Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Server 2011 64bit Blue Screen


  • Please log in to reply
4 replies to this topic

#1 netsecdude

netsecdude

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:10:42 AM

Posted 27 December 2011 - 01:33 PM

I'm actually running into two of my clients that have blue screens. This one I'm not finding any answers. Can anyone help?

Windows 2011


Opened log file 'c:\debuglog.txt'
0: kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Expanded Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
0: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffffa801466a000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff80001af55c4, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000000, (reserved)

Debugging Details:
------------------

Unable to load image \SystemRoot\system32\DRIVERS\FAMv4.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for FAMv4.sys
*** ERROR: Module load completed but symbols could not be loaded for FAMv4.sys

Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80001d16100
fffffa801466a000

FAULTING_IP:
nt!RtlInitUnicodeString+24
fffff800`01af55c4 66f2af repne scas word ptr [rdi]

MM_INTERNAL_CODE: 0

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

BUGCHECK_STR: 0x50

PROCESS_NAME: DataCollectorS

CURRENT_IRQL: 0

TRAP_FRAME: fffff8800ad3fff0 -- (.trap 0xfffff8800ad3fff0)
.trap 0xfffff8800ad3fff0
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=ffffffffffffff9b
rdx=fffffa8014669f38 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80001af55c4 rsp=fffff8800ad40180 rbp=fffff8800ad40350
r8=fffff8800ad40238 r9=fffffdffed23eb70 r10=fffffa8014669f38
r11=fffffa8014669f38 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
nt!RtlInitUnicodeString+0x24:
fffff800`01af55c4 66f2af repne scas word ptr [rdi]
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from fffff80001a8f9fc to fffff80001ae3c40

STACK_TEXT:
fffff880`0ad3fe88 fffff800`01a8f9fc : 00000000`00000050 fffffa80`1466a000 00000000`00000000 fffff880`0ad3fff0 : nt!KeBugCheckEx
fffff880`0ad3fe90 fffff800`01ae1d6e : 00000000`00000000 fffffa80`1466a000 fffff880`00000000 fffff880`0ad40290 : nt! ?? ::FNODOBFM::`string'+0x4611f
fffff880`0ad3fff0 fffff800`01af55c4 : 00000000`00000000 fffff880`018a306c fffffa80`12d0b010 2b2b434c`01317bc8 : nt!KiPageFault+0x16e
fffff880`0ad40180 fffff880`018a306c : fffffa80`12d0b010 2b2b434c`01317bc8 c00000bb`00000000 00000000`00000000 : nt!RtlInitUnicodeString+0x24
fffff880`0ad40190 fffffa80`12d0b010 : 2b2b434c`01317bc8 c00000bb`00000000 00000000`00000000 00000000`00000000 : FAMv4+0x1a06c
fffff880`0ad40198 2b2b434c`01317bc8 : c00000bb`00000000 00000000`00000000 00000000`00000000 00000000`00dc0018 : 0xfffffa80`12d0b010
fffff880`0ad401a0 c00000bb`00000000 : 00000000`00000000 00000000`00000000 00000000`00dc0018 fffffa80`14669f20 : 0x2b2b434c`01317bc8
fffff880`0ad401a8 00000000`00000000 : 00000000`00000000 00000000`00dc0018 fffffa80`14669f20 fffffa80`0b2ae108 : 0xc00000bb`00000000


STACK_COMMAND: kb

FOLLOWUP_IP:
FAMv4+1a06c
fffff880`018a306c ?? ???

