Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Crashdump


  • Please log in to reply
1 reply to this topic

#1 limosforu

limosforu

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:03:00 AM

Posted 05 June 2006 - 12:46 PM

The computer is a Dell Optiplex gx60
OS: 2000 Professional
128mb

We had a major virus that hit the network 2 weeks ago and it caused a major issue. loader.exe, jimbo.exe, and jsssvc.exe. The Dell above was one of the pc's first to crash, and so I searched for the viruses and eliminated them. However, the pc is still giving me the blue screen of death. It is a stop error. STOP: 0x000000E2(0x00000000,0x00000000,0x00000000,0x00000000) The end user manually generated the crashdump. I printed the dump file, and it suggests a dozen or more things that could repair the problem, but I don't know which route to take yet.

Any idea how to get a normal mode boot log in safe mode, since the computer will only boot in safe mode?

Do you know of any utilities that I could use to analyze the memory dump file?

I would very much like to know the last thing the computer was trying to do before it crashed....many people suggest that it is a driver or hardware issue that caused the problem. Below is the wnbtlog and dumpfile. Let me know if anyone needs any of the machine language from the dump file, because I just copied and pasted the parts that I could read.

Thanks so much.

Service Pack 3 5 23 2006 06:41:51.500
Loaded driver \WINNT\System32\ntoskrnl.exe
Loaded driver \WINNT\System32\hal.dll
Loaded driver \WINNT\System32\BOOTVID.DLL
Loaded driver ACPI.sys
Loaded driver \WINNT\System32\DRIVERS\WMILIB.SYS
Loaded driver pci.sys
Loaded driver isapnp.sys
Loaded driver pciide.sys
Loaded driver \WINNT\System32\DRIVERS\PCIIDEX.SYS
Loaded driver intelide.sys
Loaded driver MountMgr.sys
Loaded driver ftdisk.sys
Loaded driver Diskperf.sys
Loaded driver dmload.sys
Loaded driver dmio.sys
Loaded driver PartMgr.sys
Loaded driver atapi.sys
Loaded driver aha154x.sys
Loaded driver \WINNT\System32\DRIVERS\SCSIPORT.SYS
Loaded driver sparrow.sys
Loaded driver fd16_700.sys
Loaded driver aic78xx.sys
Loaded driver mraid35x.sys
Loaded driver aic78u2.sys
Loaded driver adpu160m.sys
Loaded driver ultra.sys
Loaded driver fasttrak.sys
Loaded driver mraid2k.sys
Loaded driver disk.sys
Loaded driver \WINNT\System32\DRIVERS\CLASSPNP.SYS
Loaded driver pxfsf.sys
Loaded driver \WINNT\system32\drivers\pxcom.sys
Loaded driver KSecDD.sys
Loaded driver Ntfs.sys
Loaded driver NDIS.sys
Loaded driver Mup.sys
Loaded driver agp440.sys
Did not load driver ACPI Uniprocessor PC
Did not load driver Audio Codecs
Did not load driver Legacy Audio Drivers
Did not load driver Media Control Devices
Did not load driver Legacy Video Capture Devices
Did not load driver Video Codecs
Did not load driver WAN Miniport (L2TP)
Did not load driver WAN Miniport (IP)
Did not load driver WAN Miniport (PPTP)
Did not load driver Direct Parallel
Did not load driver Audio Codecs
Did not load driver Legacy Audio Drivers
Did not load driver Media Control Devices
Did not load driver Legacy Video Capture Devices
Did not load driver Video Codecs
Did not load driver WAN Miniport (L2TP)
Did not load driver WAN Miniport (IP)
Did not load driver WAN Miniport (PPTP)
Did not load driver Direct Parallel
Did not load driver Intel® Extreme Graphics Controller
Did not load driver SoundMAX Integrated Digital Audio
Did not load driver Intel® PRO/100 M Network Connection
Did not load driver Communications Port
Did not load driver ECP Printer Port
Did not load driver Communications Port
Did not load driver ECP Printer Port
Did not load driver Communications Port
Did not load driver ECP Printer Port
Did not load driver Intel® Extreme Graphics Controller
Loaded driver \SystemRoot\System32\DRIVERS\uhcd.sys
Loaded driver \SystemRoot\System32\DRIVERS\usbehci.sys
Did not load driver Intel® PRO/100 M Network Connection
Loaded driver \SystemRoot\System32\DRIVERS\fdc.sys
Loaded driver \SystemRoot\System32\DRIVERS\i8042prt.sys
Loaded driver \SystemRoot\System32\DRIVERS\kbdclass.sys
Loaded driver \SystemRoot\System32\DRIVERS\mouclass.sys
Did not load driver Communications Port
Did not load driver ECP Printer Port
Loaded driver \SystemRoot\System32\DRIVERS\cdrom.sys
Did not load driver SoundMAX Integrated Digital Audio
Did not load driver Audio Codecs
Did not load driver Legacy Audio Drivers
Did not load driver Media Control Devices
Did not load driver Legacy Video Capture Devices
Did not load driver Video Codecs
Did not load driver WAN Miniport (L2TP)
Did not load driver WAN Miniport (IP)
Did not load driver WAN Miniport (PPTP)
Did not load driver Direct Parallel
Loaded driver \SystemRoot\System32\DRIVERS\parallel.sys
Loaded driver \SystemRoot\System32\DRIVERS\swenum.sys
Loaded driver \SystemRoot\System32\DRIVERS\update.sys
Loaded driver \SystemRoot\System32\DRIVERS\omci.sys
Loaded driver \SystemRoot\System32\DRIVERS\usbhub.sys
Loaded driver \SystemRoot\System32\DRIVERS\usbhub20.sys
Loaded driver \SystemRoot\System32\DRIVERS\flpydisk.sys
Did not load driver \SystemRoot\System32\Drivers\lbrtfdc.SYS
Did not load driver \SystemRoot\System32\Drivers\Sfloppy.SYS
Did not load driver \SystemRoot\System32\Drivers\Changer.SYS
Did not load driver \SystemRoot\System32\Drivers\Cdaudio.SYS
Loaded driver \SystemRoot\System32\Drivers\Fs_Rec.SYS
Loaded driver \SystemRoot\System32\Drivers\Null.SYS
Loaded driver \SystemRoot\System32\Drivers\Beep.SYS
Did not load driver \SystemRoot\System32\Drivers\sglfb.SYS
Did not load driver \SystemRoot\System32\Drivers\tga.SYS
Loaded driver \SystemRoot\System32\drivers\vga.sys
Did not load driver mnmdd.SYS
Loaded driver \SystemRoot\System32\Drivers\Msfs.SYS
Loaded driver \SystemRoot\System32\Drivers\Npfs.SYS
Did not load driver RasAcd.SYS
Did not load driver Tcpip.SYS
Did not load driver NetBT.SYS
Did not load driver PrevxTdi.SYS
Did not load driver NetBIOS.SYS
Did not load driver Parport.SYS
Did not load driver Serial.SYS
Did not load driver \SystemRoot\System32\Drivers\PCIDump.SYS
Did not load driver {6080A529-897E-4629-A488-ABA0C29B635E}.SYS
Did not load driver \SystemRoot\System32\DRIVERS\redbook.sys
Did not load driver Rdbss.SYS
Did not load driver MRxSmb.SYS
Did not load driver ewido security suite driver.SYS
Did not load driver CdrAPEL.SYS
Did not load driver Intel® Extreme Graphics Controller
Did not load driver Intel® PRO/100 M Network Connection
Did not load driver Communications Port
Did not load driver ECP Printer Port
Did not load driver SoundMAX Integrated Digital Audio
Did not load driver Audio Codecs
Did not load driver Legacy Audio Drivers
Did not load driver Media Control Devices
Did not load driver Legacy Video Capture Devices
Did not load driver Video Codecs
Did not load driver WAN Miniport (L2TP)
Did not load driver WAN Miniport (IP)
Did not load driver WAN Miniport (PPTP)
Did not load driver Direct Parallel
Loaded driver \SystemRoot\System32\Drivers\EFS.SYS
Loaded driver \SystemRoot\System32\Drivers\Fastfat.SYS
Did not load driver Microsoft WINMM WDM Audio Compatibility Driver


