TechSpot

Blue screen 0x00000050 can any one help??

By allsigns
Jun 15, 2006
  1. Hi can any one help, i have a Blue screen error on shutdown of log off the main user, it logs of network and then says saving your settings and then i get the blue screen error code :

    STOP : 0x00000050 (0xfffffff0, 0x00000000, 0x8054a51a, 0x00000000) PAGE_FAULT_IN_NONPAGED_AREA

    our system is a Dell Optiplex SX280 see spec attached i have also attached a minidump, i found a program that read the minidump but some one has deleted it and i cant remember where i got it from, the most recent dump is attached as a zip

    i have done a system restore point, general tidy of drive, tested memory, changed memory, and motherboard, done allsorts, i have ran a reg checker and it blue screen at deep clean, here is a debugger :

    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.6.0003.5
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Documents and Settings\NAME\Desktop\user.dmp]
    User Mini Dump File: Only registers, stack and portions of memory are available

    Comment: 'Dr. Watson generated MiniDump'
    Windows XP Version 2600 (Service Pack 2) UP Free x86 compatible
    Product: WinNt, suite: SingleUserTS
    Debug session time: Tue Sep 27 09:32:40.000 2005 (GMT+1) (Date wrong on pc sorry)
    System Uptime: not available
    Process Uptime: 0 days 0:00:02.000
    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    .........................................
    This dump file has an exception of interest stored in it.
    The stored exception information can be accessed via .ecxr.
    (298.2f8): Access violation - code c0000005 (first/second chance not available)
    eax=00000000 ebx=00c40020 ecx=7c91056d edx=00000040 esi=76c630e0 edi=0012926c
    eip=7c91389e esp=00befb08 ebp=00befb0c iopl=0 nv up ei pl zr na po nc
    cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
    ntdll!_wcsicmp+0xe:
    7c91389e 668b02 mov ax,[edx] ds:0023:00000040=????
    0:007> !analyze -v;r;kv;lmtn;.logclose;q
    ********************************************************************** *********
    * *
    * Exception Analysis *
    * *
    ********************************************************************** *********


    FAULTING_IP:
    ntdll!_wcsicmp+e
    7c91389e 668b02 mov ax,[edx]

    EXCEPTION_RECORD: ffffffff -- (.exr ffffffffffffffff)
    .exr ffffffffffffffff
    ExceptionAddress: 7c91389e (ntdll!_wcsicmp+0x0000000e)
    ExceptionCode: c0000005 (Access violation)
    ExceptionFlags: 00000000
    NumberParameters: 2
    Parameter[0]: 00000000
    Parameter[1]: 00000040
    Attempt to read from address 00000040

    PROCESS_NAME: winlogon.exe

    ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

    READ_ADDRESS: 00000040

    BUGCHECK_STR: ACCESS_VIOLATION

    DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE

    LAST_CONTROL_TRANSFER: from 76c6c4e4 to 7c91389e

    STACK_TEXT:
    00befb0c 76c6c4e4 00000040 76c630e0 00000000 ntdll!_wcsicmp+0xe
    00befb38 76c6faf7 7c80ac28 00000000 76bb0000 sfc_os!SfcBuildDirectoryWatchList+0x1e9
    00befd78 01030198 00000000 00000000 00000000 sfc_os!SfcInitProt+0x715
    00beffb4 7c80b50b 00000000 00000018 00003000 winlogon!InitializeSfc+0x97
    00beffec 00000000 01030101 00000000 00000000 kernel32!BaseThreadStart+0x37


    STACK_COMMAND: ~7s; .ecxr ; kb

    FOLLOWUP_IP:
    sfc_os!SfcBuildDirectoryWatchList+1e9
    76c6c4e4 85c0 test eax,eax

