Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Mini Dump File for Win XP Home


  • Please log in to reply
5 replies to this topic

#1 TheHat

TheHat

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:01:39 PM

Posted 15 November 2010 - 07:39 AM

Hi

I have an Acer laptop that runs Win XP home, after a rebuild there is a lot of blue screen errors. I have read the minidump files and think its down to a harddrive error but would like confirmation that this is the error. I have attached the log.

Microsoft ® Windows Debugger Version 6.12.0002.633 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Gary PC\Desktop\Minidump\Minidump\Mini111210-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

WARNING: Whitespace at start of path element
Symbol search path is:
SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp3_gdr.100427-1636
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x80554040
Debug session time: Fri Nov 12 10:55:51.781 2010 (UTC + 0:00)
System Uptime: 0 days 0:24:06.355
Loading Kernel Symbols
...............................................................
................................................................
.
Loading User Symbols
Loading unloaded module list
................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, 8a1b28c8, 8a1b2a3c, 805c8c7c}

Unable to load image klif.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for klif.sys
*** ERROR: Module load completed but symbols could not be loaded for klif.sys
unable to get nt!KiCurrentEtwBufferOffset
unable to get nt!KiCurrentEtwBufferBase
Probably caused by : hardware_disk ( +f8 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 8a1b28c8, Terminating object
Arg3: 8a1b2a3c, Process image file name
Arg4: 805c8c7c, Explanatory message (ascii)

Debugging Details:
------------------

unable to get nt!KiCurrentEtwBufferOffset
unable to get nt!KiCurrentEtwBufferBase

PROCESS_OBJECT: 8a1b28c8

IMAGE_NAME: hardware_disk

DEBUG_FLR_IMAGE_TIMESTAMP: 0

FAULTING_MODULE: 00000000

PROCESS_NAME: csrss.exe

EXCEPTION_RECORD: b93159d8 -- (.exr 0xffffffffb93159d8)
ExceptionAddress: 75b900d1
ExceptionCode: c0000006 (In-page I/O error)
ExceptionFlags: 00000000
NumberParameters: 3
Parameter[0]: 00000008
Parameter[1]: 75b900d1
Parameter[2]: c000000e
Inpage operation failed at 75b900d1, due to I/O error c000000e

EXCEPTION_CODE: (NTSTATUS) 0xc0000006 - The instruction at 0x%p referenced memory at 0x%p. The required data was not placed into memory because of an I/O error status of 0x%x.

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

ERROR_CODE: (NTSTATUS) 0xc0000006 - The instruction at 0x%p referenced memory at 0x%p. The required data was not placed into memory because of an I/O error status of 0x%x.

EXCEPTION_PARAMETER1: 00000008

EXCEPTION_PARAMETER2: 75b900d1

EXCEPTION_PARAMETER3: c000000e

IO_ERROR: (NTSTATUS) 0xc000000e - A device which does not exist was specified.

EXCEPTION_STR: 0xc0000006_c000000e

FAULTING_IP:
+f8
75b900d1 ?? ???

BUGCHECK_STR: 0xF4_IOERR_C000000E

FOLLOWUP_IP:
+f8
75b900d1 ?? ???

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: hardware_disk

SYMBOL_NAME: +f8

STACK_COMMAND: kb

FAILURE_BUCKET_ID: 0xF4_IOERR_C000000E_+f8

BUCKET_ID: 0xF4_IOERR_C000000E_+f8

Followup: MachineOwner
---------

Many Thanks

Gary

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,131 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:39 AM

Posted 15 November 2010 - 09:08 AM

Let's try this.

Download/install BlueScreenView, http://www.nirsoft.net/utils/blue_screen_view.html.

Double-click BlueScreenView.exe file.

When scanning is done, Edit/Select All...then File/Save Selected Items.

Save the report as BSOD.txt.

Open BSOD.txt in Notepad, copy all content and paste it into your next reply.

Louis

#3 TheHat

TheHat
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:01:39 PM

Posted 15 November 2010 - 11:19 AM

Results from Blue Screen viewer.

?==================================================
Dump File : Mini111510-01.dmp
Crash Time : 15/11/2010 14:21:20
Bug Check String : CRITICAL_OBJECT_TERMINATION
Bug Check Code : 0x000000f4
Parameter 1 : 0x00000003
Parameter 2 : 0x8a148800
Parameter 3 : 0x8a148974
Parameter 4 : 0x805c8c7c
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+21cc5
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5973 (xpsp_sp3_gdr.100427-1636)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini111510-01.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
==================================================

==================================================
Dump File : Mini111310-01.dmp
Crash Time : 13/11/2010 13:04:59
Bug Check String : CRITICAL_OBJECT_TERMINATION
Bug Check Code : 0x000000f4
Parameter 1 : 0x00000003
Parameter 2 : 0x893bc2e8
Parameter 3 : 0x893bc45c
Parameter 4 : 0x805c8c7c
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+21cc5
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5973 (xpsp_sp3_gdr.100427-1636)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini111310-01.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
==================================================

