Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

XP crash win32k.sys


  • Please log in to reply
9 replies to this topic

#1 XPired

XPired

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NY NY
  • Local time:07:08 PM

Posted 29 November 2008 - 08:38 AM

Hi all,

I'm here for the first time. Just a bit about me: I'm a geneticist by training and teach students and teachers molecular biology. I have been a Windows XP user for a long time, but am not a computer type.

I am experiencing multiple crashes and recoveries from serious errors randomly on a:

Powerspec B700 Intel Core 2 Quad Q6600 @2.40 GHz running Windows XP Pro SP3 (fully updated).

This system is 3 months old. The vendor has terrible support and I would like to know the source of my crashes, as this may help me support the support (or assure me that the problem is not to do with them), or simply fix it! Any help is greatly appreciated.

I have done this as suggested by Majorgeeks:

Suspicious of Malware, I checked Add/Remove Programs and found nothing that I did not recognize.
I updated Java in case it was messed up.
I set the system to normal startup through MSconfig
I ran CCleaner (default options) on the different user accounts
I ran SuperAntiSpyware
then
Spybot Search and Destroy
and
Malwarebytes Anti-Malware
followed by MGtools.exe

Result: none detected.

So, I'm guessing the problem lies in Windows, or is due to my hardware or the bad electrical system in an old building in New York (brownout) City.

In any case, I have downloaded the Windows debugger and used it to analyze the minidump from my last happy crash...

I hope this is the sort of information that you would need to help me.

Thanks to anyone able to help or give advice...

:thumbsup:

The debugger data:


Microsoft ® Windows Debugger Version 6.10.0003.233 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini112808-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_gdr.080814-1236
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Fri Nov 28 16:00:23.781 2008 (GMT-5)
System Uptime: 0 days 1:25:56.360
Loading Kernel Symbols
...............................................................
.............................................................
Loading User Symbols
Loading unloaded module list
.........................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, bf816ac5, b54a6a78, 0}

Probably caused by : win32k.sys ( win32k!xxxInternalDoPaint+18 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: bf816ac5, The address that the exception occurred at
Arg3: b54a6a78, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
win32k!xxxInternalDoPaint+18
bf816ac5 397e08 cmp dword ptr [esi+8],edi

TRAP_FRAME: b54a6a78 -- (.trap 0xffffffffb54a6a78)
ErrCode = 00000000
eax=00019000 ebx=e3b2a008 ecx=000025ff edx=00000000 esi=00019000 edi=e3b2a008
eip=bf816ac5 esp=b54a6aec ebp=b54a6b00 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
win32k!xxxInternalDoPaint+0x18:
bf816ac5 397e08 cmp dword ptr [esi+8],edi ds:0023:00019008=????????
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: explorer.exe

LAST_CONTROL_TRANSFER: from bf816aa6 to bf816ac5

STACK_TEXT:
b54a6b00 bf816aa6 00019000 e3b2a008 e3b2a008 win32k!xxxInternalDoPaint+0x18
b54a6b24 bf816aa6 bc630508 e3b2a008 e3b2a008 win32k!xxxInternalDoPaint+0x68
b54a6b48 bf816aa6 bc6304d0 e3b2a008 e3b2a008 win32k!xxxInternalDoPaint+0x68
b54a6b6c bf816aa6 bc630498 e3b2a008 e3b2a008 win32k!xxxInternalDoPaint+0x68
b54a6b90 bf816aa6 bc630460 e3b2a008 e3b2a008 win32k!xxxInternalDoPaint+0x68
b54a6bb4 bf816aa6 bc630428 e3b2a008 e3b2a008 win32k!xxxInternalDoPaint+0x68
b54a6bd8 bf816aa6 bc6303f0 e3b2a008 e3b2a008 win32k!xxxInternalDoPaint+0x68
b54a6bfc bf816aa6 bc6303b8 e3b2a008 e3b2a008 win32k!xxxInternalDoPaint+0x68
b54a6c20 bf816aa6 bc630358 e3b2a008 e3b2a008 win32k!xxxInternalDoPaint+0x68
b54a6c44 bf816aa6 bc6b2620 e3b2a008 e3b2a008 win32k!xxxInternalDoPaint+0x68
b54a6c68 bf816aa6 bc663628 e3b2a008 00000220 win32k!xxxInternalDoPaint+0x68
b54a6c8c bf816ba5 bc6606e8 e3b2a008 00000220 win32k!xxxInternalDoPaint+0x68
b54a6ca8 bf801a75 00000000 b54a6d14 b54a6d64 win32k!xxxDoPaint+0x66
b54a6ce8 bf80366c b54a6d14 000025ff 00000000 win32k!xxxRealInternalGetMessage+0x39a
b54a6d48 8054162c 00eeff28 00000000 00000000 win32k!NtUserPeekMessage+0x40
b54a6d48 7c90e4f4 00eeff28 00000000 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
00eefed4 00000000 00000000 00000000 00000000 0x7c90e4f4


STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!xxxInternalDoPaint+18
bf816ac5 397e08 cmp dword ptr [esi+8],edi

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: win32k!xxxInternalDoPaint+18

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 48ce513a

FAILURE_BUCKET_ID: 0x8E_win32k!xxxInternalDoPaint+18

BUCKET_ID: 0x8E_win32k!xxxInternalDoPaint+18

Followup: MachineOwner
---------

BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,089 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:08:08 PM

Posted 29 November 2008 - 09:59 AM

Unfortunately, this is a very common error message - and the dump file doesn't give much in the way of concrete information.

So, my first question would be to ask what's been done to the computer since you got it? Any new hardware or software installed recently? Any updates or tweaking done to the system recently? Anything else that may have happened that caught your attention?

Have you checked your Event Viewer for error messages around the time (or just before) of the crash? To do this, go to Start...Run...and type in "eventvwr.msc" (without the quotes) and press Enter.

Click on the Application log file and check there, then on the System log file and check there. Double click on any errors that you may find and let us know the text of the error message(s) in your next post.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 XPired

XPired
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NY NY
  • Local time:07:08 PM

Posted 29 November 2008 - 10:33 AM

John,

Thank you for looking at this.

Things that I have done to the system:

I installed SP3 and did all critical updates. I did this when I got the computer (it came with SP2 installed).

One possible source of trouble: I uninstalled a trial version of Office 2007 that came bundled on the computer. I couldn't get rid of the Activation assistant that comes with it. I understand that this has to be uninstalled before the Microsoft Office Suite trial version is uninstalled...

Following advice in one of your tutorials, I also ran sfc / scannow just now and it says my system files have been changed. I didn't do anything, as my system did not come with an XP SP3 disk and I'm not sure if this approach is a good one, anyway.

I also installed two Western digital hard drives that I had already. They are both under a year old and not heavily used. This required that I install a Ultra ATA133 card (Siig 2channel). I worry that these suckers are pushing my power supply over the limit, but don't really know where to start checking that kind of thing (or if this is likely).

What else have I done while "flailing around?". I have run RegCleaner and let it fix things.

Firefox has been crashing like a crazy fox. I therefore followed advice about uninstalling and reinstalling flash to deal with npswf32.dll errors.

Here are a few errors from the last 24 hours. These were associated with a variety of crashes (some at startup, some while running programs, one when plugging a thumb drive in, and some while doing the dishes in the next room). I'm afraid I have not kept track of what happened when, but see that I have to do something about this!

System errors:

Generate Activation Context failed for C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\FBIBLIO.DLL. Reference error message: The operation completed successfully.

Resolve Partial Assembly failed for Microsoft.VC80.MFC. Reference error message: The referenced assembly is not installed on your system.

Dependent Assembly Microsoft.VC80.MFC could not be found and Last Error was The referenced assembly is not installed on your system.

Generate Activation Context failed for C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\FBIBLIO.DLL. Reference error message: The operation completed successfully.