BELOW IS THE DUMP FILE, WITHOUT MACHINE LANGUAGE:



INVALID_IRP_CODE - IRP_MN_FILTER_RESOURCE_REQUIREMENTS - IRP_MN_QUERY_DEVICE_TEXT - IRP_MN_QUERY_RESOURCE_REQUIREMENTS - IRP_MN_QUERY_RESOURCES - IRP_MN_QUERY_CAPABILITIES - IRP_MN_QUERY_INTERFACE - IRP_MN_QUERY_DEVICE_RELATIONS - IRP_MN_CANCEL_STOP_DEVICE - IRP_MN_QUERY_STOP_DEVICE - IRP_MN_STOP_DEVICE - IRP_MN_CANCEL_REMOVE_DEVICE - IRP_MN_REMOVE_DEVICE - IRP_MN_QUERY_REMOVE_DEVICE - IRP_MN_START_DEVICE - ‚SPS SPQ ‚HLR HLQ ‚NCE ‚NCR NCQ ‚NAK OFF ‚UNR ‚ERR ‚RSP REQ ‚RSU RQU ‚RES AU2 AUT ‚CHL NEG ҧN€ IRP_MN_QUERY_POWER IRP_MN_SET_POWER IRP_MN_POWER_SEQUENCE IRP_MN_WAIT_WAKE IRP_MN_EXECUTE_METHOD IRP_MN_REGINFO IRP_MN_DISABLE_COLLECTION IRP_MN_ENABLE_COLLECTION IRP_MN_DISABLE_EVENTS IRP_MN_ENABLE_EVENTS IRP_MN_CHANGE_SINGLE_ITEM IRP_MN_CHANGE_SINGLE_INSTANCE IRP_MN_QUERY_SINGLE_INSTANCE IRP_MN_QUERY_ALL_DATA IRP_MN_QUERY_LEGACY_BUS_INFORMATION IRP_MN_SURPRISE_REMOVAL IRP_MN_DEVICE_USAGE_NOTIFICATION IRP_MN_QUERY_BUS_INFORMATION IRP_MN_QUERY_PNP_DEVICE_STATE IRP_MN_QUERY_ID IRP_MN_SET_LOCK IRP_MN_EJECT IRP_MN_WRITE_CONFIG IRP_MN_READ_CONFIG INVALID_IRP_CODE IRP_MN_FILTER_RESOURCE_REQUIREMENTS IRP_MN_QUERY_DEVICE_TEXT IRP_MN_QUERY_RESOURCE_REQUIREMENTS IRP_MN_QUERY_RESOURCES IRP_MN_QUERY_CAPABILITIES IRP_MN_QUERY_INTERFACE IRP_MN_QUERY_DEVICE_RELATIONS IRP_MN_CANCEL_STOP_DEVICE IRP_MN_QUERY_STOP_DEVICE IRP_MN_STOP_DEVICE IRP_MN_CANCEL_REMOVE_DEVICE IRP_MN_QUERY_REMOVE_DEVICE IRP_MN_START_DEVICE IRP_MJ_PNP IRP_MJ_SET_QUOTA IRP_MJ_QUERY_QUOTA IRP_MJ_DEVICE_CHANGE IRP_MJ_SYSTEM_CONTROL IRP_MJ_POWER IRP_MJ_SET_SECURITY IRP_MJ_QUERY_SECURITY IRP_MJ_CREATE_MAILSLOT IRP_MJ_CLEANUP IRP_MJ_LOCK_CONTROL IRP_MJ_SHUTDOWN IRP_MJ_INTERNAL_DEVICE_CONTROL IRP_MJ_DEVICE_CONTROL IRP_MJ_FILE_SYSTEM_CONTROL IRP_MJ_DIRECTORY_CONTROL IRP_MJ_SET_VOLUME_INFORMATION IRP_MJ_QUERY_VOLUME_INFORMATION IRP_MJ_FLUSH_BUFFERS IRP_MJ_SET_EA IRP_MJ_QUERY_EA IRP_MJ_SET_INFORMATION IRP_MJ_QUERY_INFORMATION IRP_MJ_WRITE IRP_MJ_READ IRP_MJ_CLOSE IRP_MJ_CREATE_NAMED_PIPE IRP_MJ_CREATE SCSIPORT.SYS PCMCIA.SYS ACPI.SYS NDIS.SYS NTKRPAMP.EXE NTKRNLPA.EXE NTKRNLMP.EXE NTOSKRNL.EXE HAL.DLL A driver has forwarded an IRP at an IRQL that is illegal for this major code. (Irp = %Irp ). The caller of IoCompleteRequest is completing an IRP that has never been forwarded via a call to IoCallDriver or PoCallDriver. This may be a bug. (Irp = %Irp ). Caller of IoInitializeIrp has passed an IRP that was allocated with IoAllocateIrp. This is illegal, unneccessary, and negatively impacts performace in normal use. Check the documentation for IoReuseIrp if this IRP is being recycled. A driver has sent an IRP that is restricted for system use only. (Irp = %Irp ). The UI Number field of the query capabilities structure in a query capabilities IRP was not properly initialized to -1. (Irp = %Irp ). The address field of the query capabilities structure in a query capabilities IRP was not properly initialized to -1. (Irp = %Irp ). The size field of the query capabilities structure in a query capabilities IRP was not properly initialized. (Irp = %Irp ). The version field of the query capabilities structure in a query capabilities IRP was not properly initialized. (Irp = %Irp ). Caller has completed untouched IRP_MJ_POWER (instead of passing the irp down) or non-PDO has failed the irp using illegal value of STATUS_NOT_SUPPORTED. (Irp = %Irp ). Caller has completed successful IRP_MJ_POWER instead of passing it down (Irp = %Irp ). Caller has completed a IRP_MJ_POWER it didn't understand instead of passing it down (Irp = %Irp ). Caller has completed untouched IRP_MJ_PNP (instead of passing the irp down) or non-PDO has failed the irp using illegal value of STATUS_NOT_SUPPORTED. (Irp = %Irp ). Caller has completed successful IRP_MJ_PNP instead of passing it down (Irp = %Irp ). Caller has completed a IRP_MJ_PNP it didn't understand instead of passing it down (Irp = %Irp ). The code implementing the TargetDeviceRelation query has not called ObReferenceObject on the PDO (Irp = %Irp ). PDO has forgotten to fill out the device relation list with the PDO for the TargetDeviceRelation query (Irp = %Irp ) PDO has not responded to a required IRP (Irp = %Irp ) A cancel routine has been set for an IRP that is currently being processed by drivers lower in the stack, possibly stomping their cancel routine (Irp = %Irp, Routine=%Routine ). A driver's completion routine ( %Routine ) has not marked the IRP pending if the PendingReturned field was set in the IRP passed to it. This may cause the OS to hang, especially if an error is returned by the stack. (Irp = %Irp ) IRP completion routines must be in nonpagable code, and this one is not: %Routine. (Irp = %Irp ) An IRP dispatch handler has returned without passing down or completing this Irp or someone forgot to return STATUS_PENDING. (Irp = %Irp ). An IRP dispatch handler has returned a status that is illegal (0xFFFFFFFF). This is probably due to an uninitialized stack variable. Please do an ln on address %lx and file a bug. (Irp = %Irp ) An IRP dispatch handler ( %Routine ) has returned a status that is inconsistent with the Irp's IoStatus.Status field. ( Irp = %Irp - Irp->IoStatus.Status = %Status1 - returned = %Status2 ) An IRP dispatch handler for a bus filter has deleted it's device object, but the PDO is still present! Bus filters must clean up in FastIoDetach callbacks. DeviceObject = %DevObj - Dispatch = %Routine - Irp = %Irp A Bus Filter's IRP dispatch handler has detached upon receiving a remove IRP when the PDO is still alive. Bus Filters must clean up in FastIoDetach callbacks. DeviceObject = %DevObj - Dispatch = %Routine - Irp = %Irp An IRP dispatch handler for a PDO has deleted it's device object, but the hardware has not been reported as missing in a bus relations query. DeviceObject = %DevObj - Dispatch = %Routine - Irp = %Irp IRP_MJ_SYSTEM_CONTROL has been completed by someone other than the ProviderId. This IRP should either have been completed earlier or should have been passed down (Irp = %Irp ). The IRP was targetted at DeviceObject %DevObj This driver has not filled out a dispatch routine for a required IRP major function (Irp = %Irp ). An IRP dispatch handler has not properly