff436cc9c)
.trap fffffffff436cc9c
ErrCode = 00000002
eax=823db0a8 ebx=00000000 ecx=ffdff902 edx=ffdff980 esi=ffdff120 edi=823db0a4
eip=806ee8ec esp=f436cd10 ebp=f436cd24 iopl=0 nv up ei pl zr na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
hal!HalRequestSoftwareInterrupt+0x3c:
806ee8ec c60596f0dfff01 mov byte ptr [ffdff096],0x1 ds:0023:ffdff096=00
.trap
Resetting default scope

STACK_TEXT:
f436cd0c 804e3eda 82390d98 823db0e8 ffdff9c0 hal!HalRequestSoftwareInterrupt+0x3c
f436cd24 f8465614 00000000 00000000 00000000 nt!KeInsertQueueDpc+0xd0
f436cd40 804dad9f 82390d98 823db030 00010005 atapi!IdePortInterrupt+0x34
f436cd40 00435111 82390d98 823db030 00010005 nt!KiInterruptDispatch+0x3d
WARNING: Frame IP not in any known module. Following frames may be wrong.
0010db80 00000000 00000000 00000000 00000000 0x435111


FOLLOWUP_IP:
atapi!IdePortInterrupt+34
f8465614 5e pop esi

SYMBOL_STACK_INDEX: 2

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: atapi!IdePortInterrupt+34

MODULE_NAME: atapi

IMAGE_NAME: atapi.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 41107b4d

STACK_COMMAND: .trap fffffffff436cc9c ; kb

FAILURE_BUCKET_ID: 0xA_W_atapi!IdePortInterrupt+34

BUCKET_ID: 0xA_W_atapi!IdePortInterrupt+34

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000001e ecx=00000000 edx=40000000 esi=806ee8ec edi=ed74f096
eip=804e2158 esp=f436cc84 ebp=f436cc9c iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x233:
804e2158 f7457000000200 test dword ptr [ebp+0x70],0x20000 ss:0010:f436cd0c=00010246
ChildEBP RetAddr Args to Child
f436cc9c 806ee8ec badb0d00 ffdff980 f436cce4 nt!KiTrap0E+0x233 (FPO: [0,0] TrapFrame @ f436cc9c)
f436cd0c 804e3eda 82390d98 823db0e8 ffdff9c0 hal!HalRequestSoftwareInterrupt+0x3c (FPO: [0,0,0])
f436cd24 f8465614 00000000 00000000 00000000 nt!KeInsertQueueDpc+0xd0 (FPO: [Non-Fpo])
f436cd40 804dad9f 82390d98 823db030 00010005 atapi!IdePortInterrupt+0x34 (FPO: [Non-Fpo])
f436cd40 00435111 82390d98 823db030 00010005 nt!KiInterruptDispatch+0x3d (FPO: [0,2] TrapFrame @ f436cd64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0010db80 00000000 00000000 00000000 00000000 0x435111
start end module name
804d7000 806eb780 nt ntoskrnl.exe Wed Aug 04 08:19:48 2004 (41108004)
806ec000 8070c380 hal halaacpi.dll Wed Aug 04 07:59:05 2004 (41107B29)
bf000000 bf011580 dxg dxg.sys Wed Aug 04 08:00:51 2004 (41107B93)
bf012000 bf3dc300 nv4_disp nv4_disp.dll Thu Feb 24 17:08:56 2005 (421DFC18)
bf800000 bf9c0380 win32k win32k.sys Wed Aug 04 08:17:30 2004 (41107F7A)
f384f000 f3878f00 kmixer kmixer.sys Wed Aug 04 08:07:46 2004 (41107D32)
f42da000 f42ea280 Udfs Udfs.SYS Wed Aug 04 08:00:27 2004 (41107B7B)