SYMBOL_STACK_INDEX: 4

SYMBOL_NAME: FAMv4+1a06c

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: FAMv4

IMAGE_NAME: FAMv4.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4ae64088

FAILURE_BUCKET_ID: X64_0x50_FAMv4+1a06c

BUCKET_ID: X64_0x50_FAMv4+1a06c

Followup: MachineOwner
---------

rax=0000000000000000 rbx=000506ce00000000 rcx=0000000000000050
rdx=fffffa801466a000 rsi=0000000000000008 rdi=0000000000000000
rip=fffff80001ae3c40 rsp=fffff8800ad3fe88 rbp=fffff8800ad3ff00
r8=0000000000000000 r9=fffff8800ad3fff0 r10=0000000000000000
r11=0000000000000000 r12=fffffa8011084630 r13=fffffa801466a000
r14=fffff80001d19500 r15=00000000000001f5
iopl=0 nv up ei ng nz ac po cy
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00000297
nt!KeBugCheckEx:
fffff800`01ae3c40 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff880`0ad3fe90=0000000000000050
Child-SP RetAddr : Args to Child : Call Site
fffff880`0ad3fe88 fffff800`01a8f9fc : 00000000`00000050 fffffa80`1466a000 00000000`00000000 fffff880`0ad3fff0 : nt!KeBugCheckEx
fffff880`0ad3fe90 fffff800`01ae1d6e : 00000000`00000000 fffffa80`1466a000 fffff880`00000000 fffff880`0ad40290 : nt! ?? ::FNODOBFM::`string'+0x4611f
fffff880`0ad3fff0 fffff800`01af55c4 : 00000000`00000000 fffff880`018a306c fffffa80`12d0b010 2b2b434c`01317bc8 : nt!KiPageFault+0x16e (TrapFrame @ fffff880`0ad3fff0)
fffff880`0ad40180 fffff880`018a306c : fffffa80`12d0b010 2b2b434c`01317bc8 c00000bb`00000000 00000000`00000000 : nt!RtlInitUnicodeString+0x24
fffff880`0ad40190 fffffa80`12d0b010 : 2b2b434c`01317bc8 c00000bb`00000000 00000000`00000000 00000000`00000000 : FAMv4+0x1a06c
fffff880`0ad40198 2b2b434c`01317bc8 : c00000bb`00000000 00000000`00000000 00000000`00000000 00000000`00dc0018 : 0xfffffa80`12d0b010
fffff880`0ad401a0 c00000bb`00000000 : 00000000`00000000 00000000`00000000 00000000`00dc0018 fffffa80`14669f20 : 0x2b2b434c`01317bc8
fffff880`0ad401a8 00000000`00000000 : 00000000`00000000 00000000`00dc0018 fffffa80`14669f20 fffffa80`0b2ae108 : 0xc00000bb`00000000
start end module name
fffff800`0195b000 fffff800`01965000 kdcom kdcom.dll Sat Feb 05 11:52:49 2011 (4D4D8061)
fffff800`01a1e000 fffff800`01a67000 hal hal.dll Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff800`01a67000 fffff800`02050000 nt ntkrnlmp.exe Wed Jun 22 22:53:23 2011 (4E02AAA3)
fffff880`00c00000 fffff880`00c1b000 USBSTOR USBSTOR.SYS Thu Mar 10 23:37:16 2011 (4D79A6FC)
fffff880`00c1b000 fffff880`00c57000 vmbus vmbus.sys Sat Nov 20 04:57:29 2010 (4CE79B89)
fffff880`00c57000 fffff880`00c65000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`00c6f000 fffff880`00cbe000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`00cbe000 fffff880`00cd2000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00cd2000 fffff880`00d30000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d30000 fffff880`00df0000 CI CI.dll Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`00e00000 fffff880`00e1a000 mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`00e1a000 fffff880`00e2e000 winhv winhv.sys Sat Nov 20 04:20:02 2010 (4CE792C2)
fffff880`00e30000 fffff880`00f23000 NDIS NDIS.SYS Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`00f23000 fffff880`00f81000 msrpc msrpc.sys Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`00f81000 fffff880`00fe1000 NETIO NETIO.SYS Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`00fe1000 fffff880`00ff1000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`00ff1000 fffff880`00ffa000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01000000 fffff880`01015000 partmgr partmgr.sys Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`01015000 fffff880`0101e000 compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`0101e000 fffff880`0102a000 BATTC BATTC.SYS Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`0102a000 fffff880`0103f000 volmgr volmgr.sys Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`0103f000 fffff880`0109b000 volmgrx volmgrx.sys Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`0109c000 fffff880`01140000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`01140000 fffff880`0114f000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0114f000 fffff880`011a6000 ACPI ACPI.sys Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`011a6000 fffff880`011af000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`011af000 fffff880`011b9000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`011b9000 fffff880`011ec000 pci pci.sys Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`011ec000 fffff880`011f9000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`011f9000 fffff880`01200000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`01200000 fffff880`01214000 termdd termdd.sys Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff880`01214000 fffff880`01223000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`01223000 fffff880`01233000 CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`01233000 fffff880`01249000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`01249000 fffff880`01256000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`01258000 fffff880`01282000 ataport ataport.SYS Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`01282000 fffff880`01299000 HpSAMD HpSAMD.sys Tue Apr 20 14:32:18 2010 (4BCDF332)