deleted it's device object upon receiving a remove IRP. DeviceObject = %DevObj - Dispatch = %Routine - Irp = %Irp An IRP dispatch handler has not properly detached from the stack below it upon receiving a remove IRP. DeviceObject = %DevObj - Dispatch = %Routine - Irp = %Irp Caller has copied the Irp stack but not set a completion routine. This is inefficient, use IoSkipCurrentIrpStackLocation instead (Irp = %Irp ). Driver has returned a suspicious status. This is probably due to an uninitiaized variable bug in the driver. (Irp = %Irp ) Previously set IRP_MJ_POWER status has been converted to STATUS_NOT_SUPPORTED. (Irp = %Irp ). Non-successful non-STATUS_NOT_SUPPORTED IRP status for IRP_MJ_POWER is being passed down stack (Irp = %Irp ). Failed POWER IRPs must be completed. FDO caller has responded to an IRP that is reserved for PDO use only. Stop it. (Irp = %Irp ) FDO caller has not handled a required IRP. The FDO must either fail the IRP or set the IRP's status if it is not going change the IRP's status using a completion routine. (Irp = %Irp ). Previously set IRP_MJ_PNP status has been converted to STATUS_NOT_SUPPORTED. (Irp = %Irp ). Non-successful non-STATUS_NOT_SUPPORTED IRP status for IRP_MJ_PNP is being passed down stack (Irp = %Irp ). Failed PNP IRPs must be completed. Caller has changed the information field of an IRP it does not understand (Irp = %Irp ). Caller has changed the status field of an IRP it does not understand (Irp = %Irp ). Caller has trashed or has not properly copied IRP's stack (Irp = %Irp ). Caller has forwarded an Irp while skipping a device object in the stack. The caller is probably sending IRPs to the PDO instead of to the device returned by IoAttachDeviceToDeviceStack (Irp = %Irp ). Any WMI IRP must have status initialized to STATUS_NOT_SUPPORTED (Irp = %Irp ). Any Power IRP must have status initialized to STATUS_NOT_SUPPORTED (Irp = %Irp ). Any PNP IRP must have status initialized to STATUS_NOT_SUPPORTED (Irp = %Irp ). Caller of IoInitializeIrp has passed an IRP that was allocated with IoAllocateIrp. This is illegal and unneccessary, and has caused a quota leak. Check the documentation for IoReuseIrp if this IRP is being recycled. Caller of IoFreeIrp is freeing an IRP that is still enqueued against a thread! (Irp = %Irp ) Caller of IoFreeIrp is freeing an IRP that is still in use! (Irp = %Irp ) Caller of IoFreeIrp is freeing an IRP that is still in use! (Original Irp = %Irp1, Irp in usage is %Irp2 ) Caller is completing an IRP that is currently queued beneath it! The code handling IRPs returning STATUS_PENDING in this driver appears to be broken. (Irp = %Irp ) This IRP is about to run out of stack locations. Someone may have forwarded this IRP from another stack (Irp = %Irp ). Caller has manually copied the stack and has inadvertantly copied the upper layer's completion routine. Please use IoCopyCurrentIrpStackLocationToNext. (Irp = %Irp ). Caller has incorrectly forwarded an IRP (control field not zerod). The driver should use IoCopyCurrentIrpStackLocationToNext or IoSkipCurrentIrpStackLocation. (Irp = %Irp ) Caller is forwarding an IRP that is currently queued beneath it! The code handling IRPs returning STATUS_PENDING in this driver appears to be broken (Irp = %Irp ). Caller has passed in NULL as a DeviceObject. This is fatal (Irp = %Irp ). A driver has called IoCallDriver without setting the CancelRoutine in the Irp to NULL (Irp = %Irp ). Driver has attempted to detach from device object %DevObj, which is not attached to anything. This may occur if detach was called twice on the same device object. A device is deleting itself while there is another device beneath it in the driver stack. This may be because the caller has forgotten to call IoDetachDevice first, or the lower driver may have incorrectly deleted itself. CORE DRIVER ERROR POSTPONED WDM DRIVER BUG WDM DRIVER WARNING WDM DRIVER ERROR Status DevObj Routine Irp * P N P 0 6 0 0 * P N P 0 7 0 0 * n E C 1 4 0 1 * P N P 0 4 0 0 * n E C 0 C 0 1 * n E C 8 0 7 1 * n E C 1 5 0 3 * n E C 1 5 0 2 * n E C 1 5 0 1 * n E C 1 5 0 0 * P N P 0 5 0 1 \ L o g C o n f \ C o n t r o l P h a n t o m D e v i c e D e s c F i r m w a r e I d e n t i f i e d C o m p a t i b l e I D s H a r d w a r e I D * n E C 1 F 0 0 N E C P C - 9 8 0 0 B U S M O U S E * P N P 0 F 0 0 M I C R O S O F T B U S M O U S E * P N P 0 F 0 8 L O G I T E C H S E R I A L M O U S E * P N P 0 F 0 9 M I C R O S O F T B A L L P O I N T S E R I A L M O U S E * P N P 0 F 0 1 M I C R O S O F T S E R I A L M O U S E * P N P 0 F 0 2 M I C R O S O F T I N P O R T M O U S E * P N P 0 F 1 2 L O G I T E C H P S 2 M O U S E * P N P 0 F 0 3 M I C R O S O F T P S 2 M O U S E * P N P 0 F 0 C S E R I A L M O U S E * P N P 0 F 0 E P S 2 M O U S E P C 9 8 _ N 1 0 6 K E Y P C 9 8 _ L a p t o p K E Y * n E C 1 3 0 0 P C 9 8 _ 1 0 6 K E Y * P N P 0 3 0 b P C A T _ E N H A N C E D * P N P 0 3 0 a A T T _ 3 0 2 * P N P 0 3 0 9 O L I _ A 1 0 1 _ 1 0 2 K E Y * P N P 0 3 0 6 O L I _ 8 6 K E Y * P N P 0 3 0 5 O L I _ 1 0 2 K E Y A T T _ 3 0 1 * P N P 0 3 0 4 O L I _ 8 3 K E Y * P N P 0 3 0 3 1 0 1 - K E Y X T _ 8 4 K E Y * P N P 0 3 0 2 P C X T _ 8 4 K E Y * P N P 0 3 0 1 P C A T _ 8 6 K E Y * P N P 0 3 0 0 X T _ 8 3 K E Y O t h e r s e r i a l b u s S S A A c c e s s b u s F i r e w i r e C o - p r o c e s s o r A l p h a P e n t i u m 4 8 6 3 8 6 O t h e r d o c k G e n e r i c d o c k O t h e r i n p u t M o u s e D i g i t i z e r K e y b o a r d O t h e r s y s t e m d e v i c e I S A R T C G e n e r i c R T C E I S A t i m e r I S A t i m e r G e n e r i c 8 2 5 4 E I S A D M A I S A D M A G e n e r i c 8 2 3 7 E I S A P I C I S A P I C G e n e r i c 8 2 5 9 O t h e r c o m m E C P 1 . x p a r a l l e l B i D i P a r a l l e l P a r a l l e l o u t p u t o n l y 1 6 5 5 0 1 6 4 5 0 X T S e r i a l O t h e r b r i d g e C a r d b u s N u B u s P C I / P C M C I A P C I / P C I P C I / M C A P C I / E I S A P C I / I S A H O S T / P C I O t h e r m e m o r y F l a s h m e m o r y R A M m e m o r y O t h e r m u l t i m e d i a A u d i o d e v i c e V i d e o d e v i c e O t h e r d i s p l a y X G A S V G A V G A O t h e r n e t w o r k A T M F D D I T o k e n r i n g E t h e r n e t