f4405000 f4445100 HTTP HTTP.sys Sat Oct 09 01:48:20 2004 (41672744)
f4b58000 f4baa180 srv srv.sys Wed Aug 04 08:14:44 2004 (41107ED4)
f4d13000 f4d3f400 mrxdav mrxdav.sys Wed Aug 04 08:00:49 2004 (41107B91)
f4fc5000 f4fd9400 wdmaud wdmaud.sys Wed Aug 04 08:15:03 2004 (41107EE7)
f4ffa000 f4ffc680 ElbyCDIO ElbyCDIO.sys Wed Jul 21 23:45:25 2004 (40FEE3F5)
f5902000 f5910d80 sysaudio sysaudio.sys Wed Aug 04 08:15:54 2004 (41107F1A)
f5a4a000 f5a4d280 ndisuio ndisuio.sys Wed Aug 04 08:03:10 2004 (41107C1E)
f696a000 f6981480 dump_atapi dump_atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
f6a22000 f6a90400 mrxsmb mrxsmb.sys Wed Jan 19 05:26:50 2005 (41EDE18A)
f6ab9000 f6ae3a00 rdbss rdbss.sys Thu Oct 28 03:13:57 2004 (418047D5)
f6ae4000 f6b05d00 afd afd.sys Wed Aug 04 08:14:13 2004 (41107EB5)
f6b06000 f6b26f00 ipnat ipnat.sys Thu Sep 30 00:28:36 2004 (415B3714)
f6b27000 f6b4ec00 netbt netbt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
f6b4f000 f6ba6a80 tcpip tcpip.sys Wed Aug 04 08:14:39 2004 (41107ECF)
f6ba7000 f6bb9400 ipsec ipsec.sys Wed Aug 04 08:14:27 2004 (41107EC3)
f7d02000 f7d35200 update update.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7d3e000 f7d40900 Dxapi Dxapi.sys Fri Aug 17 22:53:19 2001 (3B7D843F)
f7d5e000 f7d8e100 rdpdr rdpdr.sys Wed Aug 04 08:01:10 2004 (41107BA6)
f7d8f000 f7d9fe00 psched psched.sys Wed Aug 04 08:04:16 2004 (41107C60)
f7da0000 f7db6680 ndiswan ndiswan.sys Wed Aug 04 08:14:30 2004 (41107EC6)
f7e57000 f7e6a900 parport parport.sys Wed Aug 04 07:59:04 2004 (41107B28)
f7e6b000 f7e8d680 ks ks.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f7e8e000 f7eb1980 portcls portcls.sys Wed Aug 04 08:15:47 2004 (41107F13)
f7eb2000 f7f3d980 kx kx.sys Mon Feb 16 22:46:33 2004 (40313A39)
f7f3e000 f7f60e80 USBPORT USBPORT.SYS Wed Aug 04 08:08:34 2004 (41107D62)
f7f61000 f7f74780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 08:07:04 2004 (41107D08)
f7f75000 f82c04c0 nv4_mini nv4_mini.sys Thu Feb 24 17:13:44 2005 (421DFD38)
f82f9000 f82fcc80 mssmbios mssmbios.sys Wed Aug 04 08:07:47 2004 (41107D33)
f8331000 f834b580 Mup Mup.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f834c000 f8378a80 NDIS NDIS.sys Wed Aug 04 08:14:27 2004 (41107EC3)
f8379000 f8405480 Ntfs Ntfs.sys Wed Aug 04 08:15:06 2004 (41107EEA)
f8406000 f841c780 KSecDD KSecDD.sys Wed Aug 04 07:59:45 2004 (41107B51)
f841d000 f842ef00 sr sr.sys Wed Aug 04 08:06:22 2004 (41107CDE)
f842f000 f844d780 fltMgr fltMgr.sys Wed Aug 04 08:01:17 2004 (41107BAD)
f844e000 f845f380 fasttrak fasttrak.sys Fri Nov 23 00:08:03 2001 (3BFD8553)
f8460000 f8477480 atapi atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
