TechSpot

Need help in reading minidump file

By nareshreddym
Jun 28, 2010
  1. Hi Can someone please check the attached minidump file, I tried using "dumpchk" and "windbg" Both are not working

    Could not open dump file [C:\WINDOWS\Minidump1\Mini062810-01.dmp], Win32 error 0
    n1392
    "The file or directory is corrupted and unreadable."
    **** DebugClient cannot open DumpFile - error 80070570
    DumpFile is corrupt
     

    Attached Files:

  2. Archean

    Archean TechSpot Paladin Posts: 5,682   +86

    All three of your dumps are corrupted hence I am unable to have a look.

    Have you taken time to look at Event Viewer Logs and check whether it have recorded something meaningful about your issues?
     
  3. nareshreddym

    nareshreddym TS Rookie Topic Starter

    Archean, Thanks so much for the reply,
    I can reproduce this error again, is there anything I can do to get non corrupted dumpfiles?

    I have checked the event logs around the time I got the blue screen.
    I found the following Errors.
    Event Type: Error
    Event Source: Dhcp
    Event Category: None
    Event ID: 1000
    Date: 6/28/2010
    Time: 9:28:08 AM
    User: N/A
    Computer: CCHL-366076
    Description:
    Your computer has lost the lease to its IP address 172.24.14.126 on the Network Card with network address 001644CB0B9D.


    Event Type: Error
    Event Source: W32Time
    Event Category: None
    Event ID: 29
    Date: 6/28/2010
    Time: 9:28:32 AM
    User: N/A
    Computer: CCHL-366076
    Description:
    The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

    Event Type: Warning
    Event Source: W32Time
    Event Category: None
    Event ID: 14
    Date: 6/28/2010
    Time: 9:28:32 AM
    User: N/A
    Computer: CCHL-366076
    Description:
    The time provider NtpClient was unable to find a domain controller to use as a time source. NtpClient will try again in 15 minutes.

    Event Type: Information
    Event Source: Save Dump
    Event Category: None
    Event ID: 1001
    Date: 6/28/2010
    Time: 9:30:13 AM
    User: N/A
    Computer: CCHL-366076
    Description:
    The computer has rebooted from a bugcheck. The bugcheck was: 0x1000000a (0x0062004a, 0x00000002, 0x00000000, 0x804f1600). A dump was saved in: C:\WINDOWS\Minidump1\Mini062810-01.dmp.


    After dumpsave I found few more errors but I believe I need to look for errors before the dumpsave..I am I correct?

    Event Type: Error
    Event Source: System Error
    Event Category: (102)
    Event ID: 1003
    Date: 6/28/2010
    Time: 9:39:15 AM
    User: N/A
    Computer: CCHL-366076
    Description:
    Error code 1000000a, parameter1 0062004a, parameter2 00000002, parameter3 00000000, parameter4 804f1600.


    Data:
    0000: 53 79 73 74 65 6d 20 45 System E
    0008: 72 72 6f 72 20 20 45 72 rror Er
    0010: 72 6f 72 20 63 6f 64 65 ror code
    0018: 20 31 30 30 30 30 30 30 1000000
    0020: 61 20 20 50 61 72 61 6d a Param
    0028: 65 74 65 72 73 20 30 30 eters 00
    0030: 36 32 30 30 34 61 2c 20 62004a,
    0038: 30 30 30 30 30 30 30 32 00000002
    0040: 2c 20 30 30 30 30 30 30 , 000000
    0048: 30 30 2c 20 38 30 34 66 00, 804f
    0050: 31 36 30 30 1600



    Is there anything specific I need to look?? Do you see anything suspicious?

    Thanks in advance
    -Naresh
     
  4. Archean

    Archean TechSpot Paladin Posts: 5,682   +86

    Check your RAM with memtest, let it run for minimum of 8 passes and see whether it catches any errors.
     
  5. nareshreddym

    nareshreddym TS Rookie Topic Starter

    Thanks again for the reply.
    I will run the memtest tonight and update you.
    I did some more troubleshooting and found that the following event is common for most of my BLUE screen errors
    Event Type: Error
    Event Source: Dhcp
    Event Category: None
    Event ID: 1000
    Date: 6/28/2010
    Time: 9:28:08 AM
    User: N/A
    Computer: CCHL-366076
    Description:
    Your computer has lost the lease to its IP address 172.24.14.126 on the Network Card with network address 001644CB0B9D

    Any idea what causes this?
     
  6. Archean

    Archean TechSpot Paladin Posts: 5,682   +86

    It means your PC is obtaining IP address from an DHCP server (on your home or work network); and it is being leased to your PC for specific period, once the lease passed that period it stand expired. Hence the need for new lease of IP. If you can provide us with your network setup we will be in better position to help; usually on small setups I think using static IP is more appropriate though.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...