Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows Vista Crashes (itunes, firefox) on my new hardware


  • Please log in to reply
No replies to this topic

#1 ultralame

ultralame

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:11:48 AM

Posted 18 July 2009 - 02:13 PM

I have a windows Vista Business machine that is killing me. It is continuously plagued by program and system crashes. i have tried various things, and reinstalled 3X. We mainly use this PC for iTunes and FireFox. At the moment, I don't have very much installed, and it's still crashing. Most often we get FF program crashes that prevent FF from running again without a reboot and system crashes. When I run the debugger, the dump file points to iTunes.

I have installed the latest video, sound, network drivers. I ran the windows memory checker tool. No issues that I can find.

I will include 2 sets of output from WinDbg, one that blames iTunes and one that seems to be a system problem. But I can't figure out what driver caused the issue.

Thanks for any help

System Dump:
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\Mini071009-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18226.x86fre.vistasp1_gdr.090302-1506
Machine Name:
Kernel base = 0x81a3b000 PsLoadedModuleList = 0x81b52c70
Debug session time: Fri Jul 10 10:54:33.335 2009 (GMT-7)
System Uptime: 0 days 14:05:35.874
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
................................
*******************************************************************************
*																			 *
*						Bugcheck Analysis									*
*																			 *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {3403c044, 2, 1, 8d3f0346}

Unable to load image \SystemRoot\system32\DRIVERS\Rtlh86.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Rtlh86.sys
*** ERROR: Module load completed but symbols could not be loaded for Rtlh86.sys
Probably caused by : Rtlh86.sys ( Rtlh86+9346 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*																			 *
*						Bugcheck Analysis									*
*																			 *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 3403c044, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 8d3f0346, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from 81b72868
Unable to read MiSystemVaType memory at 81b52420
 3403c044 

CURRENT_IRQL:  2

FAULTING_IP: 
Rtlh86+9346
8d3f0346 ??			  ???

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  81b30bac -- (.trap 0xffffffff81b30bac)
ErrCode = 00000002
eax=862f90cc ebx=862f90b8 ecx=864327c0 edx=3403c040 esi=862f9000 edi=869be0a8
eip=8d3f0346 esp=81b30c20 ebp=81b30c84 iopl=0		 nv up ei pl nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000			 efl=00010206
Rtlh86+0x9346:
8d3f0346 ??			  ???
Resetting default scope

LAST_CONTROL_TRANSFER:  from 8d3f0346 to 81a95d24

STACK_TEXT:  
81b30bac 8d3f0346 badb0d00 3403c040 000000aa nt!KiTrap0E+0x2ac
WARNING: Stack unwind information not available. Following frames may be wrong.
81b30c1c 00000000 862f9522 862f9000 81b30c30 Rtlh86+0x9346


STACK_COMMAND:  kb

FOLLOWUP_IP: 
Rtlh86+9346
8d3f0346 ??			  ???

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  Rtlh86+9346

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Rtlh86

IMAGE_NAME:  Rtlh86.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  467f5493

FAILURE_BUCKET_ID:  0xD1_Rtlh86+9346

BUCKET_ID:  0xD1_Rtlh86+9346

Followup: MachineOwner
---------


iTunes Dump:
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\Mini071509-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18226.x86fre.vistasp1_gdr.090302-1506
Machine Name:
Kernel base = 0x81a38000 PsLoadedModuleList = 0x81b4fc70
Debug session time: Wed Jul 15 19:37:56.690 2009 (GMT-7)
System Uptime: 0 days 16:29:50.939
Loading Kernel Symbols
...............................................................
................................................................
......................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
*																			 *
*						Bugcheck Analysis									*
*																			 *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, 81b251c5, 9d5b9b54, 0}

Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+1c0 )

Followup: Pool_corruption
---------

1: kd> !analyze -v
*******************************************************************************
*																			 *
*						Bugcheck Analysis									*
*																			 *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 81b251c5, The address that the exception occurred at
Arg3: 9d5b9b54, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExDeferredFreePool+1c0
81b251c5 897304		  mov	 dword ptr [ebx+4],esi

TRAP_FRAME:  9d5b9b54 -- (.trap 0xffffffff9d5b9b54)
ErrCode = 00000002
eax=a0d7fc38 ebx=000004c0 ecx=000001ff edx=00000003 esi=8dd75b80 edi=8363909c
eip=81b251c5 esp=9d5b9bc8 ebp=9d5b9c00 iopl=0		 nv up ei ng nz ac pe cy
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000			 efl=00010297
nt!ExDeferredFreePool+0x1c0:
81b251c5 897304		  mov	 dword ptr [ebx+4],esi ds:0023:000004c4=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  2

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x8E

PROCESS_NAME:  iTunes.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 81b266e0 to 81b251c5

STACK_TEXT:  
9d5b9c00 81b266e0 8363909c 00000001 80d56708 nt!ExDeferredFreePool+0x1c0
9d5b9c68 81c7c78d a7c4bc78 e56b6f54 00000000 nt!ExFreePoolWithTag+0x852
9d5b9c90 81c7c5ef 81a0c110 a7c4bc88 00000000 nt!ObpFreeObject+0x192
9d5b9ca8 81a898c9 a7c4bca0 00000000 9b29caf8 nt!ObpRemoveObjectRoutine+0x145
9d5b9cd0 81c554ca 9db63838 9b29caf8 00001854 nt!ObfDereferenceObject+0xa1
9d5b9d14 81c556c0 9db63838 c88630a8 9b29c020 nt!ObpCloseHandleTableEntry+0x24e
9d5b9d44 81c558e5 9b29c020 9b29ca01 9b29ca01 nt!ObpCloseHandle+0x73
9d5b9d58 81a8fa1a 00001854 001ef45c 774d9a94 nt!NtClose+0x20
9d5b9d58 774d9a94 00001854 001ef45c 774d9a94 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
001ef45c 00000000 00000000 00000000 00000000 0x774d9a94


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExDeferredFreePool+1c0
81b251c5 897304		  mov	 dword ptr [ebx+4],esi

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExDeferredFreePool+1c0

FOLLOWUP_NAME:  Pool_corruption

IMAGE_NAME:  Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID:  0x8E_nt!ExDeferredFreePool+1c0

BUCKET_ID:  0x8E_nt!ExDeferredFreePool+1c0

Followup: Pool_corruption
---------


BC AdBot (Login to Remove)

 


m



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users