f8478000 f848f800 SCSIPORT SCSIPORT.SYS Wed Aug 04 07:59:39 2004 (41107B4B)
f8490000 f84b5700 dmio dmio.sys Wed Aug 04 08:07:13 2004 (41107D11)
f84b6000 f84d4880 ftdisk ftdisk.sys Fri Aug 17 22:52:41 2001 (3B7D8419)
f84d5000 f84e5a80 pci pci.sys Wed Aug 04 08:07:45 2004 (41107D31)
f84e6000 f8513d80 ACPI ACPI.sys Wed Aug 04 08:07:35 2004 (41107D27)
f8535000 f853dc00 isapnp isapnp.sys Fri Aug 17 22:58:01 2001 (3B7D8559)
f8545000 f8553e80 ohci1394 ohci1394.sys Wed Aug 04 08:10:05 2004 (41107DBD)
f8555000 f8562000 1394BUS 1394BUS.SYS Wed Aug 04 08:10:03 2004 (41107DBB)
f8565000 f856f500 MountMgr MountMgr.sys Wed Aug 04 07:58:29 2004 (41107B05)
f8575000 f8581c80 VolSnap VolSnap.sys Wed Aug 04 08:00:14 2004 (41107B6E)
f8585000 f858de00 disk disk.sys Wed Aug 04 07:59:53 2004 (41107B59)
f8595000 f85a1200 CLASSPNP CLASSPNP.SYS Wed Aug 04 08:14:26 2004 (41107EC2)
f85a5000 f85af500 viaagp viaagp.sys Wed Aug 04 08:07:42 2004 (41107D2E)
f85e5000 f85ee200 amdk7 amdk7.sys Wed Aug 04 07:59:19 2004 (41107B37)
f85f5000 f8604180 nic1394 nic1394.sys Wed Aug 04 07:58:28 2004 (41107B04)
f8605000 f8613b80 drmk drmk.sys Wed Aug 04 08:07:54 2004 (41107D3A)
f8615000 f86246a0 dc21x4 dc21x4.sys Mon Oct 30 16:56:19 2000 (39FD9A23)
f8625000 f8634d80 serial serial.sys Wed Aug 04 08:15:51 2004 (41107F17)
f8635000 f8641e00 i8042prt i8042prt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
f8645000 f86514a0 L8042mou L8042mou.Sys Thu Oct 21 22:31:05 2004 (41781C89)
f8655000 f8664be0 LMouKE LMouKE.Sys Thu Oct 21 22:30:56 2004 (41781C80)
f8665000 f866f380 imapi imapi.sys Wed Aug 04 08:00:12 2004 (41107B6C)
f8675000 f8681180 cdrom cdrom.sys Wed Aug 04 07:59:52 2004 (41107B58)
f8685000 f8693080 redbook redbook.sys Wed Aug 04 07:59:34 2004 (41107B46)
f8695000 f86a1880 rasl2tp rasl2tp.sys Wed Aug 04 08:14:21 2004 (41107EBD)
f86a5000 f86af200 raspppoe raspppoe.sys Wed Aug 04 08:05:06 2004 (41107C92)
f86b5000 f86c0d00 raspptp raspptp.sys Wed Aug 04 08:14:26 2004 (41107EC2)
f86c5000 f86cd900 msgpc msgpc.sys Wed Aug 04 08:04:11 2004 (41107C5B)
f86d5000 f86def00 termdd termdd.sys Wed Aug 04 07:58:52 2004 (41107B1C)
f86e5000 f86f3100 usbhub usbhub.sys Wed Aug 04 08:08:40 2004 (41107D68)
f86f5000 f86fe480 NDProxy NDProxy.SYS Fri Aug 17 22:55:30 2001 (3B7D84C2)
f8715000 f871d700 netbios netbios.sys Wed Aug 04 08:03:19 2004 (41107C27)
f8725000 f872d880 Fips Fips.SYS Sat Aug 18 03:31:49 2001 (3B7DC585)
f8745000 f8754900 Cdfs Cdfs.SYS Wed Aug 04 08:14:09 2004 (41107EB1)
f8755000 f875d700 wanarp wanarp.sys Wed Aug 04 08:04:57 2004 (41107C89)
f8765000 f8773d80 arp1394 arp1394.sys Wed Aug 04 07:58:28 2004 (41107B04)
f87b5000 f87bb200 PCIIDEX PCIIDEX.SYS Wed Aug 04 07:59:40 2004 (41107B4C)