Resolve Partial Assembly failed for Microsoft.VC80.MFC. Reference error message: The referenced assembly is not installed on your system.

Dependent Assembly Microsoft.VC80.MFC could not be found and Last Error was The referenced assembly is not installed on your system.

The Shell Hardware Detection service terminated unexpectedly. It has done this 1 time(s).

The Task Scheduler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 6000 milliseconds: Restart the service.

The DHCP Client service terminated unexpectedly. It has done this 1 time(s).

The Windows Image Acquisition (WIA) service hung on starting.

The Automatic Updates service failed to start due to the following error:
The pipe state is invalid.

The Automatic Updates service failed to start due to the following error:
The pipe state is invalid.

The Windows Time service failed to start due to the following error:
The pipe state is invalid.

The Distributed Link Tracking Client service failed to start due to the following error:
The pipe state is invalid.

Application errors:

Faulting application boc427.exe, version 4.2.7.1, faulting module boc427.exe, version 4.2.7.1, fault address 0x00019ab3.

Faulting application winlogon.exe, version 0.0.0.0, faulting module unknown, version 0.0.0.0, fault address 0x14cfc4e3.

Faulting application , version 0.0.0.0, faulting module unknown, version 0.0.0.0, fault address 0x14cfc4e3.

Faulting application svchost.exe, version 5.1.2600.5512, faulting module schedsvc.dll, version 5.1.2600.5512, fault address 0x00006f5c.

Faulting application services.exe, version 5.1.2600.5512, faulting module msvcrt.dll, version 7.0.2600.5512, fault address 0x00037fd4.

Faulting application firefox.exe, version 1.8.20081.2918, faulting module npswf32.dll, version 10.0.12.36, fault address 0x00083a31.

Faulting application firefox.exe, version 1.8.20081.2918, faulting module xpcom_core.dll, version 1.8.20081.2918, fault address 0x0000180a.

Thanks for staring into my system errors...
Bruce

#4 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,089 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:08:08 PM

Posted 29 November 2008 - 11:33 AM

What sort of security software do you have installed? I noted a reference to Comodo BOClean - and wonder if there's another program managing your firewall settings.

I'd also suggest reading this article to assist with cleaning up Office 2007: http://support.microsoft.com/kb/928218/
CAVEAT - do not try to uninstall Office 2007 with the Microsoft Windows Installer Cleanup utility - it has known issues with Office 2007

I'm also wondering if chkdsk /r would shed some light on this - or a check to see if this behavior exists in other profiles.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#5 hamluis

hamluis

    Moderator


  • Moderator
  • 55,235 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:08 PM

Posted 29 November 2008 - 11:44 AM

Worth a look, http://www.techsupportforum.com/microsoft-...t-vc80-mfc.html

http://www.microsoft.com/technet/prodtechn...8.mspx?mfr=true

http://www.runscanner.net/filelibrary/BOC427.EXE.html

http://support.mozilla.com/tiki-view_forum..._parentId=14599

http://www.mydigitallife.info/2008/08/18/r...nstalled-error/

You cannot run sfc /scannow with a CD that is not through SP3...if your system is at SP3 level. Going to SP3 from whatever is on the CD that you attempted to use...should elicit some type of error message/refusal to run.

Some program that you are running...is causing all those weird assembly errors. My suggestion would be to eliminate that program...or install http://www.microsoft.com/Downloads/details...;displaylang=en

RegCleaner may be responsible for some of your situations...especially if you don't know what entries are being removed.

I would suggest a repair install (using a slipstreamed XP thru SP3 CD...made using a Microsoft XP CD) and discontinuing usage of RegCleaner. I would do this after taking care of other known existing issues.

How to perform a repair installation of Windows XP if Internet Explorer 7 is installed - http://support.microsoft.com/?kbid=917964

How to Perform a Windows XP Repair Install (Stevens) - http://www.michaelstevenstech.com/XPrepairinstall.htm

Louis

Edited by hamluis, 29 November 2008 - 11:58 AM.


