TechSpot

Random BSODs, Minidumps attached..

By Thriller
May 28, 2006
  1. ps. Debug data from the minidumps now posted in 3 following posts, plz help!

    My PC -

    AMD 4000+ San Diego
    DFI Expert
    2GB RAM, 2 sticks of 1GB each (OCZ4002048ELDCPE-K at default timings of 2-3-2-5)
    Geforce 6600GT
    Coolmax CXI-500B 500W SLI

    I've recently formatted and reinstalled Win XP x64 on my new PC on partition 1 and have Win XP x86 on partition 2. All drivers on Win XP x64 are WHQL ones only. I've ran memtest atleast 3-4 times for 10-18hrs each time with no errors showing up. I don't have any programs installed on my pc except for winrar , winamp & irfan view. Also I've installed the latest fixes for XP x64 (service pack 1). Thats all.

    I got BSOD the first time when i just tried to boot into Win X64, the 2nd time again it happened when i tried to boot into it and the 3rd time it happened when i tried to shut it down. (I get BSODs in Win XP 32bit version as well, but first i want to figure out the probs with the 64bit ones here).

    I've attached the dump files in the zipfile here, with the dump files being named after the order of their crashes (ie. 1, 2 & 3).

    Please check them and let me know whats causing these random BSODs. Your help will be greatly appreciated.
    Thanks.
     
  2. Thriller

    Thriller TS Rookie Topic Starter

    ps. I Debuged the minidumps which i've posted below, but I couldn't figure out the cause of the BSODs from these errors.

    Code:
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    KMODE_EXCEPTION_NOT_HANDLED (1e)
    This is a very common bugcheck.  Usually the exception address pinpoints
    the driver/function that caused the problem.  Always note this address
    as well as the link date of the driver/image that contains this address.
    Arguments:
    Arg1: ffffffffc000001d, The exception code that was not handled
    Arg2: fffff8000105865a, The address that the exception occurred at
    Arg3: 0000000000000000, Parameter 0 of the exception
    Arg4: 0000000000000000, Parameter 1 of the exception
    
    Debugging Details:
    ------------------
    
    Unable to load image Ntfs.sys, Win32 error 2
    *** WARNING: Unable to verify timestamp for Ntfs.sys
    
    OVERLAPPED_MODULE: Address regions for 'Fastfat' and 'imapi.sys' overlap
    
    EXCEPTION_CODE: (NTSTATUS) 0xc000001d - {EXCEPTION}  Illegal Instruction  An attempt was made to execute an illegal instruction.
    
    FAULTING_IP: 
    nt!MmProbeAndLockPages+1de
    fffff800`0105865a c58d65010f85     lds     rcx,[rbp+0x850f0165]
    
    EXCEPTION_PARAMETER1:  0000000000000000
    
    EXCEPTION_PARAMETER2:  0000000000000000
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  DRIVER_FAULT
    
    BUGCHECK_STR:  0x1E
    
    CURRENT_IRQL:  0
    
    LAST_CONTROL_TRANSFER:  from fffff8000109a361 to fffff80001041910
    
    FAILED_INSTRUCTION_ADDRESS: 
    nt!MmProbeAndLockPages+1de
    fffff800`0105865a c58d65010f85     lds     rcx,[rbp+0x850f0165]
    