fffff880`01299000 fffff880`012fc000 storport storport.sys Thu Mar 10 23:30:23 2011 (4D79A55F)
fffff880`012fc000 fffff880`01307000 amdxata amdxata.sys Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`01307000 fffff880`01353000 fltmgr fltmgr.sys Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`01353000 fffff880`01380000 quota quota.sys Mon Jul 13 19:25:47 2009 (4A5BC27B)
fffff880`01380000 fffff880`01395000 datascrn datascrn.sys Mon Jul 13 19:25:43 2009 (4A5BC277)
fffff880`01395000 fffff880`013aa000 dfsrro dfsrro.sys Sat Nov 20 04:26:37 2010 (4CE7944D)
fffff880`013aa000 fffff880`013c7000 serial serial.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`013c7000 fffff880`013e2000 wanarp wanarp.sys Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`013e2000 fffff880`013fe000 tmtdi tmtdi.sys Thu Sep 30 11:53:53 2010 (4CA4B291)
fffff880`01400000 fffff880`01426000 pacer pacer.sys Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`01426000 fffff880`01435000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`01438000 fffff880`015db000 Ntfs Ntfs.sys Thu Mar 10 22:39:39 2011 (4D79997B)
fffff880`015db000 fffff880`015f6000 ksecdd ksecdd.sys Sat Nov 20 04:21:15 2010 (4CE7930B)
fffff880`015f6000 fffff880`01600000 acpipmi acpipmi.sys Sat Nov 20 04:30:42 2010 (4CE79542)
fffff880`01600000 fffff880`01689000 afd afd.sys Sun Apr 24 22:33:58 2011 (4DB4DD96)
fffff880`01689000 fffff880`016ce000 netbt netbt.sys Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`016ce000 fffff880`016d7000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`016db000 fffff880`0174d000 cng cng.sys Sat Nov 20 05:08:45 2010 (4CE79E2D)
fffff880`0174d000 fffff880`0175e000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`0175e000 fffff880`01768000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01768000 fffff880`01793000 ksecpkg ksecpkg.sys Sat Nov 20 05:10:34 2010 (4CE79E9A)
fffff880`01793000 fffff880`0179c000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0179c000 fffff880`017a5000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`017a5000 fffff880`017ae000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`017ae000 fffff880`017b9000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`017b9000 fffff880`017ca000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`017ca000 fffff880`017ec000 tdx tdx.sys Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`017ec000 fffff880`017f9000 TDI TDI.SYS Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`01800000 fffff880`01830000 CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`01830000 fffff880`01849000 HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`01849000 fffff880`01857000 kbdhid kbdhid.sys Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff880`0185f000 fffff880`01889000 cdrom cdrom.sys Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`01889000 fffff880`018b7000 FAMv4 FAMv4.sys Mon Oct 26 20:36:24 2009 (4AE64088)
fffff880`018b7000 fffff880`018c9000 dfs dfs.sys Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`018c9000 fffff880`018d2000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`018d2000 fffff880`018e0000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`018e0000 fffff880`018f0000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`018f7000 fffff880`01afb000 tcpip tcpip.sys Wed Sep 28 23:43:04 2011 (4E83E948)
fffff880`01afb000 fffff880`01b45000 fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff880`01b45000 fffff880`01b55000 vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
fffff880`01b55000 fffff880`01ba1000 volsnap volsnap.sys Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`01ba1000 fffff880`01ba9000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`01ba9000 fffff880`01bbb000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01bbb000 fffff880`01bc4000 hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`01bc4000 fffff880`01bda000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01bda000 fffff880`01bff000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`03200000 fffff880`0320c000 serenum serenum.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`0320c000 fffff880`0325d000 rdbss rdbss.sys Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`0325d000 fffff880`03269000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff880`03269000 fffff880`03274000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`03274000 fffff880`03283000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`03283000 fffff880`032a1000 dfsc dfsc.sys Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`032a1000 fffff880`032b2000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`032b2000 fffff880`032d8000 tunnel tunnel.sys Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`032d8000 fffff880`032ee000 intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`032ee000 fffff880`03336000 b57nd60a b57nd60a.sys Sun Apr 26 07:14:55 2009 (49F4422F)
