Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Blue Screen WIN7 Pro Toshiba Portege 700


  • Please log in to reply
2 replies to this topic

#1 claus.michelfelder@c

claus.michelfelder@c

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:03:15 AM

Posted 22 June 2012 - 02:15 AM

My system is WIN 7 Professional 64 bit on Toshiba Portege 700.
I work in an exchange server environment and have some issues with access to offline file folders and exchange outlook - user names and passwords sometimes have to be reentered and sometimes dont lead to access of in particular offline files online. Machine seems to do bluescreen and restart 6x in last 4 weeks mainly when it was idle/ went idle.

Here is the copy from my Debug Minidump, please help identify and cure my problem.

Microsoft ® Windows Debugger Version 6.2.8400.0 AMD64
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\062112-15709-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Machine Name:
Kernel base = 0xfffff800`03059000 PsLoadedModuleList = 0xfffff800`0329d670
Debug session time: Thu Jun 21 22:47:38.386 2012 (UTC + 2:00)
System Uptime: 0 days 0:25:55.432
Loading Kernel Symbols
...............................................................
................................................................
....................................................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {5003, fffff781c0000000, 2ec2b, 2ec2e0005d858}

Probably caused by : csc.sys ( csc!CscStorepLowIoReadWriteFileIrp+513 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000005003, The subtype of the bugcheck.
Arg2: fffff781c0000000
Arg3: 000000000002ec2b
Arg4: 0002ec2e0005d858

Debugging Details:
------------------


BUGCHECK_STR: 0x1a_5003

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT

PROCESS_NAME: svchost.exe

CURRENT_IRQL: 0

TRAP_FRAME: fffff88008a9a220 -- (.trap 0xfffff88008a9a220)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8a02f808000 rbx=0000000000000000 rcx=fffff8a02f808000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800163ff50 rsp=fffff88008a9a3b8 rbp=fffff88008a9a7e0
r8=0000000000000000 r9=00000000000001f5 r10=fffff88008a9a538
r11=fffff88008a9a5c0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po cy
Ntfs!memset+0x80:
fffff880`0163ff50 488911 mov qword ptr [rcx],rdx ds:fffff8a0`2f808000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER: from fffff8000313faec to fffff800030d81c0

STACK_TEXT:
fffff880`08a99eb8 fffff800`0313faec : 00000000`0000001a 00000000`00005003 fffff781`c0000000 00000000`0002ec2b : nt!KeBugCheckEx
fffff880`08a99ec0 fffff800`030f51ae : 00000000`00000001 fffff8a0`2f808000 fffff880`08a9a220 fffff6fc`5017c040 : nt! ?? ::FNODOBFM::`string'+0x29dcf
fffff880`08a99fb0 fffff800`030e520b : fffff800`0325d940 fffff800`031f08c1 fffff800`0324ae80 fffffa80`06c62605 : nt!MiDispatchFault+0x8ce
fffff880`08a9a0c0 fffff800`030d62ee : 00000000`00000001 fffff8a0`2f808000 fffffa80`09d42c00 00000000`00000000 : nt!MmAccessFault+0xe1b
fffff880`08a9a220 fffff880`0163ff50 : fffff880`0176c459 00000000`00000000 fffff880`08a9a7e0 fffff880`08a9a5c0 : nt!KiPageFault+0x16e
fffff880`08a9a3b8 fffff880`0176c459 : 00000000`00000000 fffff880`08a9a7e0 fffff880`08a9a5c0 00000000`00000000 : Ntfs!memset+0x80
fffff880`08a9a3c0 fffff880`016bf3e2 : fffff880`08a9a5c0 fffffa80`14e56010 fffff8a0`2f7f9300 fffff8a0`2f7f9100 : Ntfs!NtfsCommonQueryEa+0x339
fffff880`08a9a520 fffff880`016bfb14 : fffff880`08a9a5c0 fffffa80`14e56010 fffffa80`14e56440 fffffa80`1578ed00 : Ntfs!NtfsFsdDispatchSwitch+0x1a2
fffff880`08a9a5a0 fffff880`01498bcf : fffff880`08a9a840 fffff880`01499329 fffff880`08a9a800 fffff800`03203107 : Ntfs!NtfsFsdDispatchWait+0x14
fffff880`08a9a790 fffff880`014976df : fffffa80`099868e0 00000000`00000001 fffffa80`09986800 fffffa80`14e56010 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`08a9a820 fffff800`033dbeab : 00000000`00000002 fffffa80`10a65ea0 00000000`00000001 fffffa80`14e56010 : fltmgr!FltpDispatch+0xcf
fffff880`08a9a880 fffff800`0353cb41 : 00000000`00000000 00000000`00000000 fffffa80`10a65ea0 fffff800`0324ae80 : nt!IopSynchronousServiceTail+0xfb
fffff880`08a9a8f0 fffff800`030d7453 : fffffa80`0b231940 fffff880`08a9abe8 fffff8a0`2f808000 fffff880`00007d40 : nt!NtQueryEaFile+0x79c
fffff880`08a9a9c0 fffff800`030d3a10 : fffff880`047654a3 00000000`25407343 fffff8a0`2f808000 00000000`00000002 : nt!KiSystemServiceCopyEnd+0x13
fffff880`08a9abc8 fffff880`047654a3 : 00000000`25407343 fffff8a0`2f808000 00000000`00000002 fffff800`030f81d6 : nt!KiServiceLinkage
fffff880`08a9abd0 fffff880`0476452c : ffffffff`80011de4 fffff880`08a9ae48 fffff880`0476540c 00000000`000000d6 : csc!CscStorepLowIoReadWriteFileIrp+0x513
fffff880`08a9ac70 fffff880`0476d8b2 : ffffffff`80011de4 00000000`00007d40 00000000`00000000 fffff880`08a9c000 : csc!CscStorepLowIoInitialize+0x2f4
fffff880`08a9acf0 fffff880`04769c07 : 00000000`00000000 fffff8a0`1a246580 00000000`00000001 00000000`000007ff : csc!CscEaSystemIoQueryEaFile+0x92
fffff880`08a9adb0 fffff880`04769a44 : ffffffff`80011de4 ffffffff`00000000 fffff880`08a9af20 fffff8a0`2f7f9cb0 : csc!CscEaReadEaListWithBuffer+0x147
fffff880`08a9ae40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : csc!CscEaReadFixedSizeEa+0x94


