Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Server 2003 blue screen


  • Please log in to reply
4 replies to this topic

#1 netsecdude

netsecdude

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:02 PM

Posted 27 December 2011 - 01:38 PM

I'm thinking memory issues..

Opened log file 'c:\debuglog.txt'
5: kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Expanded Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
5: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q
Loading Kernel Symbols
.

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

..............................................................
................................................................
...........
Loading User Symbols
Loading unloaded module list
............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffffa80163df000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff80001abecaf, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000000, (reserved)

Debugging Details:
------------------

*** ERROR: Module load completed but symbols could not be loaded for FAMv4.sys

Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80001c87080
fffffa80163df000

FAULTING_IP:
nt!RtlInitUnicodeString+23
fffff800`01abecaf 66f2af repne scas word ptr [rdi]

MM_INTERNAL_CODE: 0

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

BUGCHECK_STR: 0x50

PROCESS_NAME: WmiPrvSE.exe

CURRENT_IRQL: 0

TRAP_FRAME: fffffa600bdb5fe0 -- (.trap 0xfffffa600bdb5fe0)
.trap 0xfffffa600bdb5fe0
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=ffffffffffffffe3
rdx=fffffa80163defc8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80001abecaf rsp=fffffa600bdb6178 rbp=fffffa600bdb6340
r8=fffffa600bdb6228 r9=ffffffdfed59fae0 r10=fffffa80163defc8
r11=fffffa80163defc8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
nt!RtlInitUnicodeString+0x23:
fffff800`01abecaf 66f2af repne scas word ptr [rdi]
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from fffff80001b1b7e0 to fffff80001aba490

STACK_TEXT:
fffffa60`0bdb5ef8 fffff800`01b1b7e0 : 00000000`00000050 fffffa80`163df000 00000000`00000000 fffffa60`0bdb5fe0 : nt!KeBugCheckEx
fffffa60`0bdb5f00 fffff800`01ab9019 : 00000000`00000000 fffff800`00000800 00000000`00000800 fffffa60`0bdb6280 : nt! ?? ::FNODOBFM::`string'+0x2d3dc
fffffa60`0bdb5fe0 fffff800`01abecaf : fffffa60`0397906c 00000000`00000000 fffffa80`2b2b434c fffffa80`09f83b70 : nt!KiPageFault+0x119
fffffa60`0bdb6178 fffffa60`0397906c : 00000000`00000000 fffffa80`2b2b434c fffffa80`09f83b70 fffffa80`0a933010 : nt!RtlInitUnicodeString+0x23
fffffa60`0bdb6180 fffffa60`039792dc : fffffa80`0a81b3d0 fffffa60`0bdb6340 fffffa80`0a81b3d0 fffff880`1038a5b0 : FAMv4+0x1a06c
fffffa60`0bdb6250 fffffa60`03965a11 : fffff880`1038a5b8 00000000`ffffffff 00000000`00000000 fffff880`1038a5b0 : FAMv4+0x1a2dc
fffffa60`0bdb62e0 fffffa60`00d5e765 : 00000000`00000000 fffffa80`16797640 00000000`00000801 00000000`00000000 : FAMv4+0x6a11
fffffa60`0bdb6540 fffffa60`00d6024c : 00000000`00000000 fffffa80`13ef6100 fffffa80`1617ff00 fffffa80`13ef6000 : fltmgr!FltpPerformPreCallbacks+0x285
fffffa60`0bdb6620 fffffa60`00d7b256 : fffffa80`09f83d40 fffffa80`1617ff20 fffffa80`13ef6010 fffffa60`0bdb66a0 : fltmgr!FltpPassThroughInternal+0x3c
fffffa60`0bdb6650 fffff800`01d289d9 : 00000000`00000005 fffffa80`13ef6010 00000000`00000040 00000000`00000000 : fltmgr!FltpCreate+0x247
fffffa60`0bdb6700 fffff800`01d20ed2 : fffffa80`09f82530 00000000`00000000 fffffa80`157c0010 fffff880`08e88601 : nt!IopParseDevice+0x5f9
fffffa60`0bdb68a0 fffff800`01d21a65 : 00000000`00000000 fffffa80`157c0118 fffff880`09ae3000 00000000`00000000 : nt!ObpLookupObjectName+0x593
fffffa60`0bdb69b0 fffff800`01d27047 : 00000000`00100000 00000000`00100000 00000000`00000001 fffffa60`0bdb6ca0 : nt!ObOpenObjectByName+0x2f5
fffffa60`0bdb6a80 fffff800`01d16270 : 00000000`0384d358 fffff800`00100000 00000000`00000000 00000000`0384d370 : nt!IopCreateFile+0x287
fffffa60`0bdb6b20 fffff800`01ab9f33 : fffff880`08abcb10 fffffa80`15da86f0 00000000`00000c58 fffff800`01d25734 : nt!NtOpenFile+0x58
fffffa60`0bdb6bb0 00000000`77836eca : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0384d308 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77836eca