f87bd000 f87c1900 PartMgr PartMgr.sys Sat Aug 18 03:32:23 2001 (3B7DC5A7)
f87c5000 f87ca880 VClone VClone.sys Thu Sep 02 15:45:13 2004 (413723E9)
f87fd000 f8802000 usbuhci usbuhci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f8805000 f880b800 usbehci usbehci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f8825000 f882c000 fdc fdc.sys unavailable (FFFFFFFE)
f8835000 f883b000 kbdclass kbdclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f8845000 f884aa00 mouclass mouclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f8875000 f8879880 TDI TDI.SYS Wed Aug 04 08:07:47 2004 (41107D33)
f8885000 f8889580 ptilink ptilink.sys Fri Aug 17 22:49:53 2001 (3B7D8371)
f8895000 f8899080 raspti raspti.sys Fri Aug 17 22:55:32 2001 (3B7D84C4)
f88a5000 f88aa000 flpydisk flpydisk.sys Wed Aug 04 07:59:24 2004 (41107B3C)
f88bd000 f88c2200 vga vga.sys Wed Aug 04 08:07:06 2004 (41107D0A)
f88cd000 f88d1a80 Msfs Msfs.SYS Wed Aug 04 08:00:37 2004 (41107B85)
f88dd000 f88e4880 Npfs Npfs.SYS Wed Aug 04 08:00:38 2004 (41107B86)
f890d000 f8911500 watchdog watchdog.sys Wed Aug 04 08:07:32 2004 (41107D24)
f8945000 f8948000 BOOTVID BOOTVID.dll Fri Aug 17 22:49:09 2001 (3B7D8345)
f89ed000 f89ef280 rasacd rasacd.sys Fri Aug 17 22:55:39 2001 (3B7D84CB)
f8a09000 f8a0cc80 serenum serenum.sys Wed Aug 04 07:59:06 2004 (41107B2A)
f8a11000 f8a13e60 L8042Kbd L8042Kbd.sys Thu Oct 21 22:32:12 2004 (41781CCC)
f8a21000 f8a23580 ndistapi ndistapi.sys Fri Aug 17 22:55:29 2001 (3B7D84C1)
f8a35000 f8a36b80 kdcom kdcom.dll Fri Aug 17 22:49:10 2001 (3B7D8346)
f8a37000 f8a38100 WMILIB WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f8a39000 f8a3a500 viaide viaide.sys Wed Aug 04 07:59:42 2004 (41107B4E)
f8a3b000 f8a3c700 dmload dmload.sys Fri Aug 17 22:58:15 2001 (3B7D8567)
f8a45000 f8a46100 swenum swenum.sys Wed Aug 04 07:58:41 2004 (41107B11)
f8a49000 f8a4a280 USBD USBD.SYS Fri Aug 17 23:02:58 2001 (3B7D8682)
f8a4f000 f8a50f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 22:49:37 2001 (3B7D8361)
f8a53000 f8a54080 Beep Beep.SYS Fri Aug 17 22:47:33 2001 (3B7D82E5)
f8a57000 f8a58080 mnmdd mnmdd.SYS Fri Aug 17 22:57:28 2001 (3B7D8538)
f8a5b000 f8a5c080 RDPCDD RDPCDD.sys Fri Aug 17 22:46:56 2001 (3B7D82C0)
f8a61000 f8a62100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f8aef000 f8af0a80 ParVdm ParVdm.SYS Fri Aug 17 22:49:49 2001 (3B7D836D)
f8c29000 f8c29d00 dxgthk dxgthk.sys Fri Aug 17 22:53:12 2001 (3B7D8438)
f8c34000 f8c34f80 ElbyDelay ElbyDelay.sys Thu Feb 12 18:11:28 2004 (402BB3C0)
f8c37000 f8c37c00 audstub audstub.sys Fri Aug 17 22:59:40 2001 (3B7D85BC)
f8c79000 f8c79b80 Null Null.SYS Fri Aug 17 22:47:39 2001 (3B7D82EB)