ollbackAllocation ArbiterActionCommitAllocation ArbiterActionRetestAllocation ArbiterActionTestAllocation T r a c e A l i g n m e n t U s e P e r f o r m a n c e C l o c k W M I \ T r a c e M a x E v e n t S i z e W M I D e b u g g e r R e t r i e s E n a b l e T i m e r W a t c h d o g W i n 3 2 P r i o r i t y S e p a r a t i o n P r i o r i t y C o n t r o l S h u t d o w n T i m e M a x T i m e S e p a r a t i o n B e f o r e C o r r e c t P o w e r P o l i c y S i m u l a t e F o r c e N p x E m u l a t i o n R e g i s t r y L a z y F l u s h I n t e r v a l S e s s i o n M a n a g e r \ C o n f i g u r a t i o n M a n a g e r R e g i s t r y S i z e L i m i t I n s t a l l L a n g u a g e D e f a u l t N l s \ L a n g u a g e C S D R e l e a s e T y p e C S D V e r s i o n W i n d o w s T S A p p C o m p a t T S E n a b l e d P r o d u c t O p t i o n s H e a p D e C o m m i t F r e e B l o c k T h r e s h o l d H e a p D e C o m m i t T o t a l F r e e T h r e s h o l d H e a p S e g m e n t C o m m i t H e a p S e g m e n t R e s e r v e C r i t i c a l S e c t i o n T i m e o u t R e s o u r c e T i m e o u t C o u n t I o V e r i f i e r L e v e l L a r g e I r p S t a c k L o c a t i o n s C o u n t O p e r a t i o n s S e s s i o n M a n a g e r \ I / O S y s t e m I d e a l D p c R a t e A d j u s t D p c T h r e s h o l d M i n i m u m D p c R a t e D p c Q u e u e D e p t h S e s s i o n M a n a g e r \ K e r n e l P r i o r i t y Q u a n t u m M a t r i x A d d i t i o n a l D e l a y e d W o r k e r T h r e a d s A d d i t i o n a l C r i t i c a l W o r k e r T h r e a d s S e s s i o n M a n a g e r \ E x e c u t i v e W r i t e W a t c h M a k e L o w M e m o r y E n f o r c e W r i t e P r o t e c t i o n L a r g e P a g e M i n i m u m V e r i f y D r i v e r L e v e l V e r i f y D r i v e r s T r a c k P t e s T r a c k L o c k e d P a g e s P r o t e c t N o n P a g e d P o o l S n a p U n l o a d s P o o l T a g O v e r r u n s P o o l T a g C l e a r P a g e F i l e A t S h u t d o w n S e c o n d L e v e l D a t a C a c h e M o d i f i e d P a g e L i f e D i s a b l e P a g i n g E x e c u t i v e S y s t e m P a g e s O v e r C o m m i t S i z e L a r g e S y s t e m C a c h e N o n P a g e d P o o l M a x i m u m P e r c e n t N o n P a g e d P o o l S i z e P a g e d P o o l S i z e M a p A l l o c a t i o n F r a g m e n t P o o l U s a g e M a x i m u m D y n a m i c M e m o r y P a g i n g F i l e Q u o t a N o n P a g e d P o o l Q u o t a P a g e d P o o l Q u o t a D o n t V e r i f y R a n d o m D r i v e r s S e s s i o n M a n a g e r \ M e m o r y M a n a g e m e n t G l o b a l F l a g R e a l T i m e I s U n i v e r s a l B i a s A c t i v e T i m e B i a s T i m e Z o n e I n f o r m a t i o n A u d i t B a s e O b j e c t s A u d i t B a s e D i r e c t o r i e s L S A P r o t e c t i o n M o d e S e s s i o n M a n a g e r Ž_R€—_R€ __R€$_R€ 07F€97F€ s6F€„6F€9!R€B!R€ _!R€)!R€_$R€_$R€ "R€"R€ D"R€H"R€ #R€_$R€>$R€B$R€ _&R€