STACK_COMMAND: kb

FOLLOWUP_IP:
csc!CscStorepLowIoReadWriteFileIrp+513
fffff880`047654a3 498bcf mov rcx,r15

SYMBOL_STACK_INDEX: f

SYMBOL_NAME: csc!CscStorepLowIoReadWriteFileIrp+513

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: csc

IMAGE_NAME: csc.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4ce79470

FAILURE_BUCKET_ID: X64_0x1a_5003_csc!CscStorepLowIoReadWriteFileIrp+513

BUCKET_ID: X64_0x1a_5003_csc!CscStorepLowIoReadWriteFileIrp+513

Followup: MachineOwner
---------

BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:06:15 PM

Posted 22 June 2012 - 02:40 AM

This may show us more details -

Please download BlueScreenView (in zip file)
  • Extract (right-click > Extract all) the contents of bluescreenview.zip.
  • Double-click on the BlueScreenView.exe file, to run the program. (No installation is required.)
  • When scanning is done (usually complete by the time the interface appears), go ...
  • Edit > Select All
  • File > Save Selected Items, and save the report to your Desktop as BSOD.txt.
  • Close the BlueScreenView window... ... ...
  • Open BSOD.txt using Notepad and go ... .... ..
  • Edit > Select All
  • Edit > Copy, and then paste the entire contents of the text file into your next reply.

Thank You -

#3 hamluis

hamluis

    Moderator


  • Moderator
  • 56,109 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:03:15 AM

Posted 22 June 2012 - 02:37 PM

Worth reading:

http://answers.microsoft.com/en-us/windows/forum/windows_7-system/bluescreen-rdrfilesystem-0x00000027-cscsys/ec5edb75-5c55-47ba-8376-b2fd0baa0a63

http://social.technet.microsoft.com/Forums/en-US/w7itpronetworking/thread/e4802883-03e1-467f-b152-c15ef5b7851b/

Bugcheck 1A is just a generic "something is wrong" error notification, it's of no help, IMO. But...you could run a check of each RAM module, suing something like Memtest86+ .

Memtest86+ - Advanced Memory Diagnostic Tool - http://www.memtest.org/#downiso

Memtest86+ Guide-How To's - Overclockers Forums - http://www.overclockers.com/forums/showthread.php?t=409152

Louis




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users