Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

MiniDump Report


  • Please log in to reply
4 replies to this topic

#1 bigadatank

bigadatank

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:03:44 AM

Posted 26 January 2012 - 10:43 PM

Greetings one and all,

I am getting some minidumps here recently when running Malwarebytes Full Scan but not when running the Quick Scan. I am also getting a minidump when running my Avast quick scan which is what today's MiniDump Report is from. Any help would be greatly appreciated. Running 32-bit Win 7 Ultimate (upgrade from Vista) Service Pack 1. I have also ran sfc/scannow with no integrity issues.

Microsoft ® Windows Debugger Version 6.12.0002.633 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\012612-28376-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Machine Name:
Kernel base = 0x82a37000 PsLoadedModuleList = 0x82b804d0
Debug session time: Thu Jan 26 19:21:54.807 2012 (UTC - 6:00)
System Uptime: 0 days 20:47:10.789
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
............
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in. Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: 8cec5878, lock type that was held (value 1,2,3, or PTE address)
Arg2: c0000185, error status (normally i/o status code)
Arg3: b1646864, current process (virtual address for lock type 3, or PTE)
Arg4: 9a7d95a3, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)

Debugging Details:
------------------

Unable to load image \SystemRoot\System32\win32k.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys

ERROR_CODE: (NTSTATUS) 0xc0000185 - The I/O device reported an I/O error.

DISK_HARDWARE_ERROR: There was error with disk hardware

BUGCHECK_STR: 0x7a_c0000185

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

PROCESS_NAME: csrss.exe

CURRENT_IRQL: 0

TRAP_FRAME: 81f47be0 -- (.trap 0xffffffff81f47be0)
ErrCode = 00000010
eax=00000001 ebx=0000000f ecx=00010004 edx=00010003 esi=00000000 edi=00000000
eip=9a7d95a3 esp=81f47c54 ebp=81f47c60 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
win32k+0x1095a3:
9a7d95a3 ?? ???
Resetting default scope

LAST_CONTROL_TRANSFER: from 82adae28 to 82b15ef4

STACK_TEXT:
81f47a44 82adae28 0000007a 8cec5878 c0000185 nt!KeBugCheckEx+0x1e
81f47ab4 82ade709 81f47b08 8fcb3d70 81f47b28 nt!MiWaitForInPageComplete+0x302
81f47b44 82ac796b 8fcb3d70 9a7d95a3 85594e00 nt!MiIssueHardFault+0x3b3
81f47bc8 82a78408 00000008 9a7d95a3 00000000 nt!MmAccessFault+0x2656
81f47bc8 9a7d95a3 00000008 9a7d95a3 00000000 nt!KiTrap0E+0xdc
WARNING: Stack unwind information not available. Following frames may be wrong.
81f47c50 9a7db667 fe80d568 fe80d568 81f47c6c win32k+0x1095a3
81f47c60 9a84fe70 fe80d568 81f47c94 9a79b255 win32k+0x10b667
81f47c6c 9a79b255 fe80d568 00000001 ffb53190 win32k+0x17fe70
81f47c94 9a792df8 00000000 00000118 00007ffe win32k+0xcb255
81f47cc8 9a6dd3fb 00000004 016efe30 9a7a3c2a win32k+0xc2df8
81f47d04 9a6ed7b7 00000004 00000002 81f6b400 win32k+0xd3fb
81f47d18 9a7a3c45 00000004 016efe30 81f47d34 win32k+0x1d7b7
81f47d28 82a7521a 00000004 016efe70 776c70b4 win32k+0xd3c45
81f47d28 776c70b4 00000004 016efe70 776c70b4 nt!KiFastCallEntry+0x12a
016efe70 00000000 00000000 00000000 00000000 0x776c70b4


STACK_COMMAND: kb

FOLLOWUP_IP:
win32k+1095a3
9a7d95a3 ?? ???

SYMBOL_STACK_INDEX: 5

SYMBOL_NAME: win32k+1095a3

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 0

FAILURE_BUCKET_ID: 0x7a_c0000185_win32k+1095a3

BUCKET_ID: 0x7a_c0000185_win32k+1095a3

Followup: MachineOwner
---------

1: kd> .trap 0xffffffff81f47be0
ErrCode = 00000010
eax=00000001 ebx=0000000f ecx=00010004 edx=00010003 esi=00000000 edi=00000000
eip=9a7d95a3 esp=81f47c54 ebp=81f47c60 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
win32k+0x1095a3:
9a7d95a3 ?? ???




Thank you in advance!

--A

BC AdBot (Login to Remove)

 


#2 Allan

Allan

  • BC Advisor
  • 8,589 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:05:44 AM

Posted 27 January 2012 - 08:18 AM

If the problems occur only when running scans for malware, I suggest you post in the Am I Infected forum.

#3 bigadatank

bigadatank
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:03:44 AM

Posted 27 January 2012 - 12:30 PM

Will do, thank you. I tried to look to see if I could delete this thread but couldn't figure out a way.

#4 Allan

Allan

  • BC Advisor
  • 8,589 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:05:44 AM

Posted 27 January 2012 - 07:25 PM

No problem - don't worry about

#5 hamluis

hamluis

    Moderator


  • Moderator
  • 55,727 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:04:44 AM

Posted 28 January 2012 - 09:19 AM

<<ERROR_CODE: (NTSTATUS) 0xc0000185 - The I/O device reported an I/O error.>>

I would check all connections to/from hard drive.

I would also review Event Viewer errors...looking for any which indicate an I/O or hard drive problem.

Louis




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users