fffff880`03336000 fffff880`03343000 usbuhci usbuhci.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`03343000 fffff880`03399000 USBPORT USBPORT.SYS Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`03399000 fffff880`033aa000 usbehci usbehci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`033aa000 fffff880`033b8000 vgapnp vgapnp.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`033b8000 fffff880`033d0000 IPMIDrv IPMIDrv.sys Sat Nov 20 05:04:53 2010 (4CE79D45)
fffff880`033d0000 fffff880`033ee000 i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`033ee000 fffff880`033fd000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`03400000 fffff880`0345a000 usbhub usbhub.sys Sat Nov 20 05:44:30 2010 (4CE7A68E)
fffff880`0345a000 fffff880`0346f000 NDProxy NDProxy.SYS Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`0346f000 fffff880`0347d000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0347d000 fffff880`03487000 dump_diskdump dump_diskdump.sys Sat Nov 20 05:33:56 2010 (4CE7A414)
fffff880`03487000 fffff880`0349e000 dump_HpSAMD dump_HpSAMD.sys Tue Apr 20 14:32:18 2010 (4BCDF332)
fffff880`0349e000 fffff880`034aa000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`034aa000 fffff880`034c7000 usbccgp usbccgp.sys Sat Nov 20 05:44:03 2010 (4CE7A673)
fffff880`034c7000 fffff880`034c8f00 USBD USBD.SYS Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`034c9000 fffff880`034d7000 hidusb hidusb.sys Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`034d7000 fffff880`034df080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`034e6000 fffff880`0350a000 rasl2tp rasl2tp.sys Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`0350a000 fffff880`03516000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`03516000 fffff880`03545000 ndiswan ndiswan.sys Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`03545000 fffff880`03560000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03560000 fffff880`03581000 raspptp raspptp.sys Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`03581000 fffff880`0359b000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`0359b000 fffff880`035a6000 rdpbus rdpbus.sys Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`035a6000 fffff880`035a7480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`035a8000 fffff880`035eb000 ks ks.sys Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`035eb000 fffff880`035fd000 umbus umbus.sys Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`04400000 fffff880`04424000 mrxsmb20 mrxsmb20.sys Tue Apr 26 22:39:37 2011 (4DB781E9)
fffff880`04424000 fffff880`0448d000 srv2 srv2.sys Thu Apr 28 23:05:46 2011 (4DBA2B0A)
fffff880`044c4000 fffff880`044e7000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`044e7000 fffff880`044fc000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`044fc000 fffff880`04514000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04514000 fffff880`04545000 srvnet srvnet.sys Thu Apr 28 23:05:35 2011 (4DBA2AFF)
fffff880`04545000 fffff880`04563000 bowser bowser.sys Tue Feb 22 23:55:04 2011 (4D649328)
fffff880`04563000 fffff880`0457b000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0457b000 fffff880`045a8000 mrxsmb mrxsmb.sys Tue Apr 26 22:40:38 2011 (4DB78226)
fffff880`045a8000 fffff880`045f6000 mrxsmb10 mrxsmb10.sys Fri Jul 08 22:46:28 2011 (4E17C104)
fffff880`04a00000 fffff880`04ac9000 HTTP HTTP.sys Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`04ac9000 fffff880`04af1000 tmcomm tmcomm.sys Fri Feb 25 01:08:18 2011 (4D674752)
fffff880`04af5000 fffff880`04b8d000 srv srv.sys Thu Apr 28 23:06:06 2011 (4DBA2B1E)
fffff880`04b8d000 fffff880`04ba3000 tmevtmgr tmevtmgr.sys Fri Feb 25 01:08:16 2011 (4D674750)
fffff880`04ba3000 fffff880`04bc1000 tmactmon tmactmon.sys Fri Feb 25 01:08:27 2011 (4D67475B)
fffff880`04bc1000 fffff880`04bf5000 mqac mqac.sys Mon Jul 13 20:26:13 2009 (4A5BD0A5)
fffff880`07030000 fffff880`070d6000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`070d6000 fffff880`070e1000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`070e1000 fffff880`070f3000 tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`07164000 fffff880`0716d000 cpuz135_x64 cpuz135_x64.sys Wed Jan 19 11:42:06 2011 (4D37145E)
fffff880`0716d000 fffff880`0719b000 rdpdr rdpdr.sys Sat Nov 20 06:06:41 2010 (4CE7ABC1)
fffff880`0719b000 fffff880`071a6000 tdtcp tdtcp.sys Mon Jul 13 20:16:32 2009 (4A5BCE60)
fffff880`071a6000 fffff880`071b5000 tssecsrv tssecsrv.sys Sat Nov 20 06:04:09 2010 (4CE7AB29)
fffff880`071b5000 fffff880`071ee000 RDPWD RDPWD.SYS Sat Nov 20 06:04:37 2010 (4CE7AB45)
fffff880`071ee000 fffff880`071f9000 asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff960`00080000 fffff960`00394000 win32k win32k.sys Wed Nov 23 23:51:38 2011 (4ECDCD5A)
fffff960`00540000 fffff960`0055e000 dxg dxg.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff960`00690000 fffff960`0069a000 TSDDD TSDDD.dll Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff960`008d0000 fffff960`008d9000 framebuf framebuf.dll unavailable (00000000)