STACK_COMMAND: kb

FOLLOWUP_IP:
FAMv4+1a06c
fffffa60`0397906c 4c8d8424a0000000 lea r8,[rsp+0A0h]

SYMBOL_STACK_INDEX: 4

SYMBOL_NAME: FAMv4+1a06c

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: FAMv4

IMAGE_NAME: FAMv4.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4ae64088

FAILURE_BUCKET_ID: X64_0x50_FAMv4+1a06c

BUCKET_ID: X64_0x50_FAMv4+1a06c

Followup: MachineOwner
---------

rax=0000000000000000 rbx=0011dc0200000000 rcx=0000000000000050
rdx=fffffa80163df000 rsi=fffffa80163df000 rdi=0000000000000000
rip=fffff80001aba490 rsp=fffffa600bdb5ef8 rbp=fffff80001c25240
r8=0000000000000000 r9=fffffa600bdb5fe0 r10=fffff6fb7ea00588
r11=0000000000000000 r12=0000000000000000 r13=fffffa8015da86f0
r14=fffff6fd400b1ef8 r15=00000000000001f5
iopl=0 nv up ei ng nz ac po cy
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00000297
nt!KeBugCheckEx:
fffff800`01aba490 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffffa60`0bdb5f00=0000000000000050
Child-SP RetAddr : Args to Child : Call Site
fffffa60`0bdb5ef8 fffff800`01b1b7e0 : 00000000`00000050 fffffa80`163df000 00000000`00000000 fffffa60`0bdb5fe0 : nt!KeBugCheckEx
fffffa60`0bdb5f00 fffff800`01ab9019 : 00000000`00000000 fffff800`00000800 00000000`00000800 fffffa60`0bdb6280 : nt! ?? ::FNODOBFM::`string'+0x2d3dc
fffffa60`0bdb5fe0 fffff800`01abecaf : fffffa60`0397906c 00000000`00000000 fffffa80`2b2b434c fffffa80`09f83b70 : nt!KiPageFault+0x119 (TrapFrame @ fffffa60`0bdb5fe0)
fffffa60`0bdb6178 fffffa60`0397906c : 00000000`00000000 fffffa80`2b2b434c fffffa80`09f83b70 fffffa80`0a933010 : nt!RtlInitUnicodeString+0x23
fffffa60`0bdb6180 fffffa60`039792dc : fffffa80`0a81b3d0 fffffa60`0bdb6340 fffffa80`0a81b3d0 fffff880`1038a5b0 : FAMv4+0x1a06c
fffffa60`0bdb6250 fffffa60`03965a11 : fffff880`1038a5b8 00000000`ffffffff 00000000`00000000 fffff880`1038a5b0 : FAMv4+0x1a2dc
fffffa60`0bdb62e0 fffffa60`00d5e765 : 00000000`00000000 fffffa80`16797640 00000000`00000801 00000000`00000000 : FAMv4+0x6a11
fffffa60`0bdb6540 fffffa60`00d6024c : 00000000`00000000 fffffa80`13ef6100 fffffa80`1617ff00 fffffa80`13ef6000 : fltmgr!FltpPerformPreCallbacks+0x285
fffffa60`0bdb6620 fffffa60`00d7b256 : fffffa80`09f83d40 fffffa80`1617ff20 fffffa80`13ef6010 fffffa60`0bdb66a0 : fltmgr!FltpPassThroughInternal+0x3c
fffffa60`0bdb6650 fffff800`01d289d9 : 00000000`00000005 fffffa80`13ef6010 00000000`00000040 00000000`00000000 : fltmgr!FltpCreate+0x247
fffffa60`0bdb6700 fffff800`01d20ed2 : fffffa80`09f82530 00000000`00000000 fffffa80`157c0010 fffff880`08e88601 : nt!IopParseDevice+0x5f9
fffffa60`0bdb68a0 fffff800`01d21a65 : 00000000`00000000 fffffa80`157c0118 fffff880`09ae3000 00000000`00000000 : nt!ObpLookupObjectName+0x593