#6 XPired

XPired
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NY NY
  • Local time:07:08 PM

Posted 29 November 2008 - 11:55 AM

Hi John,

I have Avast version 4.8.1296 (up to date) and Comodo BoClean (updated today). This was a recommended combination at the time I set it up.

I have, in fact, cleaned up after Office 2007. I worry that I may have caused trouble while doing so- especially in the Registry. Sorry, I forgot that I did that.

The other user has a similar set of symptoms.

Bruce

P.S. I don't have the knack, just a lack of social skills...

#7 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,089 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:08:08 PM

Posted 29 November 2008 - 12:30 PM

Along with hamluis' suggestions, could you let us know what size PSU you do have? I'm not real good with PSU issues - but underpowering a system can cause all sorts of issues.

Can you post an analysis of some of the other dump files? That may give some clues or show a pattern of issues that can help to lead us to a solution.

The first 3 or 4 system errors seem to relate to Office - so I wonder if they, in concert with RegClean, have somehow damaged your system. Hamluis mentioned the C++ Redistributable - is this installed on your system already? You can check it in Add/Remove Programs as long as you check the "Show updates" box near the top.

Did you have to install drivers for the Siig card? And, did you use the enclosed CD for that purpose? If so, I'd suggest checking the Siig website for updated drivers. I'm just poking around here using the assumption that this is a lower than usual corruption - likely something unstable in the boot or system start drivers (although it could be an issue with Windows.

Can you try reinstalling the trial version of Office 2007 to see if that helps?

As the STOP 0x8e errors can be BIOS related - could you please provide us with the BIOS version that you're using? You can find this out by reading it from the first screen as the system boots.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#8 XPired

XPired
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NY NY
  • Local time:07:08 PM

Posted 29 November 2008 - 03:36 PM

Have installed the C++ package.

I had previously done the Adobe uninstall and reinstall with no resolution of Firefox crashes.

I promise not to touch Regcleaner again. Registry Booster did not find any issues related to Commodo that I could find. It did report a bucket of issues, though (around 600). Are these something that you would want to look at?


BIOS Version/Date American Megatrends Inc. 080015, 6/20/2008


I have reinstalled Microsoft Office 2007 trial version. In fact, during this process, my fine computer decided to quit and restart.

Here is the minidump from that event. I could not find any other minidumps. (Searched for *.dmp).


Microsoft ® Windows Debugger Version 6.10.0003.233 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini112908-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_gdr.080814-1236
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Sat Nov 29 14:32:32.093 2008 (GMT-5)
System Uptime: 0 days 2:15:26.671
Loading Kernel Symbols
...............................................................
.............................................................
Loading User Symbols
Loading unloaded module list
........................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, cd4, ffffffff, ba562be0}