Unloaded modules:
f4206000 f4230000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4206000 f4230000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f42eb000 f4315000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f42eb000 f4315000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4f78000 f4fa2000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8b88000 f8b89000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5afa000 f5b07000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4fa2000 f4fc5000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5b0a000 f5b18000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8ab3000 f8ab5000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f88b5000 f88ba000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f82c1000 f82c4000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

this is good data, and a properly aligned set of symbols. However, This crash does not make sense to me. I need one more crash dump before I can render advice. Sorry, some of these things arent easy

 

new dump

here's a new dump:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_rtm.040803-2158
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055ab20
Debug session time: Wed Apr 6 19:12:15.046 2005 (GMT+2)
System Uptime: 0 days 10:13:47.609
Loading Kernel Symbols
...................................................................................................................
Loading unloaded module list
.............
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffd800c). Type ".hh dbgerr001" for details
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {20, 2, 0, 20}

Probably caused by : atapi.sys ( atapi!IdePortCompletionDpc+75 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000020, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 00000020, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: 00000020

CURRENT_IRQL: 2

FAULTING_IP:
+20
00000020 ?? ???

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xD1

LAST_CONTROL_TRANSFER: from 823db0e8 to 00000020

TRAP_FRAME: f8950ee4 -- (.trap fffffffff8950ee4)
.trap fffffffff8950ee4
ErrCode = 00000000
eax=0000007b ebx=00000000 ecx=80562064 edx=81d109f8 esi=823382b0 edi=823db1c8
eip=00000020 esp=f8950f58 ebp=f8950f60 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
00000020 ?? ???
.trap
Resetting default scope

STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
f8950f54 823db0e8 ffdff000 f8950fd0 f8467a05 0x20
f8950f60 f8467a05 823382b0 82390d98 82390ffc 0x823db0e8
f8950fd0 804dc179 823db0a4 823db030 00000000 atapi!IdePortCompletionDpc+0x75
f8950ff4 804dbe2d f49d9d44 00000000 00000000 nt!KiRetireDpcList+0x46


FAILED_INSTRUCTION_ADDRESS:
+20
00000020 ?? ???

FOLLOWUP_IP:
atapi!IdePortCompletionDpc+75
f8467a05 f645a602 test byte ptr [ebp-0x5a],0x2

SYMBOL_STACK_INDEX: 2

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: atapi!IdePortCompletionDpc+75