    STACK_TEXT:  
    fffffadf`c886d718 fffff800`0109a361 : 00000000`0000001e ffffffff`c000001d fffff800`0105865a 00000000`00000000 : nt!MiFlushSectionInternal+0x18b
    fffffadf`c886d720 00000000`0000001e : ffffffff`c000001d fffff800`0105865a 00000000`00000000 00000000`00000000 : nt!KdPitchDebugger+0x2ab9
    fffffadf`c886d728 ffffffff`c000001d : fffff800`0105865a 00000000`00000000 00000000`00000000 fffffadf`c886d701 : 0x1e
    fffffadf`c886d730 fffff800`0105865a : 00000000`00000000 00000000`00000000 fffffadf`c886d701 00000000`00000000 : 0xffffffff`c000001d
    fffffadf`c886d738 00000000`00000000 : 00000000`00000000 fffffadf`c886d701 00000000`00000000 00000000`00000000 : nt!MmProbeAndLockPages+0x1de
    fffffadf`c886d740 00000000`00000000 : fffffadf`c886d701 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
    fffffadf`c886d748 fffffadf`c886d701 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
    fffffadf`c886d750 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffffadf`c886d701
    fffffadf`c82cc3a2 fffffadf`c886d690 00000001`00000000 : 0x0
    fffffadf`c886d800 00000000`00000000 : fffffadf`c82cc3a2 fffffadf`c886d690 00000001`00000000 fffffadf`c886dfa8 : 0x0
    fffffadf`c886d808 fffffadf`c82cc3a2 : fffffadf`c886d690 00000001`00000000 fffffadf`c886dfa8 fffffadf`c886dae0 : 0x0
    fffffadf`c886d810 fffffadf`c886d690 : 00000001`00000000 fffffadf`c886dfa8 fffffadf`c886dae0 fffffadf`c886daa0 : Ntfs!_NULL_IMPORT_DESCRIPTOR <PERF> (Ntfs+0x973a2)
    fffffadf`c886d818 00000001`00000000 : fffffadf`c886dfa8 fffffadf`c886dae0 fffffadf`c886daa0 fffffadf`cd19c1f0 : 0xfffffadf`c886d690
    fffffadf`c886d820 fffffadf`c886dfa8 : fffffadf`c886dae0 fffffadf`c886daa0 fffffadf`cd19c1f0 00000000`00000000 : 0x1`00000000
    fffffadf`c886d828 fffffadf`c886dae0 : fffffadf`c886daa0 fffffadf`cd19c1f0 00000000`00000000 00000000`00000000 : 0xfffffadf`c886dfa8
    fffffadf`c886d830 fffffadf`c886daa0 : fffffadf`cd19c1f0 00000000`00000000 00000000`00000000 00001f80`0010001f : 0xfffffadf`c886dae0
    fffffadf`c886d838 fffffadf`cd19c1f0 : 00000000`00000000 00000000`00000000 00001f80`0010001f 0053002b`002b0010 : 0xfffffadf`c886daa0
    fffffadf`c886d840 00000000`00000000 : 00000000`00000000 00001f80`0010001f 0053002b`002b0010 00010246`0000002b : 0xfffffadf`cd19c1f0
    fffffadf`c886d848 00000000`00000000 : 00001f80`0010001f 0053002b`002b0010 00010246`0000002b fffffadf`cd8ffbd0 : 0x0
    fffffadf`c886d850 00001f80`0010001f : 0053002b`002b0010 00010246`0000002b fffffadf`cd8ffbd0 00000000`00000000 : 0x0
    fffffadf`c886d858 0053002b`002b0010 : 00010246`0000002b fffffadf`cd8ffbd0 00000000`00000000 00000000`00000000 : 0x1f80`0010001f
    fffffadf`c886d860 00010246`0000002b : fffffadf`cd8ffbd0 00000000`00000000 00000000`00000000 00000000`00000000 : 0x53002b`002b0010
    fffffadf`c886d868 fffffadf`cd8ffbd0 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff800`01174180 : 0x10246`0000002b
    fffffadf`c886d870 00000000`00000000 : 00000000`00000000 00000000`00000000 fffff800`01174180 fffffadf`cd1ba050 : 0xfffffadf`cd8ffbd0
    fffffadf`c886d878 00000000`00000000 : 00000000`00000000 fffff800`01174180 fffffadf`cd1ba050 fffffadf`cd8ffbd0 : 0x0
    fffffadf`c886d880 00000000`00000000 : fffff800`01174180 fffffadf`cd1ba050 fffffadf`cd8ffbd0 fffffadf`cd943c20 : 0x0
    fffffadf`c886d888 fffff800`01174180 : fffffadf`cd1ba050 fffffadf`cd8ffbd0 fffffadf`cd943c20 00000000`021c0000 : 0x0
    fffffadf`c886d890 fffffadf`cd1ba050 : fffffadf`cd8ffbd0 fffffadf`cd943c20 00000000`021c0000 fffffadf`cd943c20 : nt!CmpRebuildSecurityCache+0x13
