Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


BSOD Vista 64 how to determine case

  • Please log in to reply
1 reply to this topic

#1 edfarley


  • Members
  • 2 posts
  • Local time:02:12 PM

Posted 20 August 2009 - 02:32 PM

Recently purchased HP DV5 1250 US laptop. Recently started experiencing BSOD after registering Cyberlink products included on computer. But also had installed Network Magic (Cisco) and Rhapsody. Did go back and do a restore point pre the Cyberlink but it didn't fix. Have installed debugger and done memory dump (see below)
Wife is to take laptop on trip and need to resolve. Thanks

New to the forum but found someone earlier with BSOD issues.
I wasn't sure if I should attach the file or paste...so pasted (if in the future I should add file please let me know

MEM DUMP FILE>(a placed a copy in my folders so I could easily track them)
The machine can work for a few minutes to almost an hour...and then BSOD

Microsoft ® Windows Debugger Version 6.11.0001.404 AMD64
Copyright © Microsoft Corporation. All rights reserLoading Dump File [C:\Users\Gayle\Documents\dumps\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18005.amd64fre.lh_sp2rtm.090410-1830
Machine Name:
Kernel base = 0xfffff800`01c16000 PsLoadedModuleList = 0xfffff800`01ddadd0
Debug session time: Thu Aug 20 11:36:00.355 2009 (GMT-7)
System Uptime: 0 days 0:01:44.321
Loading Kernel Symbols
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
Loading unloaded module list
* *
* Bugcheck Analysis *
* *

Use !analyze -v to get detailed debugging information.
BugCheck 27, {baad0075, fffffa6018df9d38, fffffa6018df9710, fffffa6015345fee}

*** ERROR: Symbol file could not be found. Defaulted to export symbols for mfehidk.sys -
Page 93243 not present in the dump file. Type ".hh dbgerr004" for details
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
Probably caused by : rdbss.sys ( rdbss!RxCommonCreate+30a )

Followup: MachineOwner

1: kd> !analyze -v
* *
* Bugcheck Analysis *
* *

If you see RxExceptionFilter on the stack then the 2nd and 3rd parameters are the
exception record and context record. Do a .cxr on the 3rd parameter and then kb to
obtain a more informative stack trace.
The high 16 bits of the first parameter is the RDBSS bugcheck code, which is defined
as follows:
Arg1: 00000000baad0075
Arg2: fffffa6018df9d38
Arg3: fffffa6018df9710
Arg4: fffffa6015345fee

Debugging Details:

Page 93243 not present in the dump file. Type ".hh dbgerr004" for details
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details


EXCEPTION_RECORD: fffffa6018df9d38 -- (.exr 0xfffffa6018df9d38)
ExceptionAddress: fffffa6015345fee (rdbss!RxCommonCreate+0x000000000000030a)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 0000000000000010
Attempt to read from address 0000000000000010