    SYMBOL_STACK_INDEX: 1

    FOLLOWUP_NAME: MachineOwner

    SYMBOL_NAME: sfc_os!SfcBuildDirectoryWatchList+1e9

    MODULE_NAME: sfc_os

    IMAGE_NAME: sfc_os.dll

    DEBUG_FLR_IMAGE_TIMESTAMP: 411096b3

    FAILURE_BUCKET_ID: ACCESS_VIOLATION_sfc_os!SfcBuildDirectoryWatchList+1e9

    BUCKET_ID: ACCESS_VIOLATION_sfc_os!SfcBuildDirectoryWatchList+1e9

    Followup: MachineOwner
    ---------

    eax=00000000 ebx=00c40020 ecx=7c91056d edx=00000040 esi=76c630e0 edi=0012926c
    eip=7c91389e esp=00befb08 ebp=00befb0c iopl=0 nv up ei pl zr na po nc
    cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
    ntdll!_wcsicmp+0xe:
    7c91389e 668b02 mov ax,[edx] ds:0023:00000040=????
    ChildEBP RetAddr Args to Child
    00befb0c 76c6c4e4 00000040 76c630e0 00000000 ntdll!_wcsicmp+0xe (FPO: [Non-Fpo])
    00befb38 76c6faf7 7c80ac28 00000000 76bb0000 sfc_os!SfcBuildDirectoryWatchList+0x1e9 (FPO: [Non-Fpo])
    00befd78 01030198 00000000 00000000 00000000 sfc_os!SfcInitProt+0x715 (FPO: [Non-Fpo])
    00beffb4 7c80b50b 00000000 00000018 00003000 winlogon!InitializeSfc+0x97 (FPO: [Non-Fpo])
    00beffec 00000000 01030101 00000000 00000000 kernel32!BaseThreadStart+0x37 (FPO: [Non-Fpo])
    start end module name
    01000000 01080000 winlogon winlogon.exe Wed Aug 04 07:14:52 2004 (41107EDC)
    20000000 20017000 odbcint odbcint.dll Wed Aug 04 08:57:25 2004 (411096E5)
    5ad70000 5ada8000 uxtheme uxtheme.dll Wed Aug 04 08:56:43 2004 (411096BB)
    5b860000 5b8b4000 netapi32 netapi32.dll Wed Aug 04 08:56:28 2004 (411096AC)
    5d090000 5d127000 comctl32 comctl32.dll Wed Aug 04 08:56:31 2004 (411096AF)
    71aa0000 71aa8000 ws2help ws2help.dll Wed Aug 04 08:57:39 2004 (411096F3)
    71ab0000 71ac7000 ws2_32 ws2_32.dll Wed Aug 04 08:57:38 2004 (411096F2)
    723d0000 723ec000 winscard winscard.dll Wed Aug 04 08:56:36 2004 (411096B4)
    74320000 7435d000 odbc32 odbc32.dll Wed Aug 04 08:57:17 2004 (411096DD)
    75930000 7593a000 profmap profmap.dll Wed Aug 04 08:56:55 2004 (411096C7)
    75940000 75948000 nddeapi nddeapi.dll Wed Aug 04 08:56:24 2004 (411096A8)
    75970000 75a67000 msgina msgina.dll Wed Aug 04 08:58:01 2004 (41109709)
    76360000 76370000 winsta winsta.dll Wed Aug 04 08:56:40 2004 (411096B8)
    763b0000 763f9000 comdlg32 comdlg32.dll Wed Aug 04 08:56:32 2004 (411096B0)
    769c0000 76a73000 userenv userenv.dll Wed Aug 04 08:56:41 2004 (411096B9)
    76bb0000 76bb5000 sfc sfc.dll Wed Aug 04 08:56:34 2004 (411096B2)
    76bc0000 76bcf000 regapi regapi.dll Wed Aug 04 08:56:40 2004 (411096B8)
    76bf0000 76bfb000 psapi psapi.dll Wed Aug 04 08:56:58 2004 (411096CA)
    76c30000 76c5e000 wintrust wintrust.dll Wed Aug 04 08:56:41 2004 (411096B9)
    76c60000 76c8a000 sfc_os sfc_os.dll Wed Aug 04 08:56:35 2004 (411096B3)
    76c90000 76cb8000 imagehlp imagehlp.dll Wed Aug 04 08:56:25 2004 (411096A9)
    76f50000 76f58000 wtsapi32 wtsapi32.dll Wed Aug 04 08:57:55 2004 (41109703)
    773d0000 774d2000 comctl32_773d0000 comctl32.dll Wed Aug 04 08:55:56 2004 (4110968C)
    774e0000 7761c000 ole32 ole32.dll Wed Aug 04 08:57:38 2004 (411096F2)
    776c0000 776d1000 authz authz.dll Wed Aug 04 08:57:05 2004 (411096D1)
    776e0000 77703000 shsvcs shsvcs.dll Wed Aug 04 08:56:47 2004 (411096BF)
    77920000 77a13000 setupapi setupapi.dll Wed Aug 04 08:56:32 2004 (411096B0)
    77a80000 77b14000 crypt32 crypt32.dll Wed Aug 04 08:56:01 2004 (41109691)
    77b20000 77b32000 msasn1 msasn1.dll Wed Aug 04 08:57:23 2004 (411096E3)
    77b40000 77b62000 apphelp apphelp.dll Wed Aug 04 08:56:36 2004 (411096B4)
    77c00000 77c08000 version version.dll Wed Aug 04 08:56:39 2004 (411096B7)
    77c10000 77c68000 msvcrt msvcrt.dll Wed Aug 04 08:59:14 2004 (41109752)
    77d40000 77dd0000 user32 user32.dll Wed Aug 04 08:56:40 2004 (411096B8)
    77dd0000 77e6b000 advapi32 advapi32.dll Wed Aug 04 08:56:23 2004 (411096A7)
    77e70000 77f01000 rpcrt4 rpcrt4.dll Wed Aug 04 08:56:30 2004 (411096AE)
    77f10000 77f56000 gdi32 gdi32.dll Wed Aug 04 08:56:07 2004 (41109697)
    77f60000 77fd6000 shlwapi shlwapi.dll Thu Mar 10 08:02:34 2005 (422FFF1A)
    77fe0000 77ff1000 secur32 secur32.dll Wed Aug 04 08:56:49 2004 (411096C1)
    7c800000 7c8f4000 kernel32 kernel32.dll Wed Aug 04 08:56:36 2004 (411096B4)
    7c900000 7c9b0000 ntdll ntdll.dll Wed Aug 04 08:56:36 2004 (411096B4)
    7c9c0000 7d1d4000 shell32 shell32.dll Wed Aug 04 08:56:39 2004 (411096B7)
    Closing open log file c:\debuglog.txt
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...