&R€ U(R€^(R€ _(R€!(R€ 7(R€E(R€…(R€‰(R€*R€_+R€ Œ.R€•.R€ -R€-R€ q.R€.R€R e a l M o d e I r q R o u t i n g T a b l e D o c k i n g I n f o r m a t i o n S y s t e m M e m o r y N e t w o r k P e r i p h e r a l L i n e P e r i p h e r a l O t h e r P e r i p h e r a l T e r m i n a l P e r i p h e r a l K e y b o a r d P e r i p h e r a l P o i n t e r P e r i p h e r a l P r i n t e r P e r i p h e r a l M o n i t o r P e r i p h e r a l M o d e m P e r i p h e r a l T a p e P e r i p h e r a l F l o p p y D i s k P e r i p h e r a l D i s k P e r i p h e r a l O t h e r C o n t r o l l e r A u d i o C o n t r o l l e r K e y b o a r d C o n t r o l l e r P o i n t e r C o n t r o l l e r P a r a l l e l C o n t r o l l e r D i s p l a y C o n t r o l l e r N e t w o r k C o n t r o l l e r S e r i a l C o n t r o l l e r W o r m C o n t r o l l e r C d R o m C o n t r o l l e r T a p e C o n t r o l l e r D i s k C o n t r o l l e r M u l t i f u n c t i o n A d a p t e r D t i A d a p t e r S c s i A d a p t e r T c A d a p t e r E i s a A d a p t e r S e c o n d a r y C a c h e S e c o n d a r y D C a c h e S e c o n d a r y I C a c h e P r i m a r y D C a c h e P r i m a r y I C a c h e F l o a t i n g P o i n t P r o c e s s o r C e n t r a l P r o c e s s o r S A M U S E R \ . D E F A U L T D E F A U L T S O F T W A R E S E C U R I T Y M A C H I N E \ H A R D W A R E \ R E G I S T R Y \ M A C H I N E \ S Y S T E M \ C U R R E N T C O N T R O L S E T \ C O N T R O L \ B I O S I N F O S y m b o l i c L i n k V a l u e C o n t r o l \ S e s s i o n M a n a g e r P r o c e s s o r C o n t r o l \ R E G I S T R Y \ M A C H I N E \ S O F T W A R E \ M I C R O S O F T \ W I N D O W S N T \ C U R R E N T V E R S I O N \ P E R F L I B S Y S T E M \ R E G I S T R Y \ M A C H I N E \ C L O N E \ R E G I S T R Y \ U S E R \ R E G I S T R Y \ M A C H I N E \ S Y S T E M \ C U R R E N T C O N T R O L S E T \ S E R V I C E S \ E V E N T L O G \ R E G I S T R Y \ M A C H I N E \ S Y S T E M \ C U R R E N T C O N T R O L S E T \ C O N T R O L \ B O O T L O G \ R E G I S T R Y \ M A C H I N E \ S Y S T E M \ C U R R E N T C O N T R O L S E T \ C O N T R O L \ S E S S I O N M A N A G E R \ M E M O R Y M A N A G E M E N T \ R E G I S T R Y \ M A C H I N E \ S Y S T E M \ C U R R E N T C O N T R O L S E T \ C O N T R O L \ S A F E B O O T \ R E G I S T R Y \ M A C H I N E \ S Y S T E M \ C U R R E N T C O N T R O L S E T \ C O N T R O L \ C L A S S \ R E G I S T R Y \ M A C H I N E \ S Y S T E M \ C U R R E N T C O N T R O L S E T \ H A R D W A R E P R O F I L E S \ C U R R E N T \ R E G I S T R Y \ M A C H I N E \ S Y S T E M \ C U R R E N T C O N T R O L S E T \ S E R V I C E S \ R E G I S T R Y \ M A C H I N E \ S Y S T E M \ C U R R E N T C O N T R O L S E T \ E N U M \ R O O T \ R E G I S T R Y \ M A C H I N E \ S Y S T E M \ C U R R E N T C O N T R O L S E T \ E N U M \ R E G I S T R Y \ M A C H I N E \ S Y S T E M \ C U R R E N T C O N T R O L S E T \ R E G I S T R Y \ M A C H I N E \ S Y S T E M \ R E G I S T R Y \ M A C H I N E \ H A R D W A R E \ O W N E R M A P \ R E G I S T R Y \ M A C H I N E \ H A R D W A R E \ R E S O U R C E M A P \ R E G I S T R Y \ M A C H I N E \ H A R D W A R E \ D E V I C E M A P \ R E G I S T R Y \ M A C H I N E \ H A R D W A R E \ D E S C R I P T I O N \ S Y S T E M \ R E G I S T R Y \ M A C H I N E \ H A R D W A R E \ D E S C R I P T I O N \ R E G I S T R Y \ M A C H I N E \ H A R D W A R E \ R E G I S T R Y \ M A C H I N E \ R E G I S T R Y MPSA MPIPI CBUS PCMCIA VME PCI MCA ISA U n d e f i n e d M e m o r y C l a s s P e r i p h e r a l C o n t r o l l e r A d a p t e r C a c h e P r o c e s s o r S y s t e m v 9 v 8 v 7 v 6 v 5 v 4 v 3 v 2 v 1 v 0 v9 v8 v7 v6 v5 v4 v3 v2 v1 v0 Rel Rev Ver hR€hR€ pR€ J€R€N€R€ ACPICreatorRevision ACPIRevision ACPIOemRevision ACPIOemTableId ACPIOemId Install RmPmSame PMode OemId Pointer NextMatch Search Memory Date BitReg DelReg AddReg IR€WR€ R€R€ V€_V€ _ __ _ obj\i386\ntoskrnl.exe