    fffffadf`c886d898 fffffadf`cd8ffbd0 : fffffadf`cd943c20 00000000`021c0000 fffffadf`cd943c20 fffffadf`c886e030 : 0xfffffadf`cd1ba050
    fffffadf`c886d8a0 fffffadf`cd943c20 : 00000000`021c0000 fffffadf`cd943c20 fffffadf`c886e030 00000000`00000002 : 0xfffffadf`cd8ffbd0
    fffffadf`c886d8a8 00000000`021c0000 : fffffadf`cd943c20 fffffadf`c886e030 00000000`00000002 00000000`021c0000 : 0xfffffadf`cd943c20
    fffffadf`c886d8b0 fffffadf`cd943c20 : fffffadf`c886e030 00000000`00000002 00000000`021c0000 00000000`00000000 : 0x21c0000
    fffffadf`c886d8b8 fffffadf`c886e030 : 00000000`00000002 00000000`021c0000 00000000`00000000 00000000`00000000 : 0xfffffadf`cd943c20
    fffffadf`c886d8c0 00000000`00000002 : 00000000`021c0000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffffadf`c886e030
    fffffadf`c886d8c8 00000000`021c0000 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff800`012caea0 : 0x2
    fffffadf`c886d8d0 00000000`00000000 : 00000000`00000000 00000000`00000000 fffff800`012caea0 00000000`00000000 : 0x21c0000
    fffffadf`c886d8d8 00000000`00000000 : 00000000`00000000 fffff800`012caea0 00000000`00000000 ffffffff`80000458 : 0x0
    fffffadf`c886d8e0 00000000`00000000 : fffff800`012caea0 00000000`00000000 ffffffff`80000458 00000000`00000000 : 0x0
    fffffadf`c886d8e8 fffff800`012caea0 : 00000000`00000000 ffffffff`80000458 00000000`00000000 00000000`00000000 : 0x0
    fffffadf`c886d8f0 00000000`00000000 : ffffffff`80000458 00000000`00000000 00000000`00000000 ffffffff`80000440 : nt!_NULL_IMPORT_DESCRIPTOR <PERF> (nt+0x2caea0)
    fffffadf`c886d8f8 ffffffff`80000458 : 00000000`00000000 00000000`00000000 ffffffff`80000440 fffff800`0105865a : 0x0
    fffffadf`c886d900 00000000`00000000 : 00000000`00000000 ffffffff`80000440 fffff800`0105865a fffffadf`cd18d540 : 0xffffffff`80000458
    fffffadf`c886d908 00000000`00000000 : ffffffff`80000440 fffff800`0105865a fffffadf`cd18d540 fffffadf`cdf668e0 : 0x0
    fffffadf`c886d910 ffffffff`80000440 : fffff800`0105865a fffffadf`cd18d540 fffffadf`cdf668e0 fffff980`05dad110 : 0x0
    fffffadf`c886d918 fffff800`0105865a : fffffadf`cd18d540 fffffadf`cdf668e0 fffff980`05dad110 00000000`00001000 : 0xffffffff`80000440
    fffffadf`c886d920 fffffadf`cd18d540 : fffffadf`cdf668e0 fffff980`05dad110 00000000`00001000 fffffa80`00419560 : nt!MmProbeAndLockPages+0x1de
    fffffadf`c886d928 fffffadf`cdf668e0 : fffff980`05dad110 00000000`00001000 fffffa80`00419560 00000000`00000001 : 0xfffffadf`cd18d540
    fffffadf`c886d930 fffff980`05dad110 : 00000000`00001000 fffffa80`00419560 00000000`00000001 fffffadf`c886da10 : 0xfffffadf`cdf668e0
    fffffadf`c886d938 00000000`00001000 : fffffa80`00419560 00000000`00000001 fffffadf`c886da10 fffff800`01036cdc : 0xfffff980`05dad110
    fffffadf`c886d940 fffffa80`00419560 : 00000000`00000001 fffffadf`c886da10 fffff800`01036cdc fffffadf`cdf66790 : 0x1000
    fffffadf`c886d948 00000000`00000001 : fffffadf`c886da10 fffff800`01036cdc fffffadf`cdf66790 fffffadf`cdf66790 : 0xfffffa80`00419560
    fffffadf`c886d950 fffffadf`c886da10 : fffff800`01036cdc fffffadf`cdf66790 fffffadf`cdf66790 fffffadf`ceab0cd0 : 0x1
    fffffadf`c886d958 fffff800`01036cdc : fffffadf`cdf66790 fffffadf`cdf66790 fffffadf`ceab0cd0 fffffadf`ce2fe820 : 0xfffffadf`c886da10
    fffffadf`c886d960 fffffadf`cdf66790 : fffffadf`cdf66790 fffffadf`ceab0cd0 fffffadf`ce2fe820 fffffa80`00374bf0 : nt!MiModifiedPageWriterWorker+0xb8
    fffffadf`c886d968 fffffadf`cdf66790 : fffffadf`ceab0cd0 fffffadf`ce2fe820 fffffa80`00374bf0 00000000`00001000 : 0xfffffadf`cdf66790
    