Unloaded modules:
fffff880`070f3000 fffff880`07164000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00071000
fffff880`01830000 fffff880`0183e000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff880`0183e000 fffff880`01848000 dump_storpor
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000A000
fffff880`01848000 fffff880`0185f000 dump_HpSAMD.
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00017000
fffff880`00c00000 fffff880`00c1b000 sacdrv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001B000
Closing open log file c:\debuglog.txt

BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:42 AM

Posted 29 December 2011 - 07:57 PM

Unable to load image \SystemRoot\system32\DRIVERS\FAMv4.sys, Win32 error 0n2

FAMv4 stands for File Access Manager and it is made by Vision Works Solutions Incorporated.
Their website is http://www.vwsolutions.com/. It is essentially an open file utility that allows backup programs to backup open files.
You can find out more about how it works from http://www.vwsolutions.com/FAM/howitworks.aspx.
It works with several backup programs and since it is ‘hidden’ in the registry and not listed in services.msc, it is probably licensed by other backup companies as their open file backup solution.

#3 netsecdude

netsecdude
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:10:42 AM

Posted 30 December 2011 - 10:05 AM

Thanks.
http://technet.microsoft.com/en-us/library/dd789637(EXCHG.80).aspx Tells me how to disable it, however, I don't want it to mess with Exchange 2010

Doesn't VSS (volume shadow copy service) do the same thing?

Edited by netsecdude, 30 December 2011 - 10:09 AM.


#4 netsecdude

netsecdude
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:10:42 AM

Posted 30 December 2011 - 10:14 AM

I've found my answer on VSS http://www.vwsolutions.com/FAM/vss.aspx. Now I need to find out more information from our backup software. Thanks again

Edited by netsecdude, 30 December 2011 - 10:18 AM.


#5 Collin Stefani

Collin Stefani

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:10:42 AM

Posted 04 January 2012 - 08:42 PM

Such a very amazing link!
Thanks you for the post.
__________________
Watch The Devil Inside Online Free




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users