MODULE_NAME: atapi

IMAGE_NAME: atapi.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 41107b4d

STACK_COMMAND: .trap fffffffff8950ee4 ; kb

FAILURE_BUCKET_ID: 0xD1_CODE_AV_BAD_IP_atapi!IdePortCompletionDpc+75

BUCKET_ID: 0xD1_CODE_AV_BAD_IP_atapi!IdePortCompletionDpc+75

Followup: MachineOwner
---------

eax=ffdff13c ebx=00000002 ecx=00000000 edx=40000000 esi=00000020 edi=00000020
eip=804e2158 esp=f8950ecc ebp=f8950ee4 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x233:
804e2158 f7457000000200 test dword ptr [ebp+0x70],0x20000 ss:0010:f8950f54=00010202
ChildEBP RetAddr Args to Child
f8950ee4 00000020 badb0d00 81d109f8 00000001 nt!KiTrap0E+0x233 (FPO: [0,0] TrapFrame @ f8950ee4)
WARNING: Frame IP not in any known module. Following frames may be wrong.
f8950f54 823db0e8 ffdff000 f8950fd0 f8467a05 0x20
f8950f60 f8467a05 823382b0 82390d98 82390ffc 0x823db0e8
f8950fd0 804dc179 823db0a4 823db030 00000000 atapi!IdePortCompletionDpc+0x75 (FPO: [Non-Fpo])
f8950ff4 804dbe2d f49d9d44 00000000 00000000 nt!KiRetireDpcList+0x46 (FPO: [0,0,0])
start end module name
804d7000 806eb780 nt ntoskrnl.exe Wed Aug 04 08:19:48 2004 (41108004)
806ec000 8070c380 hal halaacpi.dll Wed Aug 04 07:59:05 2004 (41107B29)
bf000000 bf011580 dxg dxg.sys Wed Aug 04 08:00:51 2004 (41107B93)
bf012000 bf3dc300 nv4_disp nv4_disp.dll Thu Feb 24 17:08:56 2005 (421DFC18)
bf800000 bf9c0380 win32k win32k.sys Wed Aug 04 08:17:30 2004 (41107F7A)
f1e5b000 f1e84f00 kmixer kmixer.sys Wed Aug 04 08:07:46 2004 (41107D32)
f45a4000 f45e4100 HTTP HTTP.sys Sat Oct 09 01:48:20 2004 (41672744)
f460d000 f4630000 Fastfat Fastfat.SYS Wed Aug 04 08:14:15 2004 (41107EB7)
f47ed000 f4801400 wdmaud wdmaud.sys Wed Aug 04 08:15:03 2004 (41107EE7)
f49fa000 f4a08d80 sysaudio sysaudio.sys Wed Aug 04 08:15:54 2004 (41107F1A)
f4f0a000 f4f5c180 srv srv.sys Wed Aug 04 08:14:44 2004 (41107ED4)
f4fd5000 f5001400 mrxdav mrxdav.sys Wed Aug 04 08:00:49 2004 (41107B91)
f58de000 f58e0680 ElbyCDIO ElbyCDIO.sys Wed Jul 21 23:45:25 2004 (40FEE3F5)
f5a42000 f5a45280 ndisuio ndisuio.sys Wed Aug 04 08:03:10 2004 (41107C1E)
f696a000 f6981480 dump_atapi dump_atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
f6a22000 f6a90400 mrxsmb mrxsmb.sys Wed Jan 19 05:26:50 2005 (41EDE18A)
f6ab9000 f6ae3a00 rdbss rdbss.sys Thu Oct 28 03:13:57 2004 (418047D5)
f6ae4000 f6b05d00 afd afd.sys Wed Aug 04 08:14:13 2004 (41107EB5)
f6b06000 f6b26f00 ipnat ipnat.sys Thu Sep 30 00:28:36 2004 (415B3714)
f6b27000 f6b4ec00 netbt netbt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
f6b4f000 f6ba6a80 tcpip tcpip.sys Wed Aug 04 08:14:39 2004 (41107ECF)
f6ba7000 f6bb9400 ipsec ipsec.sys Wed Aug 04 08:14:27 2004 (41107EC3)
f7d02000 f7d35200 update update.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7d36000 f7d38900 Dxapi Dxapi.sys Fri Aug 17 22:53:19 2001 (3B7D843F)
f7d5e000 f7d8e100 rdpdr rdpdr.sys Wed Aug 04 08:01:10 2004 (41107BA6)
f7d8f000 f7d9fe00 psched psched.sys Wed Aug 04 08:04:16 2004 (41107C60)
f7da0000 f7db6680 ndiswan ndiswan.sys Wed Aug 04 08:14:30 2004 (41107EC6)
f7e57000 f7e6a900 parport parport.sys Wed Aug 04 07:59:04 2004 (41107B28)
f7e6b000 f7e8d680 ks ks.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f7e8e000 f7eb1980 portcls portcls.sys Wed Aug 04 08:15:47 2004 (41107F13)
f7eb2000 f7f3d980 kx kx.sys Mon Feb 16 22:46:33 2004 (40313A39)
f7f3e000 f7f60e80 USBPORT USBPORT.SYS Wed Aug 04 08:08:34 2004 (41107D62)
f7f61000 f7f74780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 08:07:04 2004 (41107D08)
f7f75000 f82c04c0 nv4_mini nv4_mini.sys Thu Feb 24 17:13:44 2005 (421DFD38)
f82f9000 f82fcc80 mssmbios mssmbios.sys Wed Aug 04 08:07:47 2004 (41107D33)
