TechSpot

Invalid_kernel_handle (93)

By Drausus
Jan 4, 2007
  1. Hello, Yesterday i got a Blue Screen with:
    INVALID_KERNEL_HANDLE (93)
    At the time i was watching a .AVI on WMP11 and went to my display Properties>Screen Saver> then clicked the power button, as soon as i did that i got a blue screen, this is the first time in about 1 year that iv had this happen...
    i have included my Bugcheck Analysis...can anyone tell me what happened?
    I am not to good at pc's, but i am trying:(



    Loading Dump File [C:\WINDOWS\Minidump\Mini010307-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: C:\Symbols
    Executable search path is:
    Unable to load image ntoskrnl.exe, Win32 error 2
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
    Debug session time: Wed Jan 3 12:38:25.609 2007 (GMT+0)
    System Uptime: 0 days 6:47:16.202
    Unable to load image ntoskrnl.exe, Win32 error 2
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    Loading Kernel Symbols
    .........................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    ...............
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 93, {83, 0, 0, 0}

    Probably caused by : ntoskrnl.exe ( nt!FsRtlRemoveMcbEntryPrivate+68 )

    Followup: MachineOwner
    ---------

    kd> !analyze -v
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    INVALID_KERNEL_HANDLE (93)
    This message occurs if kernel code (server, redirector, other driver, etc.)
    attempts to close a handle that is not a valid handle.
    Arguments:
    Arg1: 00000083, The handle that NtClose was called with.
    Arg2: 00000000, means a protected handle was closed.
    Arg3: 00000000
    Arg4: 00000000

    Debugging Details:
    ------------------


    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0x93

    PROCESS_NAME: rundll32.exe

    LAST_CONTROL_TRANSFER: from 805b04e3 to 804f8925

    STACK_TEXT:
    a77534a8 805b04e3 00000093 00000083 00000000 nt!FsRtlRemoveMcbEntryPrivate+0x68
    a77534d4 805b05dd e478a978 e46e9838 00000083 nt!CmpOpenHiveFiles+0x33a
    a775351c 805b0715 00000083 00000000 00000000 nt!CmpInitHiveFromFile+0x48
    a7753530 8053c808 00000083 a77535c4 804fd479 nt!CmpPrefetchHiveFile+0x1a
    a775353c 804fd479 badb0d00 a77535b4 a7753934 nt!ObpPushStackInfo+0x75
    a77535c4 805bb460 a7753a10 00000001 00000001 nt!CcScheduleReadAhead+0xc4
    a77535dc 805be213 e4522900 a7753960 a77539ec nt!CmpCheckValueList+0x11a
    a7753944 8053c808 0000000a a7753a10 00000001 nt!IoInitializeCrashDump+0x46
    a7753960 804fdce9 badb0d00 a77539d8 805ec5fd nt!ObpPushStackInfo+0x75
    a7753d48 8053c808 0000000a 587f1f94 00000001 nt!FsRtlPrivateInsertSharedLock+0x20
    a7753d64 7c90eb94 badb0d00 0007e658 b72cad98 nt!ObpPushStackInfo+0x75
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    a7753d70 b72cad98 b72cadcc 00000000 00000000 0x7c90eb94
    a7753d74 b72cadcc 00000000 00000000 00000000 0xb72cad98
    a7753d78 00000000 00000000 00000000 00000000 0xb72cadcc


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    nt!FsRtlRemoveMcbEntryPrivate+68
    804f8925 5d pop ebp

    SYMBOL_STACK_INDEX: 0

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME: ntoskrnl.exe

    DEBUG_FLR_IMAGE_TIMESTAMP: 42250a1d

    SYMBOL_NAME: nt!FsRtlRemoveMcbEntryPrivate+68

    FAILURE_BUCKET_ID: 0x93_nt!FsRtlRemoveMcbEntryPrivate+68

    BUCKET_ID: 0x93_nt!FsRtlRemoveMcbEntryPrivate+68

    Followup: MachineOwner
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...