    
    STACK_COMMAND:  .bugcheck ; kb
    
    FOLLOWUP_IP: 
    nt!MmProbeAndLockPages+1de
    fffff800`0105865a c58d65010f85     lds     rcx,[rbp+0x850f0165]
    
    FAULTING_SOURCE_CODE:  
    
    
    SYMBOL_STACK_INDEX:  4
    
    FOLLOWUP_NAME:  MachineOwner
    
    SYMBOL_NAME:  nt!MmProbeAndLockPages+1de
    
    MODULE_NAME:  nt
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  42436096
    
    IMAGE_NAME:  memory_corruption
    
    FAILURE_BUCKET_ID:  X64_0x1E_BAD_IP_nt!MmProbeAndLockPages+1de
    
    BUCKET_ID:  X64_0x1E_BAD_IP_nt!MmProbeAndLockPages+1de
    
    Followup: MachineOwner
    ---------
    
     
  3. Thriller

    Thriller TS Rookie Topic Starter

    Code:
    kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    SYSTEM_SERVICE_EXCEPTION (3b)
    An exception happened while executing a system service routine.
    Arguments:
    Arg1: 00000000c0000005, Exception code that caused the bugcheck
    Arg2: fffff800012d2860, Address of the exception record for the exception that caused the bugcheck
    Arg3: fffffadfc89783c0, Address of the context record for the exception that caused the bugcheck
    Arg4: 0000000000000000, zero.
    
    Debugging Details:
    ------------------
    
    Unable to load image win32k.sys, Win32 error 2
    *** WARNING: Unable to verify timestamp for win32k.sys
    
    OVERLAPPED_MODULE: Address regions for 'Fastfat' and 'imapi.sys' overlap
    
    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
    
    FAULTING_IP: 
    nt!_NULL_IMPORT_DESCRIPTOR <PERF> (nt+0x2d2860)+0
    fffff800`012d2860 48899824b00000   mov     [rax+0xb024],rbx
    
    CONTEXT:  fffffadfc89783c0 -- (.cxr fffffadfc89783c0)
    rax=0000000000000000 rbx=fffffadfcd172040 rcx=00000000001f0fff
    rdx=0000000000000001 rsi=0000000000000000 rdi=fffffadfcd172040
    rip=fffff800012d2860 rsp=fffffadfc8978bd0 rbp=fffffadfc8978c00
     r8=fffffadfceadca00  r9=0000000000000001 r10=fffff800012d27f0
    r11=000000000025b770 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei pl zr na po nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
    nt!_NULL_IMPORT_DESCRIPTOR <PERF> (nt+0x2d2860):
    fffff800`012d2860 48899824b00000 mov [rax+0xb024],rbx ds:002b:00000000`0000b024=????????????????
    Resetting default scope
    