*** WARNING: Unable to verify timestamp for aswMon2.SYS
*** ERROR: Module load completed but symbols could not be loaded for aswMon2.SYS
GetUlongFromAddress: unable to read from 80565d50
*** WARNING: Unable to verify timestamp for aswRdr.SYS
*** ERROR: Module load completed but symbols could not be loaded for aswRdr.SYS
*** WARNING: Unable to verify timestamp for tmcomm.sys
*** ERROR: Module load completed but symbols could not be loaded for tmcomm.sys
*** WARNING: Unable to verify timestamp for CVPNDRVA.sys
*** ERROR: Module load completed but symbols could not be loaded for CVPNDRVA.sys
*** WARNING: Unable to verify timestamp for LV561AV.SYS
*** ERROR: Module load completed but symbols could not be loaded for LV561AV.SYS
*** WARNING: Unable to verify timestamp for aswSP.SYS
*** ERROR: Module load completed but symbols could not be loaded for aswSP.SYS
*** WARNING: Unable to verify timestamp for RtkHDAud.sys
*** ERROR: Module load completed but symbols could not be loaded for RtkHDAud.sys
*** WARNING: Unable to verify timestamp for dne2000.sys
*** ERROR: Module load completed but symbols could not be loaded for dne2000.sys
*** WARNING: Unable to verify timestamp for nv4_mini.sys
*** ERROR: Module load completed but symbols could not be loaded for nv4_mini.sys
*** WARNING: Unable to verify timestamp for Rtenicxp.sys
*** ERROR: Module load completed but symbols could not be loaded for Rtenicxp.sys
*** WARNING: Unable to verify timestamp for HDAudBus.sys
*** ERROR: Module load completed but symbols could not be loaded for HDAudBus.sys
*** WARNING: Unable to verify timestamp for WudfPf.sys
*** ERROR: Module load completed but symbols could not be loaded for WudfPf.sys
*** WARNING: Unable to verify timestamp for nvgts.sys
*** ERROR: Module load completed but symbols could not be loaded for nvgts.sys
*** WARNING: Unable to verify timestamp for nvrd32.sys
*** ERROR: Module load completed but symbols could not be loaded for nvrd32.sys
*** WARNING: Unable to verify timestamp for pnp680.sys
*** ERROR: Module load completed but symbols could not be loaded for pnp680.sys
*** WARNING: Unable to verify timestamp for drmk.sys
*** ERROR: Module load completed but symbols could not be loaded for drmk.sys
*** WARNING: Unable to verify timestamp for aswTdi.SYS
*** ERROR: Module load completed but symbols could not be loaded for aswTdi.SYS
*** WARNING: Unable to verify timestamp for LVUSBSta.sys
*** ERROR: Module load completed but symbols could not be loaded for LVUSBSta.sys
*** WARNING: Unable to verify timestamp for SMBios.sys
*** ERROR: Module load completed but symbols could not be loaded for SMBios.sys
*** WARNING: Unable to verify timestamp for pavboot.sys
*** ERROR: Module load completed but symbols could not be loaded for pavboot.sys
*** WARNING: Unable to verify timestamp for aswFsBlk.sys
*** ERROR: Module load completed but symbols could not be loaded for aswFsBlk.sys
*** WARNING: Unable to verify timestamp for Aavmker4.SYS
*** ERROR: Module load completed but symbols could not be loaded for Aavmker4.SYS
*** WARNING: Unable to verify timestamp for LVPr2Mon.sys
*** ERROR: Module load completed but symbols could not be loaded for LVPr2Mon.sys
*** WARNING: Unable to verify timestamp for BOCDRIVE.sys
*** ERROR: Module load completed but symbols could not be loaded for BOCDRIVE.sys
*** WARNING: Unable to verify timestamp for GEARAspiWDM.sys
*** ERROR: Module load completed but symbols could not be loaded for GEARAspiWDM.sys
*** WARNING: Unable to verify timestamp for nv4_disp.dll
*** ERROR: Module load completed but symbols could not be loaded for nv4_disp.dll
Probably caused by : aswMon2.SYS ( aswMon2+6850 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000cd4, (reserved)
Arg3: ffffffff, Memory contents of the pool block
Arg4: ba562be0, Address of the block of pool being deallocated