fffffa60`0bdb69b0 fffff800`01d27047 : 00000000`00100000 00000000`00100000 00000000`00000001 fffffa60`0bdb6ca0 : nt!ObOpenObjectByName+0x2f5
fffffa60`0bdb6a80 fffff800`01d16270 : 00000000`0384d358 fffff800`00100000 00000000`00000000 00000000`0384d370 : nt!IopCreateFile+0x287
fffffa60`0bdb6b20 fffff800`01ab9f33 : fffff880`08abcb10 fffffa80`15da86f0 00000000`00000c58 fffff800`01d25734 : nt!NtOpenFile+0x58
fffffa60`0bdb6bb0 00000000`77836eca : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffffa60`0bdb6c20)
00000000`0384d308 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77836eca
start end module name
fffff800`01a1a000 fffff800`01a60000 hal hal.dll Sat Apr 11 03:04:56 2009 (49E04118)
fffff800`01a60000 fffff800`01f78000 nt ntkrnlmp.exe Fri Jun 17 09:44:19 2011 (4DFB5A33)
fffff960`00060000 fffff960`00317000 win32k win32k.sys Wed Nov 23 08:57:21 2011 (4ECCFBC1)
fffff960`004f0000 fffff960`0050e000 dxg dxg.sys Sat Apr 11 01:09:45 2009 (49E02619)
fffff960`00630000 fffff960`0063a000 TSDDD TSDDD.dll Sat Jan 19 01:42:04 2008 (47919BBC)
fffff960`00820000 fffff960`0088a000 ati2dvag ati2dvag.dll unavailable (00000000)
fffff960`00a80000 fffff960`00ae2000 ati2cqag ati2cqag.dll unavailable (00000000)
fffff960`00c50000 fffff960`00c97000 atikvmag atikvmag.dll unavailable (00000000)
fffffa60`00602000 fffffa60`0060c000 kdcom kdcom.dll Thu Feb 24 11:04:07 2011 (4D668177)
fffffa60`0060c000 fffffa60`00647000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Apr 11 03:05:41 2009 (49E04145)
fffffa60`00647000 fffffa60`0065b000 PSHED PSHED.dll Sat Apr 11 03:08:17 2009 (49E041E1)
fffffa60`0065b000 fffffa60`006b8000 CLFS CLFS.SYS Sat Apr 11 00:54:21 2009 (49E0227D)
fffffa60`006b8000 fffffa60`0076a000 CI CI.dll Sat Apr 11 03:08:09 2009 (49E041D9)
fffffa60`00786000 fffffa60`007d6000 msrpc msrpc.sys Sat Apr 11 01:32:13 2009 (49E02B5D)
fffffa60`007d6000 fffffa60`007ff000 hpqilo2 hpqilo2.sys Mon Jan 25 15:50:22 2010 (4B5E040E)
fffffa60`00802000 fffffa60`009c5000 NDIS NDIS.SYS Sat Apr 11 01:43:15 2009 (49E02DF3)
fffffa60`009c5000 fffffa60`009d9000 volmgr volmgr.sys Sat Apr 11 01:34:49 2009 (49E02BF9)
fffffa60`009d9000 fffffa60`009ed000 disk disk.sys Sat Apr 11 01:34:38 2009 (49E02BEE)
fffffa60`00a02000 fffffa60`00a5b000 NETIO NETIO.SYS Sat Apr 11 01:43:34 2009 (49E02E06)
fffffa60`00a5b000 fffffa60`00b35000 Wdf01000 Wdf01000.sys Sat Jan 19 01:33:27 2008 (479199B7)
fffffa60`00b35000 fffffa60`00b43000 WDFLDR WDFLDR.SYS Sat Jan 19 01:32:33 2008 (47919981)
fffffa60`00b43000 fffffa60`00b99000 acpi acpi.sys Sat Apr 11 01:03:26 2009 (49E0249E)