W i n d o w s ( R ) 2 0 0 0 O p e r a t i n g S y s t e m B _ _ P r o d u c t V e r s i o n 5 . 0 0 . 2 1 9 5 . 5 4 3 8 D _ V a r F i l e I n f o $ _ T r a n s l a t i o n ___ _ } d  † _ ‹ œ _ Ÿ X_ ~ @~ @F ‡ @Š @F @ž @xG _ _@_ _@G _ APC_INDEX_MISMATCH
_ DEVICE_QUEUE_NOT_BUSY
_ INVALID_AFFINITY_SET
INVALID_DATA_ACCESS_TRAP
( INVALID_PROCESS_ATTACH_ATTEMPT
( INVALID_PROCESS_DETACH_ATTEMPT
$ INVALID_SOFTWARE_INTERRUPT
IRQL_NOT_DISPATCH_LEVEL
IRQL_NOT_GREATER_OR_EQUAL
IRQL_NOT_LESS_OR_EQUAL
$ NO_EXCEPTION_HANDLING_SUPPORT
$ MAXIMUM_WAIT_OBJECTS_EXCEEDED
$ MUTEX_LEVEL_NUMBER_VIOLATION
_ NO_USER_MODE_CONTEXT
SPIN_LOCK_ALREADY_OWNED
_ SPIN_LOCK_NOT_OWNED
THREAD_NOT_MUTEX_OWNER
_ TRAP_CAUSE_UNKNOWN
EMPTY_THREAD_REAPER_LIST
$ CREATE_DELETE_LOCK_NOT_LOCKED
$ LAST_CHANCE_CALLED_FROM_KMODE
_ CID_HANDLE_CREATION
_ CID_HANDLE_DELETION
_ REFERENCE_BY_POINTER
_ BAD_POOL_HEADER
_ MEMORY_MANAGEMENT
_ PFN_SHARE_COUNT
_ PFN_REFERENCE_COUNT
NO_SPIN_LOCK_AVAILABLE
$ KMODE_EXCEPTION_NOT_HANDLED
$ SHARED_RESOURCE_CONV_ERROR
( KERNEL_APC_PENDING_DURING_EXIT
_ QUOTA_UNDERFLOW
_ FILE_SYSTEM
_ FAT_FILE_SYSTEM
_ NTFS_FILE_SYSTEM
_ NPFS_FILE_SYSTEM
_ CDFS_FILE_SYSTEM
_ RDR_FILE_SYSTEM
_ CORRUPT_ACCESS_TOKEN
_ SECURITY_SYSTEM
_ INCONSISTENT_IRP
_ PANIC_STACK_SWITCH
_ PORT_DRIVER_INTERNAL
SCSI_DISK_DRIVER_INTERNAL
_ DATA_BUS_ERROR
_ INSTRUCTION_BUS_ERROR
SET_OF_INVALID_CONTEXT
$ PHASE0_INITIALIZATION_FAILED
$ PHASE1_INITIALIZATION_FAILED
( UNEXPECTED_INITIALIZATION_CALL
_ CACHE_MANAGER
$ NO_MORE_IRP_STACK_LOCATIONS
( DEVICE_REFERENCE_COUNT_NOT_ZERO
_ FLOPPY_INTERNAL_ERROR
SERIAL_DRIVER_INTERNAL
SYSTEM_EXIT_OWNED_MUTEX
$ SYSTEM_UNWIND_PREVIOUS_USER
SYSTEM_SERVICE_EXCEPTION
$ INTERRUPT_UNWIND_ATTEMPTED
( INTERRUPT_EXCEPTION_NOT_HANDLED
4 MULTIPROCESSOR_CONFIGURATION_NOT_SUPPORTED
_ NO_MORE_SYSTEM_PTES
_ TARGET_MDL_TOO_SMALL
MUST_SUCCEED_POOL_EMPTY
ATDISK_DRIVER_INTERNAL
_ NO_SUCH_PARTITION
( MULTIPLE_IRP_COMPLETE_REQUESTS
$ INSUFFICIENT_SYSTEM_MAP_REGS
$ DEREF_UNKNOWN_LOGON_SESSION
REF_UNKNOWN_LOGON_SESSION
$ CANCEL_STATE_IN_COMPLETED_IRP
( PAGE_FAULT_WITH_INTERRUPTS_OFF
( IRQL_GT_ZERO_AT_SYSTEM_SERVICE
STREAMS_INTERNAL_ERROR
$ FATAL_UNHANDLED_HARD_ERROR
_ NO_PAGES_AVAILABLE
_ PFN_LIST_CORRUPT
_ NDIS_INTERNAL_ERROR
$ PAGE_FAULT_IN_NONPAGED_AREA
_ REGISTRY_ERROR
_ MAILSLOT_FILE_SYSTEM
_ NO_BOOT_DEVICE
LM_SERVER_INTERNAL_ERROR
DATA_COHERENCY_EXCEPTION
( INSTRUCTION_COHERENCY_EXCEPTION
_ XNS_INTERNAL_ERROR
_ FTDISK_INTERNAL_ERROR
_ PINBALL_FILE_SYSTEM
CRITICAL_SERVICE_FAILED
_ SET_ENV_VAR_FAILED
HAL_INITIALIZATION_FAILED
_ UNSUPPORTED_PROCESSOR
$ OBJECT_INITIALIZATION_FAILED
( SECURITY_INITIALIZATION_FAILED
$ PROCESS_INITIALIZATION_FAILED
$ HAL1_INITIALIZATION_FAILED
$ OBJECT1_INITIALIZATION_FAILED
( SECURITY1_INITIALIZATION_FAILED
( SYMBOLIC_INITIALIZATION_FAILED
$ MEMORY1_INITIALIZATION_FAILED
$ CACHE_INITIALIZATION_FAILED
$ CONFIG_INITIALIZATION_FAILED
$ FILE_INITIALIZATION_FAILED
IO1_INITIALIZATION_FAILED
LPC_INITIALIZATION_FAILED
( PROCESS1_INITIALIZATION_FAILED
$ REFMON_INITIALIZATION_FAILED
( SESSION1_INITIALIZATION_FAILED
( SESSION2_INITIALIZATION_FAILED
( SESSION3_INITIALIZATION_FAILED
( SESSION4_INITIALIZATION_FAILED
( SESSION5_INITIALIZATION_FAILED
$ ASSIGN_DRIVE_LETTERS_FAILED
_ CONFIG_LIST_FAILED
BAD_SYSTEM_CONFIG_INFO
$ CANNOT_WRITE_CONFIGURATION
PROCESS_HAS_LOCKED_PAGES
KERNEL_STACK_INPAGE_ERROR
_ PHASE0_EXCEPTION
( Mismatched kernel and hal image.
KERNEL_DATA_INPAGE_ERROR
INACCESSIBLE_BOOT_DEVICE
_ If this is the first time you've seen this Stop error screen,
restart your computer. If this screen appears again, follow
these steps:

Check to make sure any new hardware or software is properly installed.
If this is a new installation, ask your hardware or software manufacturer
for any Windows 2000 updates you might need.

If problems continue, disable or remove any newly installed hardware
or software. Disable BIOS memory options such as caching or shadowing.
If you need to use Safe Mode to remove or disable components, restart
your computer, press F8 to select Advanced Startup Options, and then
select Safe Mode.

Refer to your Getting Started manual for more information on
troubleshooting Stop errors.
_ INSTALL_MORE_MEMORY
$ UNEXPECTED_KERNEL_MODE_TRAP
_ Hardware malfunction.
SPIN_LOCK_INIT_FAILURE
_ DFS_FILE_SYSTEM
_ OFS_FILE_SYSTEM
_ RECOM_DRIVER
_ SETUP_FAILURE
Audit attempt has failed.
0 This system may be infected with a virus.
( Beginning dump of physical memory
( Dumping physical memory to disk
d Physical memory dump complete. Contact your system administrator or
technical support group.
PP0_INITIALIZATION_FAILED
PP1_INITIALIZATION_FAILED
$ WIN32K_INIT_OR_RIT_FAILURE
UP_DRIVER_ON_MP_SYSTEM
_ INVALID_KERNEL_HANDLE
$ KERNEL_STACK_LOCKED_AT_EXIT
_ PNP_INTERNAL_ERROR
INVALID_WORK_QUEUE_ITEM
BOUND_IMAGE_UNSUPPORTED
$ END_OF_NT_EVALUATION_PERIOD
INVALID_REGION_OR_SEGMENT
SYSTEM_LICENSE_VIOLATION
_ UDFS_FILE_SYSTEM
MACHINE_CHECK_EXCEPTION
$ DRIVER_POWER_STATE_FAILURE
_ INTERNAL_POWER_ERROR
L Inconsistency detected in the PCI Bus driver's internal structures.
4 A CRC check on the memory range has failed
_ ACPI_DRIVER_INTERNAL
X Internal inconsistency while representing
Ntfs Structured Storage as a DOCFILE.
$_ The ACPI BIOS in this system is not fully compliant with the ACPI
specification. Please read the README.TXT for possible workarounds. You
can also contact your system's manufacturer for an updated BIOS, or visit
http://www.hardware-update.com to see if a new BIOS is available.
_ FP_EMULATION_ERROR
_ BAD_EXHANDLE
< The system is booting in safemode - Minimal Services
H The system is booting in safemode - Minimal Services with Network
D The system is booting in safemode - Directory Services Repair
( SESSION_HAS_VALID_POOL_ON_EXIT
H Allocate from NonPaged Pool failed for a HAL critical allocation.
0_ If this is the first time you've seen this Stop error screen,
restart your computer. If this screen appears again, follow
these steps:

Check to make sure any new hardware or software is properly installed.
If this is a new installation, ask your hardware or software manufacturer
for any Windows 2000 updates you might need.

If problems continue, disable or remove any newly installed hardware
or software. Disable BIOS memory options such as caching or shadowing.
Check your hard drive to make sure it is properly configured and
terminated. If you need to use Safe Mode to remove or disable components,
restart your computer, press F8 to select Advanced Startup Options,
and then select Safe Mode.

Refer to your Getting Started manual for more information on
troubleshooting Stop errors.
_ If this is the first time you've seen this Stop error screen,
restart your computer. If this screen appears again, follow
these steps:

Check to be sure you have adequate disk space. If a driver is
identified in the Stop message, disable the driver or check
with the manufacturer for driver updates. Try changing video
adapters.

Check with your hardware vendor for any BIOS updates. Disable
BIOS memory options such as caching or shadowing. If you need
to use Safe Mode to remove or disable components, restart your
computer, press F8 to select Advanced Startup Options, and then
select Safe Mode.

Refer to your Getting Started manual for more information on
troubleshooting Stop errors.
_ If this is the first time you've seen this Stop error screen,
restart your computer. If this screen appears again, follow
these steps:

Disable or uninstall any anti-virus, disk defragmentation
or backup utilities. Check your hard drive configuration,
and check for any updated drivers. Run CHKDSK /F to check
for hard drive corruption, and then restart your computer.

Refer to your Getting Started manual for more information on
troubleshooting Stop errors.
_ If this is the first time you've seen this Stop error screen,
restart your computer. If this screen appears again, follow
these steps:

Run system diagnostics supplied by your hardware manufacturer.
In particular, run a memory check, and check for faulty or
mismatched memory. Try changing video adapters.

Check with your hardware vendor for any BIOS updates. Disable
BIOS memory options such as caching or shadowing. If you need
to use Safe Mode to remove or disable components, restart your
computer, press F8 to select Advanced Startup Options, and then
select Safe Mode.

Refer to your Getting Started manual for more information on
troubleshooting Stop errors.
_ If this is the first time you've seen this Stop error screen,
restart your computer. If this screen appears again, follow
these steps:

Remove any recently installed software including backup
utilities or disk-intensive applications.

If you need to use Safe Mode to remove or disable components,
restart your computer, press F8 to select Advanced Startup
Options, and then select Safe Mode.

Refer to your Getting Started manual for more information on
troubleshooting Stop errors.
_ If this is the first time you've seen this Stop error screen,
restart your computer. If this screen appears again, follow
these steps:

Check for viruses on your computer. Remove any newly installed
hard drives or hard drive controllers. Check your hard drive
to make sure it is properly configured and terminated.
Run CHKDSK /F to check for hard drive corruption, and then
restart your computer.

Refer to your Getting Started manual for more information on
troubleshooting Stop errors.
_ If this is the first time you've seen this Stop error screen,
restart your computer. If this screen appears again, follow
these steps:

Run a system diagnostic utility supplied by your hardware manufacturer.
In particular, run a memory check, and check for faulty or mismatched
memory. Try changing video adapters.

Disable or remove any newly installed hardware and drivers. Disable or
remove any newly installed software. If you need to use Safe Mode to
remove or disable components, restart your computer, press F8 to select
Advanced Startup Options, and then select Safe Mode.

Refer to your Getting Started manual for more information on
troubleshooting Stop errors.
, The video driver failed to initialize
_ Loaded driver
_ Did not load driver
_ Boot Logging Enabled
T A wait operation, attach process, or yield was attempted from a DPC routine.
H A parity error in the system memory or I/O system was detected.
( SESSION_HAS_VALID_VIEWS_ON_EXIT
T An initialization failure occurred while attempting to boot from the network.
h A duplicate IP address was assigned to this machine while attempting to
boot from the network.
X The hibernated memory image does not match the current hardware configuration.
8 An attempt was made to write to read-only memory.
_ MUTEX_ALREADY_OWNED
< An attempt to access PCI configuration space failed.
0 SPECIAL_POOL_DETECTED_MEMORY_CORRUPTION
_ BAD_POOL_CALLER
x_
A system file that is owned by Windows 2000 was replaced by an application
running on your system. The operating system detected this and tried to
verify the validity of the file's signature. The operating system found that
the file signature is not valid and put the original, correct file back
so that your operating system will continue to function properly.

A device driver attempting to corrupt the system has been caught.
The faulty driver currently on the kernel stack must be replaced
with a working version.
œ_
A device driver has corrupted the executive memory pool.

If this is the first time you've seen this Stop error screen,
restart your computer. If this screen appears again, follow
these steps:

Check to make sure any new hardware or software is properly installed.
If this is a new installation, ask your hardware or software manufacturer
for any Windows 2000 updates you might need.

Run the driver verifier against any new (or suspect) drivers.
If that doesn't reveal the corrupting driver, try enabling special pool.
Both of these features are intended to catch the corruption at an earlier
point where the offending driver can be identified.

If you need to use Safe Mode to remove or disable components,
restart your computer, press F8 to select Advanced Startup Options,
and then select Safe Mode.

Refer to your Getting Started manual for more information on
troubleshooting Stop errors.

A device driver attempting to corrupt the system has been caught.
The faulty driver currently on the kernel stack must be replaced
with a working version.

A kernel timer or DPC was found in memory which must not contain such
items. Usually this is memory being freed. This is usually caused by
a device driver that has not cleaned up properly before freeing memory.

The processor's IRQL is not valid for the currently executing context.
This is a software error condition and is usually caused by a device
driver changing IRQL and not restoring it to its previous value when
it has finished its task.