==================================================
Dump File : Mini111210-06.dmp
Crash Time : 12/11/2010 19:49:17
Bug Check String : CRITICAL_OBJECT_TERMINATION
Bug Check Code : 0x000000f4
Parameter 1 : 0x00000003
Parameter 2 : 0x895a9b58
Parameter 3 : 0x895a9ccc
Parameter 4 : 0x805c8c7c
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+21cc5
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5973 (xpsp_sp3_gdr.100427-1636)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini111210-06.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
==================================================

==================================================
Dump File : Mini111210-05.dmp
Crash Time : 12/11/2010 17:01:15
Bug Check String : CRITICAL_OBJECT_TERMINATION
Bug Check Code : 0x000000f4
Parameter 1 : 0x00000003
Parameter 2 : 0x8a28fbe8
Parameter 3 : 0x8a28fd5c
Parameter 4 : 0x805c8c7c
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+21cc5
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5973 (xpsp_sp3_gdr.100427-1636)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini111210-05.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
==================================================

==================================================
Dump File : Mini111210-04.dmp
Crash Time : 12/11/2010 16:40:38
Bug Check String : CRITICAL_OBJECT_TERMINATION
Bug Check Code : 0x000000f4
Parameter 1 : 0x00000003
Parameter 2 : 0x89350020
Parameter 3 : 0x89350194
Parameter 4 : 0x805c8c7c
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+21cc5
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5973 (xpsp_sp3_gdr.100427-1636)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini111210-04.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
==================================================

==================================================
Dump File : Mini111210-03.dmp
Crash Time : 12/11/2010 16:11:15
Bug Check String : CRITICAL_OBJECT_TERMINATION
Bug Check Code : 0x000000f4
Parameter 1 : 0x00000003
Parameter 2 : 0x892fe2b8
Parameter 3 : 0x892fe42c
Parameter 4 : 0x805c8c7c
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+21cc5
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5973 (xpsp_sp3_gdr.100427-1636)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini111210-03.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
==================================================

==================================================
Dump File : Mini111210-02.dmp
Crash Time : 12/11/2010 11:16:41
Bug Check String : CRITICAL_OBJECT_TERMINATION
Bug Check Code : 0x000000f4
Parameter 1 : 0x00000003
Parameter 2 : 0x8a10bd10
Parameter 3 : 0x8a10be84
Parameter 4 : 0x805c8c7c
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+21cc5
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5973 (xpsp_sp3_gdr.100427-1636)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini111210-02.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
==================================================

==================================================
Dump File : Mini111210-01.dmp
Crash Time : 12/11/2010 10:57:32
Bug Check String : CRITICAL_OBJECT_TERMINATION
Bug Check Code : 0x000000f4
Parameter 1 : 0x00000003
Parameter 2 : 0x8a1b28c8
Parameter 3 : 0x8a1b2a3c
Parameter 4 : 0x805c8c7c
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+21cc5
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5973 (xpsp_sp3_gdr.100427-1636)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini111210-01.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
==================================================

==================================================
Dump File : Mini111110-01.dmp
Crash Time : 11/11/2010 20:05:09
Bug Check String : CRITICAL_OBJECT_TERMINATION
Bug Check Code : 0x000000f4
Parameter 1 : 0x00000003
Parameter 2 : 0x89292b10
Parameter 3 : 0x89292c84
Parameter 4 : 0x805c8c7c
Caused By Driver : hal.dll
Caused By Address : hal.dll+2ca4
File Description : Hardware Abstraction Layer DLL
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-2111)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini111110-01.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
==================================================

#4 hamluis

hamluis

    Moderator


  • Moderator
  • 56,131 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:39 AM

Posted 15 November 2010 - 12:14 PM

Thanks ;).

Well...the dump message you originally posted...points to the hard drive. See comments by Ann Marie Scrimshaw at http://social.answers.microsoft.com/Forums/en-US/w7repair/thread/a28d00fe-f27d-4007-ae1d-520d188fe32e .

The BlueScreenView results are less clear because it's more of a general alarm message.

I would download and run the appropriate hard drive diagnostic from the website of the hard drive manufacturer. If a long and a short test are reflected once the diagnostic begins...run the long.

Free Hard Drive Testing Tools - Hard Drive Diagnostics - http://pcsupport.about.com/od/toolsofthetrade/tp/tophddiag.htm

Before doing any further work, I suggest moving any valued data to another drive/system...from the drive in question. Run the diagnostic afterwards.

Louis

#5 TheHat

TheHat
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:01:39 PM

Posted 16 November 2010 - 03:19 AM

Ok many thanks for your help. Do you think I would be able to take an image of this drive, buy a new hdd and reload image? Or will this transfer these problems. It's a fairly new install so I'm no too worried about viruses.

Gary

#6 hamluis

hamluis

    Moderator


  • Moderator
  • 56,131 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:39 AM

Posted 16 November 2010 - 08:46 AM

As I said...I would try to move valued data files...to some other storage media...before doing anything.

Since you haven't yet run the diagnostic on the drive...the diagnostic will provide the final word on what is possible and what is not, on that particular drive.

Louis




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users