fffffa60`00b99000 fffffa60`00ba2000 WMILIB WMILIB.SYS Sat Jan 19 01:33:45 2008 (479199C9)
fffffa60`00ba2000 fffffa60`00bac000 msisadrv msisadrv.sys Sat Jan 19 01:02:50 2008 (4791928A)
fffffa60`00bac000 fffffa60`00bdc000 pci pci.sys Sat Apr 11 01:03:33 2009 (49E024A5)
fffffa60`00bdc000 fffffa60`00bf1000 partmgr partmgr.sys Sat Apr 11 01:34:51 2009 (49E02BFB)
fffffa60`00c03000 fffffa60`00c69000 volmgrx volmgrx.sys Sat Apr 11 01:35:14 2009 (49E02C12)
fffffa60`00c69000 fffffa60`00c70000 pciide pciide.sys Sat Apr 11 01:34:28 2009 (49E02BE4)
fffffa60`00c70000 fffffa60`00c80000 PCIIDEX PCIIDEX.SYS Sat Apr 11 01:34:22 2009 (49E02BDE)
fffffa60`00c80000 fffffa60`00c93000 mountmgr mountmgr.sys Sat Jan 19 01:28:01 2008 (47919871)
fffffa60`00c93000 fffffa60`00c9b000 atapi atapi.sys Sat Apr 11 01:34:19 2009 (49E02BDB)
fffffa60`00c9b000 fffffa60`00cbf000 ataport ataport.SYS Sat Apr 11 01:34:25 2009 (49E02BE1)
fffffa60`00cbf000 fffffa60`00cd6000 hpcisss hpcisss.sys Tue Jan 20 12:43:05 2009 (49760D29)
fffffa60`00cd6000 fffffa60`00d33000 storport storport.sys Sat Apr 11 01:34:45 2009 (49E02BF5)
fffffa60`00d33000 fffffa60`00d5c000 HpCISSs2 HpCISSs2.sys Mon Feb 22 14:02:13 2010 (4B82D4B5)
fffffa60`00d5c000 fffffa60`00da3000 fltmgr fltmgr.sys Sat Apr 11 00:54:38 2009 (49E0228E)
fffffa60`00da3000 fffffa60`00dce000 quota quota.sys Sat Apr 11 00:59:38 2009 (49E023BA)
fffffa60`00dce000 fffffa60`00de3000 datascrn datascrn.sys Sat Apr 11 00:59:35 2009 (49E023B7)
fffffa60`00de3000 fffffa60`00df5000 mup mup.sys Sat Apr 11 00:54:47 2009 (49E02297)
fffffa60`00e02000 fffffa60`00e89000 ksecdd ksecdd.sys Mon Jun 15 09:15:18 2009 (4A364966)
fffffa60`00e89000 fffffa60`00ffe000 tcpip tcpip.sys Tue Sep 20 10:29:21 2011 (4E78A341)
fffffa60`01000000 fffffa60`0102c000 fwpkclnt fwpkclnt.sys Sat Apr 11 01:42:44 2009 (49E02DD4)
fffffa60`0102c000 fffffa60`011ac000 Ntfs Ntfs.sys Sat Apr 11 00:55:38 2009 (49E022CA)
fffffa60`011ac000 fffffa60`011f0000 volsnap volsnap.sys Sat Apr 11 01:35:33 2009 (49E02C25)
fffffa60`011f0000 fffffa60`011f8000 spldr spldr.sys Mon Jan 12 16:51:29 2009 (496BBB61)
fffffa60`0120a000 fffffa60`01236000 CLASSPNP CLASSPNP.SYS Sat Apr 11 01:34:15 2009 (49E02BD7)
fffffa60`01236000 fffffa60`01240000 crcdisk crcdisk.sys Sat Jan 19 01:30:12 2008 (479198F4)
fffffa60`01240000 fffffa60`01262000 luafv luafv.sys Sat Jan 19 00:59:06 2008 (479191AA)
fffffa60`01262000 fffffa60`01276000 lltdio lltdio.sys Sat Jan 19 01:35:48 2008 (47919A44)
fffffa60`01281000 fffffa60`0128d000 tunnel tunnel.sys Sat Jan 19 01:36:44 2008 (47919A7C)
fffffa60`0128d000 fffffa60`012a0000 intelppm intelppm.sys Sat Jan 19 00:52:45 2008 (4791902D)
fffffa60`012a0000 fffffa60`01306000 b57nd60a b57nd60a.sys Fri May 21 01:48:07 2010 (4BF61E97)