CONTEXT: fffffa6018df9710 -- (.cxr 0xfffffa6018df9710)
rax=0000000000000000 rbx=00000000c0000016 rcx=0000000000000000
rdx=fffff80001da9a80 rsi=fffffa80080223d0 rdi=fffffa8007adc9a0
rip=fffffa6015345fee rsp=fffffa6018df9f70 rbp=fffffa601533c110
r8=0000000000000008 r9=fffffa8008702060 r10=0000000000000008
r11=fffffa8004214f10 r12=0000000000000001 r13=fffffa8007dca404
r14=fffffa6015339920 r15=fffffa8008022428
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
fffffa60`15345fee 488b4810 mov rcx,qword ptr [rax+10h] ds:002b:00000000`00000010=????????????????
Resetting default scope
PROCESS_NAME: nmsrvc.exe
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 0000000000000010
READ_ADDRESS: 0000000000000010
fffffa60`15345fee 488b4810 mov rcx,qword ptr [rax+10h]
fffffa60`15345fee 488b4810 mov rcx,qword ptr [rax+10h]
LAST_CONTROL_TRANSFER: from fffffa60153221f6 to fffffa6015345fee
fffffa60`18df9f70 fffffa60`153221f6 : fffffa80`07adc9a0 fffffa80`07dca4b0 00000000`00000000 fffffa80`07dca5c8 : rdbss!RxCommonCreate+0x30a
fffffa60`18dfa030 fffffa60`1534368a : fffffa80`07dca4b0 fffffa80`07ad6600 00000000`00000000 fffffa80`07ad6610 : rdbss!RxFsdCommonDispatch+0x786
fffffa60`18dfa120 fffffa60`16e1b2cf : fffffa80`07dca4b0 fffffa60`016b6110 fffffa80`07dca5c8 fffffa80`07ad6610 : rdbss!RxFsdDispatch+0x21a
fffffa60`18dfa190 fffffa60`016b85f9 : 00000000`00000000 fffffa80`07dca4b0 fffffa80`08022130 fffff880`000810e0 : mrxsmb!MRxSmbFsdDispatch+0xbf
fffffa60`18dfa1d0 fffffa60`016b8130 : fffff880`000810e0 fffffa80`0423e700 00000000`00000001 fffffa80`07dca4b0 : mup!MupiCallUncProvider+0x159
fffffa60`18dfa240 fffffa60`016b90ef : fffffa80`07dca658 fffffa80`07dca4b0 fffffa80`08022130 00000000`00000000 : mup!MupStateMachine+0x120
fffffa60`18dfa290 fffffa60`012e9e91 : fffffa80`050e0010 fffffa80`07dca4b0 fffffa80`08022300 fffffa80`08022130 : mup!MupCreate+0x2c3
fffffa60`18dfa310 fffffa60`0130626c : fffffa80`0514cde0 fffffa80`050e0010 fffffa80`07dca400 fffffa60`18dfa3d0 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x211
fffffa60`18dfa380 fffffa60`153c773a : fffffa80`07dca4b0 fffffa80`04232660 fffffa80`042326e8 00000000`00000000 : fltmgr!FltpCreate+0x25d
fffffa60`18dfa430 fffffa60`153aacd8 : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`0000000b : mfehidk!DEVICEDISPATCH::LowerDispatchPassThrough+0x92
fffffa60`18dfa4d0 fffffa60`153ab5c9 : 00000000`00000801 00000000`e56c6901 fffffa80`07dca4b0 00000000`00000004 : mfehidk+0x9cd8
fffffa60`18dfa550 fffffa60`153c6185 : 00000000`cccccccc 00000000`00000000 00000000`00000040 00000000`00000000 : mfehidk+0xa5c9
fffffa60`18dfa6a0 fffff800`01edd5b9 : 00000000`00000005 fffffa80`07dca4b0 00000000`00000040 00000000`000007ff : mfehidk!DEVICEDISPATCH::DispatchPassThrough+0x5d
fffffa60`18dfa700 fffff800`01ed5a92 : fffffa80`050f52c0 00000000`00000000 fffffa80`08013b10 fffffa80`03cbf901 : nt!IopParseDevice+0x5f9
fffffa60`18dfa8a0 fffff800`01ed6622 : 00000000`00000000 fffffa80`08013bf8 fffff880`0ad9d800 00000000`00000000 : nt!ObpLookupObjectName+0x593
fffffa60`18dfa9b0 fffff800`01edbc27 : 00000000`c0100080 00000000`c0100080 00000000`00000001 fffffa60`18dfaca0 : nt!ObOpenObjectByName+0x2f2
fffffa60`18dfaa80 fffff800`01ee5aa8 : 00000000`0510e808 00000000`c0100080 00000000`0510e818 00000000`0510e7f8 : nt!IopCreateFile+0x287
fffffa60`18dfab20 fffff800`01c6fef3 : 00000000`75553380 00000000`0510f120 00000000`00000000 00000000`751a0a10 : nt!NtCreateFile+0x78
fffffa60`18dfabb0 00000000`7749726a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0510e778 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7749726a
SYMBOL_NAME: rdbss!RxCommonCreate+30a
IMAGE_NAME: rdbss.sys
STACK_COMMAND: .cxr 0xfffffa6018df9710 ; kb
FAILURE_BUCKET_ID: X64_0x27_rdbss!RxCommonCreate+30a
BUCKET_ID: X64_0x27_rdbss!RxCommonCreate+30a
Followup: MachineOwner

Ed Farley....

BC AdBot (Login to Remove)


#2 edfarley

  • Topic Starter

  • Members
  • 2 posts
  • Local time:02:12 PM

Posted 20 August 2009 - 03:30 PM

Did also note in prior BSOD post that Network Magic was mentioned. I turned it off to not start at start up. Still blue screen with same RDR_FILE_SYSTEM error
Technical information
***STOP: 0x00000027 (0x00000000BAAD0075, 0xFFFFFA6016F71D38, 0xFFFFFA6016F71710, 0xFFFFFA6015167Fee)

*** redbss.sys - Address FFFFFA6015167FEE base at FFFFFA6015140000, Datestamp 49e022b9

Note sure if this helps..

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users