    CUSTOMER_CRASH_COUNT:  2
    
    DEFAULT_BUCKET_ID:  DRIVER_FAULT
    
    BUGCHECK_STR:  0x3B
    
    CURRENT_IRQL:  0
    
    LAST_CONTROL_TRANSFER:  from fffffadfc8978c70 to fffff800012d2860
    
    STACK_TEXT:  
    fffffadf`c8977a08 fffff800`01041634 : 00000000`0000003b 00000000`c0000005 fffff800`012d2860 fffffadf`c89783c0 : nt!MiFlushSectionInternal+0x18b
    fffffadf`c8977a10 00000000`0000003b : 00000000`c0000005 fffff800`012d2860 fffffadf`c89783c0 00000000`00000000 : nt!MiMapViewOfDataSection+0x676
    fffffadf`c8977a18 00000000`c0000005 : fffff800`012d2860 fffffadf`c89783c0 00000000`00000000 00001f80`02082250 : 0x3b
    fffffadf`c8977a20 fffff800`012d2860 : fffffadf`c89783c0 00000000`00000000 00001f80`02082250 00000000`00000000 : 0xc0000005
    fffffadf`c8977a28 fffffadf`c89783c0 : 00000000`00000000 00001f80`02082250 00000000`00000000 00000000`00000000 : nt!_NULL_IMPORT_DESCRIPTOR <PERF> (nt+0x2d2860)
    fffffadf`c8977a30 00000000`00000000 : 00001f80`02082250 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffffadf`c89783c0
    fffffadf`c8977ae0 00000000`77c38c00 : fffffadf`c8977c48 00000000`01460165 00000000`00000084 fffffa80`01fe65c0 : 0x0
    fffffadf`c8977ae8 fffffadf`c8977c48 : 00000000`01460165 00000000`00000084 fffffa80`01fe65c0 fffff97f`ff000000 : 0x77c38c00
    fffffadf`c8977af0 00000000`01460165 : 00000000`00000084 fffffa80`01fe65c0 fffff97f`ff000000 fffff97f`f7b40000 : 0xfffffadf`c8977c48
    fffffadf`c8977af8 00000000`00000084 : fffffa80`01fe65c0 fffff97f`ff000000 fffff97f`f7b40000 00000000`01460165 : 0x1460165
    fffffadf`c8977b00 fffffa80`01fe65c0 : fffff97f`ff000000 fffff97f`f7b40000 00000000`01460165 fffffa80`01fe65c0 : 0x84
    fffffadf`c8977b08 fffff97f`ff000000 : fffff97f`f7b40000 00000000`01460165 fffffa80`01fe65c0 fffff97f`ff0a70d4 : 0xfffffa80`01fe65c0
    fffffadf`c8977b10 fffff97f`f7b40000 : 00000000`01460165 fffffa80`01fe65c0 fffff97f`ff0a70d4 fffffa80`00000002 : win32k!CheckPwndFilter <PERF> (win32k+0x0)
    fffffadf`c8977b18 00000000`01460165 : fffffa80`01fe65c0 fffff97f`ff0a70d4 fffffa80`00000002 00000000`00000001 : 0xfffff97f`f7b40000
    fffffadf`c8977b20 fffffa80`01fe65c0 : fffff97f`ff0a70d4 fffffa80`00000002 00000000`00000001 fffff800`011b2344 : 0x1460165
    fffffadf`c8977b28 fffff97f`ff0a70d4 : fffffa80`00000002 00000000`00000001 fffff800`011b2344 fffff800`01000000 : 0xfffffa80`01fe65c0
    fffffadf`c8977b30 fffffa80`00000002 : 00000000`00000001 fffff800`011b2344 fffff800`01000000 fffffadf`c8978c70 : win32k!xxxActivateThisWindow+0x3ac
    fffffadf`c8977b38 00000000`00000001 : fffff800`011b2344 fffff800`01000000 fffffadf`c8978c70 00000000`c89789b0 : 0xfffffa80`00000002