fffffa60`01306000 fffffa60`01312000 usbuhci usbuhci.sys Sat Jan 19 01:33:56 2008 (479199D4)
fffffa60`01312000 fffffa60`01358000 USBPORT USBPORT.SYS Sat Apr 11 01:39:39 2009 (49E02D1B)
fffffa60`01358000 fffffa60`01369000 usbehci usbehci.sys Sat Apr 11 01:39:36 2009 (49E02D18)
fffffa60`01369000 fffffa60`01386000 tdx tdx.sys Sat Apr 11 01:43:00 2009 (49E02DE4)
fffffa60`01386000 fffffa60`013a1000 smb smb.sys Sat Apr 11 01:42:19 2009 (49E02DBB)
fffffa60`013a1000 fffffa60`013ca000 dump_HpCISSs2 dump_HpCISSs2.sys Mon Feb 22 14:02:13 2010 (4B82D4B5)
fffffa60`013ca000 fffffa60`013d5000 kbdhid kbdhid.sys Sat Apr 11 01:33:40 2009 (49E02BB4)
fffffa60`013d5000 fffffa60`013e0000 mouhid mouhid.sys Sat Jan 19 01:28:10 2008 (4791987A)
fffffa60`013e0000 fffffa60`013f8000 rspndr rspndr.sys Sat Jan 19 01:35:48 2008 (47919A44)
fffffa60`03405000 fffffa60`0362b000 ati2mtag ati2mtag.sys Wed Jun 24 23:33:44 2009 (4A42F018)
fffffa60`0362b000 fffffa60`03650000 VIDEOPRT VIDEOPRT.SYS Sat Jan 19 01:32:25 2008 (47919979)
fffffa60`03650000 fffffa60`03660000 watchdog watchdog.sys Sat Apr 11 01:09:16 2009 (49E025FC)
fffffa60`03660000 fffffa60`03670000 cpqcidrv cpqcidrv.sys Mon May 11 18:08:05 2009 (4A08A1C5)
fffffa60`03670000 fffffa60`03688000 IPMIDrv IPMIDrv.sys Sat Apr 11 01:15:16 2009 (49E02764)
fffffa60`03688000 fffffa60`0369e000 i8042prt i8042prt.sys Sat Jan 19 01:28:08 2008 (47919878)
fffffa60`0369e000 fffffa60`036ac000 kbdclass kbdclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`036ac000 fffffa60`036b8000 mouclass mouclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`036b8000 fffffa60`036d5000 serial serial.sys Sat Jan 19 01:28:41 2008 (47919899)
fffffa60`036d5000 fffffa60`036e1000 serenum serenum.sys Sat Jan 19 01:28:36 2008 (47919894)
fffffa60`036e1000 fffffa60`036fd000 cdrom cdrom.sys Sat Apr 11 01:34:39 2009 (49E02BEF)
fffffa60`036fd000 fffffa60`03710000 blbdrive blbdrive.sys Sat Jan 19 00:58:37 2008 (4791918D)
fffffa60`03710000 fffffa60`03749000 msiscsi msiscsi.sys Sat Apr 11 01:36:09 2009 (49E02C49)
fffffa60`03749000 fffffa60`03756000 TDI TDI.SYS Sat Apr 11 01:44:14 2009 (49E02E2E)
fffffa60`03756000 fffffa60`03779000 rasl2tp rasl2tp.sys Sat Apr 11 01:43:37 2009 (49E02E09)
fffffa60`03779000 fffffa60`03785000 ndistapi ndistapi.sys Sat Jan 19 01:37:22 2008 (47919AA2)
fffffa60`03785000 fffffa60`037b6000 ndiswan ndiswan.sys Sat Apr 11 01:43:39 2009 (49E02E0B)
fffffa60`037b6000 fffffa60`037c6000 raspppoe raspppoe.sys Sat Apr 11 01:43:33 2009 (49E02E05)
fffffa60`037c6000 fffffa60`037e4000 raspptp raspptp.sys Sat Apr 11 01:43:38 2009 (49E02E0A)