The IO manager has detected a violation by a driver that is being verified.
The faulty driver that is being verified must be debugged and
replaced with a working version.
P
Plug and Play detected an error most likely caused by a faulty driver.
, DRIVER_LEFT_LOCKED_PAGES_IN_PROCESS
Œ
The system is attempting to access memory after it has been freed.
This usually indicates a system-driver synchronization issue.

The system is attempting to access memory beyond the end of the allocation.
This usually indicates a system-driver synchronization issue.
< DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS
@ TERMINAL_SERVER_DRIVER_MADE_INCORRECT_MEMORY_REFERENCE
_
A device driver has corrupted the system memory management pool.

If this is the first time you've seen this Stop error screen,
restart your computer. If this screen appears again, follow
these steps:

Check to make sure any new hardware or software is properly installed.
If this is a new installation, ask your hardware or software manufacturer
for any Windows 2000 updates you might need.

Run the driver verifier against any new (or suspect) drivers.
If that doesn't reveal the corrupting driver, try enabling special pool.
Both of these features are intended to catch the corruption at an earlier
point where the offending driver can be identified.

If you need to use Safe Mode to remove or disable components,
restart your computer, press F8 to select Advanced Startup Options,
and then select Safe Mode.

Refer to your Getting Started manual for more information on
troubleshooting Stop errors.
$ DRIVER_IRQL_NOT_LESS_OR_EQUAL $ This driver may be at fault :
X The driver mistakenly marked a part of it's image pagable instead of nonpagable.
D The driver unloaded without cancelling pending operations.
L
The driver is attempting to access memory after it has been freed.
T
The driver is attempting to access memory beyond the end of the allocation.
H
The driver is attempting to unmap an invalid memory address.
@
The driver has used an excessive number of system PTEs.
H
The driver is corrupting the locked pages tracking structures.
0
The driver is mismanaging system PTEs.
D
A driver has corrupted the memory management system PTEs.
l
A driver accessed a stack address that lies below the current stack pointer
of the stack's thread.
,_
The BIOS in this system is not fully ACPI compliant. Please contact your
system vendor or visit http://www.hardware-update.com for an updated BIOS.
If you are unable to obtain an updated BIOS or the latest BIOS supplied by
your vendor is not ACPI compliant, you can turn off ACPI mode during text
mode setup. To do this, simply press the F7 key when you are prompted to
install storage drivers. The system will not notify you that the F7 key
was pressed - it will silently disable ACPI and allow you to continue
your installation.
T
A driver corrupted pool memory used for holding pages destined for disk.

A worker thread is impersonating another process. The work item forgot to
disable impersonation before it returned.
_
Your computer (BIOS) has reported that a component in your system is faulty and
has prevented Windows from operating. You can determine which component is
faulty by running the diagnostic disk or tool that came with your computer.

If you do not have this tool, you must contact your system vendor and report
this error message to them. They will be able to assist you in correcting this
hardware problem thereby allowing Windows to operate.
, WORKER_THREAD_RETURNED_AT_BAD_IRQL
8
The end-user manually generated the crashdump.
@
A thread tried to release a resource it did not own.

A executive worker item was found in memory which must not contain such
items. Usually this is memory being freed. This is usually caused by
a device driver that has not cleaned up properly before freeing memory.
@ Microsoft ® Windows 2000 ® Version %hs (Build %u%hs)
_ Service Pack
, %u System Processor [%u MB Memory] %Z
_ MultiProcessor Kernel
8 A kernel thread terminated while holding a mutex
0 %u System Processors [%u MB Memory] %Z

RC
_ Undocked Profile
_ Docked Profile
_ Profile


ndSigInSDTPhysAddrList: Invalid parameters passed.
NetaFindSigInSDTPhysAddrList: no of address for table %s = %d.
NetaFindSigInSDTPhysAddrList: Reading physical address 0x%08X of table %s NetaFindSigInSDTPhysAddrList: Found signature %s.
NetaFindSigInSDTPhysAddrList: NetaReadPhysMemory failed...




sWaitEvent NdisMCancelTimer __NdisResetEvent NdisMSleep NdisMFreeSharedMemory t NdisFreeMemory &_NdisWriteErrorLogEntry NdisMAllocateSharedMemory * NdisAllocateMemoryWithTag % NdisAdjustBufferLength __NdisUnchainBufferAtFront x NdisFreeSpinLock NdisMUnmapIoSpace NdisMDeregisterIoPortRange NdisMFreeMapRegisters NdisMDeregisterInterrupt NdisMDeregisterAdapterShutdownHandler NdisMAllocateMapRegisters NdisMRegisterAdapterShutdownHandler NdisMRegisterInterrupt NdisMRegisterIoPortRange NdisMMapIoSpace NdisMInitializeTimer NdisMSetAttributesEx › NdisInitializeEvent / NdisAllocateSpinLock NdisMRegisterMiniport NdisInitializeWrapper u NdisFreePacket q NdisFreeBuffer & NdisAllocateBuffer + NdisAllocatePacket ' NdisAllocateBufferPool , NdisAllocatePacketPool v NdisFreePacketPool r NdisFreeBufferPool NdisQueryBuffer " NDIS_BUFFER_TO_SPAN_PAGES NdisQueryBufferOffset @ NdisCloseConfiguration __NdisReadNetworkAddress NdisReadConfiguration NdisOpenConfiguration (_NdisWritePciSlotInformation __NdisReadPciSlotInformation NdisMPciAssignResources NdisMQueryAdapterResources NdisMCompleteBufferPhysicalMapping NdisMStartBufferPhysicalMapping NDIS.SYS _ _ €( €
@ €_ X € _ €p € _ _ ˆ € _ _ € _ _ _ _ _ _ __ D_
_ _
_ (_ _ M O F D A T A _ N D I S M O F R E S O U R C E _ _ _ X _ _@_ _@„ _ _@_ _@ _ _€_ _€ _ _€_ _€__ _ __ _,_ _ __ _X_ , %2 : This is an SUCCESS test message.
4 %2 : This is an INFORMATIONAL test message.
$ Adapter %2: Adapter Link Up
, %2 : This is an WARNING test message.
$ Adapter %2: Adapter Link Down
, %2 : This is an ERROR test message.
, Adapter %2: Hardware failure detected
0 Adapter %2: EEprom corruption detected





Scan could not open file C:\WINNT\SYSTEM32\CONFIG\SYSTEM.ALT

BC AdBot (Login to Remove)

 


#2 limosforu

limosforu
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:03:00 AM

Posted 05 June 2006 - 05:25 PM

In reference to trying to figure out how to analyze the memory dump, I followed the instructions on this page, http://forums.majorgeeks.com/showthread.php?t=35246 , but the bug analyze didn't say, "Probably caused by......."

Therefore, I continued on with the other step that it suggested on that same link, and when I typed in the command to go further in depth, it wouldnt go because I had no kd folder. Hmmmmm. I know what you're going to say....why don't I just format and re-install...well, I have already suggested that to my boss and he doesn't want to.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users