    fffffadf`c8977b40 fffff800`011b2344 : fffff800`01000000 fffffadf`c8978c70 00000000`c89789b0 00000000`00000000 : 0x1
    fffffadf`c8977b48 fffff800`01000000 : fffffadf`c8978c70 00000000`c89789b0 00000000`00000000 fffffadf`c89789b0 : nt!NtRaiseHardError+0x15c
    fffffadf`c8977b50 fffffadf`c8978c70 : 00000000`c89789b0 00000000`00000000 fffffadf`c89789b0 fffff800`011b2344 : nt!_imp__VidInitialize <PERF> (nt+0x0)
    fffffadf`c8977b58 00000000`c89789b0 : 00000000`00000000 fffffadf`c89789b0 fffff800`011b2344 00000000`00000000 : 0xfffffadf`c8978c70
    fffffadf`c8977b60 00000000`00000000 : fffffadf`c89789b0 fffff800`011b2344 00000000`00000000 fffff800`01041422 : 0xc89789b0
    fffffadf`c8977b68 fffffadf`c89789b0 : fffff800`011b2344 00000000`00000000 fffff800`01041422 fffff800`0104113b : 0x0
    fffffadf`c8977b70 fffff800`011b2344 : 00000000`00000000 fffff800`01041422 fffff800`0104113b 00000000`000af798 : 0xfffffadf`c89789b0
    fffffadf`c8977b78 00000000`00000000 : fffff800`01041422 fffff800`0104113b 00000000`000af798 00000000`0000002b : nt!NtRaiseHardError+0x15c
    fffffadf`c8977b80 fffff800`01041422 : fffff800`0104113b 00000000`000af798 00000000`0000002b fffffadf`c8977cd0 : 0x0
    fffffadf`c8977b88 fffff800`0104113b : 00000000`000af798 00000000`0000002b fffffadf`c8977cd0 00000000`00000000 : nt!MiMapViewOfDataSection+0x10e
    fffffadf`c8977b90 00000000`000af798 : 00000000`0000002b fffffadf`c8977cd0 00000000`00000000 fffffadf`c8977e30 : nt!MiDispatchFault+0x40d
    fffffadf`c8977b98 00000000`0000002b : fffffadf`c8977cd0 00000000`00000000 fffffadf`c8977e30 fffff800`01041422 : 0xaf798
    fffffadf`c8977ba0 fffffadf`c8977cd0 : 00000000`00000000 fffffadf`c8977e30 fffff800`01041422 00000000`00000000 : 0x2b
    fffffadf`c8977ba8 00000000`00000000 : fffffadf`c8977e30 fffff800`01041422 00000000`00000000 fffff800`01058c3d : 0xfffffadf`c8977cd0
    fffffadf`c8977bb0 fffffadf`c8977e30 : fffff800`01041422 00000000`00000000 fffff800`01058c3d fffffadf`c89789b0 : 0x0
    fffffadf`c8977bb8 fffff800`01041422 : 00000000`00000000 fffff800`01058c3d fffffadf`c89789b0 00000000`c89789b0 : 0xfffffadf`c8977e30
    fffffadf`c8977bc0 00000000`00000000 : fffff800`01058c3d fffffadf`c89789b0 00000000`c89789b0 00000000`00000000 : nt!MiMapViewOfDataSection+0x10e
    fffffadf`c8977bc8 fffff800`01058c3d : fffffadf`c89789b0 00000000`c89789b0 00000000`00000000 fffffadf`c8978ac0 : 0x0
    fffffadf`c8977bd0 fffffadf`c89789b0 : 00000000`c89789b0 00000000`00000000 fffffadf`c8978ac0 fffffadf`c8977c80 : nt!MmProbeAndLockPages+0xc10
    fffffadf`c8977bd8 00000000`c89789b0 : 00000000`00000000 fffffadf`c8978ac0 fffffadf`c8977c80 fffff800`01030bb7 : 0xfffffadf`c89789b0