fffffa60`037e4000 fffffa60`037fc000 rassstp rassstp.sys Sat Apr 11 01:43:46 2009 (49E02E12)
fffffa60`03805000 fffffa60`0389f000 rdpdr rdpdr.sys Sat Apr 11 01:49:54 2009 (49E02F82)
fffffa60`0389f000 fffffa60`038b2000 termdd termdd.sys Sat Apr 11 01:48:13 2009 (49E02F1D)
fffffa60`038b2000 fffffa60`038b3480 swenum swenum.sys Thu Nov 02 05:37:33 2006 (4549BC5D)
fffffa60`038b4000 fffffa60`038e8000 ks ks.sys Sat Apr 11 01:33:51 2009 (49E02BBF)
fffffa60`038e8000 fffffa60`038f3000 mssmbios mssmbios.sys Sat Jan 19 01:02:54 2008 (4791928E)
fffffa60`038f3000 fffffa60`03903000 umbus umbus.sys Sat Jan 19 01:34:16 2008 (479199E8)
fffffa60`03903000 fffffa60`0394b000 usbhub usbhub.sys Sat Apr 11 01:39:52 2009 (49E02D28)
fffffa60`0394b000 fffffa60`0395f000 NDProxy NDProxy.SYS Sat Jan 19 01:37:26 2008 (47919AA6)
fffffa60`0395f000 fffffa60`0398d000 FAMv4 FAMv4.sys Mon Oct 26 20:36:24 2009 (4AE64088)
fffffa60`0398d000 fffffa60`0399d000 dfs dfs.sys Sat Jan 19 00:54:14 2008 (47919086)
fffffa60`0399d000 fffffa60`039a7000 Fs_Rec Fs_Rec.SYS Sat Jan 19 00:53:41 2008 (47919065)
fffffa60`039a7000 fffffa60`039b0000 Null Null.SYS Thu Nov 02 05:37:15 2006 (4549BC4B)
fffffa60`039b0000 fffffa60`039b9000 rasacd rasacd.sys Sat Jan 19 01:37:30 2008 (47919AAA)
fffffa60`039bb000 fffffa60`039c2b80 HIDPARSE HIDPARSE.SYS Sat Jan 19 01:33:51 2008 (479199CF)
fffffa60`039c3000 fffffa60`039d1000 vga vga.sys Sat Jan 19 01:32:21 2008 (47919975)
fffffa60`039d1000 fffffa60`039da000 RDPCDD RDPCDD.sys Sat Jan 19 01:42:04 2008 (47919BBC)
fffffa60`039da000 fffffa60`039e3000 rdpencdd rdpencdd.sys Sat Jan 19 01:42:03 2008 (47919BBB)
fffffa60`039e3000 fffffa60`039ee000 Msfs Msfs.SYS Sat Jan 19 00:53:55 2008 (47919073)
fffffa60`039ee000 fffffa60`039ff000 Npfs Npfs.SYS Sat Apr 11 00:54:22 2009 (49E0227E)
fffffa60`08200000 fffffa60`0820c000 Dxapi Dxapi.sys Sat Jan 19 01:08:00 2008 (479193C0)
fffffa60`0820c000 fffffa60`08277000 afd afd.sys Thu Apr 21 10:20:22 2011 (4DB03D26)
fffffa60`08277000 fffffa60`082bb000 netbt netbt.sys Sat Apr 11 01:42:31 2009 (49E02DC7)
fffffa60`082bb000 fffffa60`082d9000 pacer pacer.sys Sat Apr 11 01:42:56 2009 (49E02DE0)
fffffa60`082d9000 fffffa60`082e8000 netbios netbios.sys Sat Jan 19 01:36:35 2008 (47919A73)
fffffa60`082e8000 fffffa60`08303000 wanarp wanarp.sys Sat Apr 11 01:43:38 2009 (49E02E0A)
fffffa60`08303000 fffffa60`0831f000 tmtdi tmtdi.sys Thu Sep 30 11:53:53 2010 (4CA4B291)
fffffa60`0831f000 fffffa60`0836c000 rdbss rdbss.sys Sat Apr 11 00:55:21 2009 (49E022B9)
fffffa60`0836c000 fffffa60`08378000 nsiproxy nsiproxy.sys Sat Jan 19 01:36:45 2008 (47919A7D)
fffffa60`08378000 fffffa60`08395000 dfsc dfsc.sys Thu Apr 14 11:14:19 2011 (4DA70F4B)