Debugging Details:
------------------

GetUlongFromAddress: unable to read from 80565d50

POOL_ADDRESS: ba562be0

BUGCHECK_STR: 0xc2_7

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: System

LAST_CONTROL_TRANSFER: from 8054b583 to 804f9f43

STACK_TEXT:
bad23a0c 8054b583 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b
bad23a5c ba5cf661 ba562be0 00000000 bad23a88 nt!ExFreePoolWithTag+0x2a3
bad23a6c ba608198 ba562be0 e4a4f8a8 e4a4f970 Ntfs!NtfsFreeScbAttributeName+0x2d
bad23a88 ba5f0e30 89022910 bad20703 e4a4f8d8 Ntfs!NtfsDeleteScb+0x19e
bad23aa0 ba5cb7f4 89022910 e4a4f970 00000000 Ntfs!NtfsRemoveScb+0x88
bad23abc ba5f0c17 89022910 e4a4f8a8 00000000 Ntfs!NtfsPrepareFcbForRemoval+0x52
bad23b04 ba5cb7a4 89022910 e4a4f970 00000000 Ntfs!NtfsTeardownStructures+0x5b
bad23b30 ba5ee6b5 89022910 00a4f970 00000000 Ntfs!NtfsDecrementCloseCounts+0x9e
bad23bb4 ba5ee454 89022910 e4a4f970 e4a4f8a8 Ntfs!NtfsCommonClose+0x398
bad23c54 804ef19f 8a2b75b8 88a74840 8a3a6318 Ntfs!NtfsFsdClose+0x21f
bad23c64 ba680459 bad23ca8 804ef19f 8a08eda0 nt!IopfCallDriver+0x31
bad23c6c 804ef19f 8a08eda0 88a74840 88a74840 sr!SrPassThrough+0x31
bad23c7c ba69609e 88a74840 8a3da450 88a749f4 nt!IopfCallDriver+0x31
bad23ca8 804ef19f 89fffaf8 88a74840 00000000 fltmgr!FltpDispatch+0x152
bad23cb8 b4519850 88a74850 89dc2b10 88d31038 nt!IopfCallDriver+0x31
WARNING: Stack unwind information not available. Following frames may be wrong.
bad23cdc b451383c 89ff3c68 00a74840 804ef19f aswMon2+0x6850
bad23d30 805bb472 00d31038 00000000 88d31020 aswMon2+0x83c
bad23d4c 805266da 88d31038 00000000 00000000 nt!ObpRemoveObjectRoutine+0xe0
bad23d64 8050a89a 806e6aa8 88e54a48 80561db4 nt!ObfDereferenceObject+0x4c
bad23d8c 8050c0d9 e4c89980 00000000 8a3efda8 nt!MiSegmentDelete+0xec
bad23dac 805cff70 00000000 00000000 00000000 nt!MiDereferenceSegmentThread+0xa7
bad23ddc 805460ee 8050c032 00000000 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
aswMon2+6850
b4519850 ?? ???

SYMBOL_STACK_INDEX: f

SYMBOL_NAME: aswMon2+6850

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: aswMon2

IMAGE_NAME: aswMon2.SYS

DEBUG_FLR_IMAGE_TIMESTAMP: 492aee38

FAILURE_BUCKET_ID: 0xc2_7_aswMon2+6850

BUCKET_ID: 0xc2_7_aswMon2+6850

Followup: MachineOwner
---------

I hope this gives us (you) a clue. I'm sure I will remain clueless.

In the meantime, I will search for newer Siig drivers; mine are on a cd that I used when installing the card.

Thanks again, and sorry for the delay. I'm sure someone has kept you busy.

Bruce

#9 XPired

XPired
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NY NY
  • Local time:07:08 PM

Posted 29 November 2008 - 03:57 PM

One more thing:

My computer came with Windows XP SP2 installed, but not with a CD. There is a partition set aside for recovery and I made a recovery disk according to the instructions. I do have Windows XP SP2 on my own media (with a valid licence). Can I slipstream using my cd and use this for a system repair? I have never done anything like that and would not want to go in blind.

Thanks,

Bruce

#10 hamluis

hamluis

    Moderator


  • Moderator
  • 55,235 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:08 PM

Posted 29 November 2008 - 06:57 PM

As long as the versions are the same (Home for Home, Pro for Pro), anyone can slipstream a CD using any version of the MS XP CDs. Note that I said Microsoft XP CDs, not restore disks, not disks issued by a boxmaker.

When installing from the slipstreamed CD, just use the key which came with your legal, installed version of XP (no need to use the other). Doing this just relieves you from being hamstrung by recovery CDs, partitions, etc.

nLite is an excellent tool for slipstreaming SP3 into either XP SP1 or XP SP2 CDs.

nLite - Deployment Tool for Unattended Windows - Guide - http://www.nliteos.com/guide/index.html

Louis




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users