f8331000 f834b580 Mup Mup.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f834c000 f8378a80 NDIS NDIS.sys Wed Aug 04 08:14:27 2004 (41107EC3)
f8379000 f8405480 Ntfs Ntfs.sys Wed Aug 04 08:15:06 2004 (41107EEA)
f8406000 f841c780 KSecDD KSecDD.sys Wed Aug 04 07:59:45 2004 (41107B51)
f841d000 f842ef00 sr sr.sys Wed Aug 04 08:06:22 2004 (41107CDE)
f842f000 f844d780 fltMgr fltMgr.sys Wed Aug 04 08:01:17 2004 (41107BAD)
f844e000 f845f380 fasttrak fasttrak.sys Fri Nov 23 00:08:03 2001 (3BFD8553)
f8460000 f8477480 atapi atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
f8478000 f848f800 SCSIPORT SCSIPORT.SYS Wed Aug 04 07:59:39 2004 (41107B4B)
f8490000 f84b5700 dmio dmio.sys Wed Aug 04 08:07:13 2004 (41107D11)
f84b6000 f84d4880 ftdisk ftdisk.sys Fri Aug 17 22:52:41 2001 (3B7D8419)
f84d5000 f84e5a80 pci pci.sys Wed Aug 04 08:07:45 2004 (41107D31)
f84e6000 f8513d80 ACPI ACPI.sys Wed Aug 04 08:07:35 2004 (41107D27)
f8535000 f853dc00 isapnp isapnp.sys Fri Aug 17 22:58:01 2001 (3B7D8559)
f8545000 f8553e80 ohci1394 ohci1394.sys Wed Aug 04 08:10:05 2004 (41107DBD)
f8555000 f8562000 1394BUS 1394BUS.SYS Wed Aug 04 08:10:03 2004 (41107DBB)
f8565000 f856f500 MountMgr MountMgr.sys Wed Aug 04 07:58:29 2004 (41107B05)
f8575000 f8581c80 VolSnap VolSnap.sys Wed Aug 04 08:00:14 2004 (41107B6E)
f8585000 f858de00 disk disk.sys Wed Aug 04 07:59:53 2004 (41107B59)
f8595000 f85a1200 CLASSPNP CLASSPNP.SYS Wed Aug 04 08:14:26 2004 (41107EC2)
f85a5000 f85af500 viaagp viaagp.sys Wed Aug 04 08:07:42 2004 (41107D2E)
f85e5000 f85ee200 amdk7 amdk7.sys Wed Aug 04 07:59:19 2004 (41107B37)
f85f5000 f8604180 nic1394 nic1394.sys Wed Aug 04 07:58:28 2004 (41107B04)
f8605000 f8613b80 drmk drmk.sys Wed Aug 04 08:07:54 2004 (41107D3A)
f8615000 f86246a0 dc21x4 dc21x4.sys Mon Oct 30 16:56:19 2000 (39FD9A23)
f8625000 f8634d80 serial serial.sys Wed Aug 04 08:15:51 2004 (41107F17)
f8635000 f8641e00 i8042prt i8042prt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
f8645000 f86514a0 L8042mou L8042mou.Sys Thu Oct 21 22:31:05 2004 (41781C89)
f8655000 f8664be0 LMouKE LMouKE.Sys Thu Oct 21 22:30:56 2004 (41781C80)
f8665000 f866f380 imapi imapi.sys Wed Aug 04 08:00:12 2004 (41107B6C)
f8675000 f8681180 cdrom cdrom.sys Wed Aug 04 07:59:52 2004 (41107B58)
f8685000 f8693080 redbook redbook.sys Wed Aug 04 07:59:34 2004 (41107B46)
f8695000 f86a1880 rasl2tp rasl2tp.sys Wed Aug 04 08:14:21 2004 (41107EBD)
f86a5000 f86af200 raspppoe raspppoe.sys Wed Aug 04 08:05:06 2004 (41107C92)
f86b5000 f86c0d00 raspptp raspptp.sys Wed Aug 04 08:14:26 2004 (41107EC2)
f86c5000 f86cd900 msgpc msgpc.sys Wed Aug 04 08:04:11 2004 (41107C5B)
f86d5000 f86def00 termdd termdd.sys Wed Aug 04 07:58:52 2004 (41107B1C)
f86e5000 f86f3100 usbhub usbhub.sys Wed Aug 04 08:08:40 2004 (41107D68)
f86f5000 f86fe480 NDProxy NDProxy.SYS Fri Aug 17 22:55:30 2001 (3B7D84C2)
f8715000 f871d700 netbios netbios.sys Wed Aug 04 08:03:19 2004 (41107C27)
f8725000 f872d880 Fips Fips.SYS Sat Aug 18 03:31:49 2001 (3B7DC585)
f8745000 f8754900 Cdfs Cdfs.SYS Wed Aug 04 08:14:09 2004 (41107EB1)
f8785000 f878d700 wanarp wanarp.sys Wed Aug 04 08:04:57 2004 (41107C89)
f8795000 f87a3d80 arp1394 arp1394.sys Wed Aug 04 07:58:28 2004 (41107B04)
f87b5000 f87bb200 PCIIDEX PCIIDEX.SYS Wed Aug 04 07:59:40 2004 (41107B4C)
f87bd000 f87c1900 PartMgr PartMgr.sys Sat Aug 18 03:32:23 2001 (3B7DC5A7)
f87c5000 f87ca880 VClone VClone.sys Thu Sep 02 15:45:13 2004 (413723E9)
f87f5000 f87fa000 usbuhci usbuhci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f87fd000 f8803800 usbehci usbehci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f881d000 f8824000 fdc fdc.sys unavailable (FFFFFFFE)