fffffa60`08395000 fffffa60`083a8000 monitor monitor.sys Sat Jan 19 01:32:34 2008 (47919982)
fffffa60`083a8000 fffffa60`083c4000 usbccgp usbccgp.sys Sat Jan 19 01:34:04 2008 (479199DC)
fffffa60`083c4000 fffffa60`083c5e00 USBD USBD.SYS Sat Jan 19 01:33:53 2008 (479199D1)
fffffa60`083c6000 fffffa60`083cf000 hidusb hidusb.sys Sat Apr 11 01:39:32 2009 (49E02D14)
fffffa60`083cf000 fffffa60`083e1000 HIDCLASS HIDCLASS.SYS Sat Apr 11 01:39:32 2009 (49E02D14)
fffffa60`083e4000 fffffa60`083f2000 crashdmp crashdmp.sys Sat Apr 11 01:34:31 2009 (49E02BE7)
fffffa60`083f2000 fffffa60`083fc000 dump_diskdump dump_diskdump.sys Sat Apr 11 01:34:30 2009 (49E02BE6)
fffffa60`09604000 fffffa60`0962d000 srvnet srvnet.sys Fri Apr 29 09:40:55 2011 (4DBABFE7)
fffffa60`0962d000 fffffa60`0964b000 bowser bowser.sys Fri Feb 18 09:16:16 2011 (4D5E7F30)
fffffa60`0964b000 fffffa60`09665000 mpsdrv mpsdrv.sys Sat Jan 19 01:35:28 2008 (47919A30)
fffffa60`09665000 fffffa60`0968e000 mrxsmb mrxsmb.sys Fri Apr 29 09:39:33 2011 (4DBABF95)
fffffa60`0968e000 fffffa60`096d7000 mrxsmb10 mrxsmb10.sys Wed Jul 06 11:49:23 2011 (4E148403)
fffffa60`096d7000 fffffa60`096f6000 mrxsmb20 mrxsmb20.sys Fri Apr 29 09:39:31 2011 (4DBABF93)
fffffa60`096f6000 fffffa60`09728000 srv2 srv2.sys Fri Apr 29 09:41:01 2011 (4DBABFED)
fffffa60`09728000 fffffa60`097bb000 srv srv.sys Fri Feb 18 09:18:12 2011 (4D5E7FA4)
fffffa60`09a0b000 fffffa60`09aa5000 spsys spsys.sys Tue Mar 10 13:16:43 2009 (49B6A07B)
fffffa60`09aa5000 fffffa60`09ab0000 asyncmac asyncmac.sys Sat Jan 19 01:37:27 2008 (47919AA7)
fffffa60`09ab0000 fffffa60`09b53000 HTTP HTTP.sys Sat Feb 20 16:30:05 2010 (4B80545D)
fffffa60`09b53000 fffffa60`09b7b000 tmcomm tmcomm.sys Thu Jun 23 05:33:26 2011 (4E030866)
fffffa60`09b7b000 fffffa60`09b91000 tmevtmgr tmevtmgr.sys Thu Jun 23 05:33:25 2011 (4E030865)
fffffa60`09b91000 fffffa60`09baf000 tmactmon tmactmon.sys Thu Jun 23 05:33:35 2011 (4E03086F)
fffffa60`0b20d000 fffffa60`0b2c3000 peauth peauth.sys Mon Oct 23 07:57:00 2006 (453CAE0C)
fffffa60`0b2c3000 fffffa60`0b2ce000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffffa60`0b2ce000 fffffa60`0b2de000 tcpipreg tcpipreg.sys Tue Dec 08 12:55:32 2009 (4B1E9314)
fffffa60`0b2de000 fffffa60`0b2fa000 cdfs cdfs.sys Sat Jan 19 00:53:45 2008 (47919069)
fffffa60`0b2fa000 fffffa60`0b303000 cpuz135_x64 cpuz135_x64.sys Wed Jan 19 11:42:06 2011 (4D37145E)
fffffa60`0b303000 fffffa60`0b310000 tdtcp tdtcp.sys Sat Jan 19 01:42:03 2008 (47919BBB)
fffffa60`0b310000 fffffa60`0b31e000 tssecsrv tssecsrv.sys Sat Jan 19 01:42:10 2008 (47919BC2)
fffffa60`0b31e000 fffffa60`0b35a000 RDPWD RDPWD.SYS Sat Apr 11 01:48:33 2009 (49E02F31)

Unloaded modules:
fffffa60`0b35a000 fffffa60`0b363000 hitmanpro35.
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
fffffa60`083b1000 fffffa60`083b3000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
fffffa60`083bc000 fffffa60`083ce000 HIDCLASS.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00012000
fffffa60`083b3000 fffffa60`083bc000 hidusb.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
fffffa60`08395000 fffffa60`083b1000 usbccgp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001C000
fffffa60`083ce000 fffffa60`083d9000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
fffffa60`083d9000 fffffa60`083e4000 mouhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
fffffa60`01240000 fffffa60`0124e000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffffa60`0124e000 fffffa60`01258000 dump_storpor
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000A000
fffffa60`01258000 fffffa60`01281000 dump_HpCISSs
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00029000
fffffa60`039b0000 fffffa60`039bb000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
fffffa60`0076a000 fffffa60`00786000 sacdrv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001C000
Closing open log file c:\debuglog.txt

BC AdBot (Login to Remove)

 


#2 caperjac

caperjac

  • Members
  • 1,649 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NS. CAN
  • Local time:03:02 PM

Posted 01 January 2012 - 08:39 AM

check ram with memtest86 ,download the iso for windows and burn it to cd to use to boot the program from cdrom and scan for ram error .let it run for at least 5 or 6 hrs [that's my opinion ] if you have multiple sticks of ram installed and memtest finds errors you will need to do the scan on one ram stick at a time to find the bad one . ,good luck
http://www.memtest86.com/

Edited by caperjac, 01 January 2012 - 08:41 AM.

My answers are my opinion only,usually


#3 Baltboy

Baltboy

    Bleepin' Flame Head


  • Members
  • 1,432 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pennsylvania
  • Local time:02:02 PM

Posted 01 January 2012 - 10:01 AM

It is possible that it is a memory error and it would be good to rule that out. Usually I find that blue screen is a result of a program usually a driver of some sort trying to write information to an incorrect portion of memory. If you have recently upgraded any drivers or programs they are the first things I would suspect. It can also be caused by a recently corrupted driver which can be some what harder to figure out I had the same error on a PC and had to download the Microsoft Debug tools and use the debugger on the mini dump to find the real culprit which ended up being a audio driver which had corrupted.
Get your facts first, then you can distort them as you please.
Mark Twain

#4 caperjac

caperjac

  • Members
  • 1,649 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NS. CAN
  • Local time:03:02 PM

Posted 01 January 2012 - 12:02 PM

Opened log file 'c:\debuglog.txt'
5: kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Expanded Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
5: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q
Loading Kernel Symbols
====================


i thought that the above was the start of microsfts debugging tool

My answers are my opinion only,usually


#5 Baltboy

Baltboy

    Bleepin' Flame Head


  • Members
  • 1,432 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pennsylvania
  • Local time:02:02 PM

Posted 01 January 2012 - 08:14 PM

The file opened is debuglog.txt. Only basic information is stored in this file during a bluescreen event. The actual mini dump files are like mini013011.dmp when you run them in the debugger it is like working your way throught the crash you can see exactly what file triggers the wmi file to cause the error since it is just like debugging a software programs using break points and such. It is not 100% full proof but the more minidumps you have the greater your chances of success.
Get your facts first, then you can distort them as you please.
Mark Twain




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users