f882d000 f8833000 kbdclass kbdclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f883d000 f8842a00 mouclass mouclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f886d000 f8871880 TDI TDI.SYS Wed Aug 04 08:07:47 2004 (41107D33)
f887d000 f8881580 ptilink ptilink.sys Fri Aug 17 22:49:53 2001 (3B7D8371)
f888d000 f8891080 raspti raspti.sys Fri Aug 17 22:55:32 2001 (3B7D84C4)
f889d000 f88a2000 flpydisk flpydisk.sys Wed Aug 04 07:59:24 2004 (41107B3C)
f88b5000 f88ba200 vga vga.sys Wed Aug 04 08:07:06 2004 (41107D0A)
f88c5000 f88c9a80 Msfs Msfs.SYS Wed Aug 04 08:00:37 2004 (41107B85)
f88d5000 f88dc880 Npfs Npfs.SYS Wed Aug 04 08:00:38 2004 (41107B86)
f8915000 f8919500 watchdog watchdog.sys Wed Aug 04 08:07:32 2004 (41107D24)
f8945000 f8948000 BOOTVID BOOTVID.dll Fri Aug 17 22:49:09 2001 (3B7D8345)
f89ed000 f89ef280 rasacd rasacd.sys Fri Aug 17 22:55:39 2001 (3B7D84CB)
f8a09000 f8a0cc80 serenum serenum.sys Wed Aug 04 07:59:06 2004 (41107B2A)
f8a11000 f8a13e60 L8042Kbd L8042Kbd.sys Thu Oct 21 22:32:12 2004 (41781CCC)
f8a21000 f8a23580 ndistapi ndistapi.sys Fri Aug 17 22:55:29 2001 (3B7D84C1)
f8a35000 f8a36b80 kdcom kdcom.dll Fri Aug 17 22:49:10 2001 (3B7D8346)
f8a37000 f8a38100 WMILIB WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f8a39000 f8a3a500 viaide viaide.sys Wed Aug 04 07:59:42 2004 (41107B4E)
f8a3b000 f8a3c700 dmload dmload.sys Fri Aug 17 22:58:15 2001 (3B7D8567)
f8a43000 f8a44100 swenum swenum.sys Wed Aug 04 07:58:41 2004 (41107B11)
f8a47000 f8a48280 USBD USBD.SYS Fri Aug 17 23:02:58 2001 (3B7D8682)
f8a4d000 f8a4ef00 Fs_Rec Fs_Rec.SYS Fri Aug 17 22:49:37 2001 (3B7D8361)
f8a51000 f8a52080 Beep Beep.SYS Fri Aug 17 22:47:33 2001 (3B7D82E5)
f8a55000 f8a56080 mnmdd mnmdd.SYS Fri Aug 17 22:57:28 2001 (3B7D8538)
f8a59000 f8a5a080 RDPCDD RDPCDD.sys Fri Aug 17 22:46:56 2001 (3B7D82C0)
f8a5f000 f8a60100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f8ac5000 f8ac6a80 ParVdm ParVdm.SYS Fri Aug 17 22:49:49 2001 (3B7D836D)
f8c24000 f8c24f80 ElbyDelay ElbyDelay.sys Thu Feb 12 18:11:28 2004 (402BB3C0)
f8c27000 f8c27c00 audstub audstub.sys Fri Aug 17 22:59:40 2001 (3B7D85BC)
f8c3a000 f8c3ad00 dxgthk dxgthk.sys Fri Aug 17 22:53:12 2001 (3B7D8438)
f8c68000 f8c68b80 Null Null.SYS Fri Aug 17 22:47:39 2001 (3B7D82EB)

Unloaded modules:
f27b4000 f27de000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f2be0000 f2c0a000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f3015000 f303f000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f3015000 f303f000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f426e000 f4298000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f47a0000 f47ca000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8bbb000 f8bbc000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f498a000 f4997000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f47ca000 f47ed000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f49aa000 f49b8000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8afb000 f8afd000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f88ad000 f88b2000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f82c1000 f82c4000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

Ok. I could guess and flounder on these, but I think you would be best served by having someone from microsoft hand debug these dumps. There is something going on with your DPCs. I can't tell if its memory corruption, a bad proc, or something else without debugging on these.

Sorry I couldn't help more. http://support.microsoft.com and open up an incident.

 

Hi...
Please see this topic and read my post to see if your problem is a virus...
http://www.windowsbbs.com/showthread.php?p=233661
Regards...