    fffffadf`c8977be0 00000000`00000000 : fffffadf`c8978ac0 fffffadf`c8977c80 fffff800`01030bb7 fffffadf`c8978bd0 : 0xc89789b0
    fffffadf`c8977be8 fffffadf`c8978ac0 : fffffadf`c8977c80 fffff800`01030bb7 fffffadf`c8978bd0 fffffadf`c8978ac0 : 0x0
    fffffadf`c8977bf0 fffffadf`c8977c80 : fffff800`01030bb7 fffffadf`c8978bd0 fffffadf`c8978ac0 00000000`00000000 : 0xfffffadf`c8978ac0
    fffffadf`c8977bf8 fffff800`01030bb7 : fffffadf`c8978bd0 fffffadf`c8978ac0 00000000`00000000 00000000`c89789b0 : 0xfffffadf`c8977c80
    fffffadf`c8977c00 fffffadf`c8978bd0 : fffffadf`c8978ac0 00000000`00000000 00000000`c89789b0 fffffadf`c8977cd0 : nt!CcCopyWrite+0x1d8
    fffffadf`c8977c08 fffffadf`c8978ac0 : 00000000`00000000 00000000`c89789b0 fffffadf`c8977cd0 fffffadf`c8977c70 : 0xfffffadf`c8978bd0
    fffffadf`c8977c10 00000000`00000000 : 00000000`c89789b0 fffffadf`c8977cd0 fffffadf`c8977c70 fffffadf`c8977c48 : 0xfffffadf`c8978ac0
    fffffadf`c8977c18 00000000`c89789b0 : fffffadf`c8977cd0 fffffadf`c8977c70 fffffadf`c8977c48 00000000`00000000 : 0x0
    fffffadf`c8977c20 fffffadf`c8977cd0 : fffffadf`c8977c70 fffffadf`c8977c48 00000000`00000000 fffffadf`c8979000 : 0xc89789b0
    fffffadf`c8977c28 fffffadf`c8977c70 : fffffadf`c8977c48 00000000`00000000 fffffadf`c8979000 fffffadf`c8978c70 : 0xfffffadf`c8977cd0
    fffffadf`c8977c30 fffffadf`c8977c48 : 00000000`00000000 fffffadf`c8979000 fffffadf`c8978c70 fffffadf`c8970000 : 0xfffffadf`c8977c70
    fffffadf`c8977c38 00000000`00000000 : fffffadf`c8979000 fffffadf`c8978c70 fffffadf`c8970000 fffffadf`c89781a0 : 0xfffffadf`c8977c48
    fffffadf`c8977c40 fffffadf`c8979000 : fffffadf`c8978c70 fffffadf`c8970000 fffffadf`c89781a0 fffff800`01000000 : 0x0
    fffffadf`c8977c48 fffffadf`c8978c70 : fffffadf`c8970000 fffffadf`c89781a0 fffff800`01000000 fffff800`010410c0 : 0xfffffadf`c8979000
    fffffadf`c8977c50 fffffadf`c8970000 : fffffadf`c89781a0 fffff800`01000000 fffff800`010410c0 fffff800`01132f80 : 0xfffffadf`c8978c70
    fffffadf`c8977c58 fffffadf`c89781a0 : fffff800`01000000 fffff800`010410c0 fffff800`01132f80 00000000`00000000 : 0xfffffadf`c8970000
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_IP: 
    win32k!xxxActivateThisWindow+3ac
    fffff97f`ff0a70d4 ??               ???
    
    FAULTING_SOURCE_CODE:  
    
    
    SYMBOL_STACK_INDEX:  25
    
    FOLLOWUP_NAME:  MachineOwner
    
    SYMBOL_NAME:  win32k!xxxActivateThisWindow+3ac
    
    MODULE_NAME:  win32k
    
    IMAGE_NAME:  win32k.sys
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  43446f9e
    
    FAILURE_BUCKET_ID:  X64_0x3B_win32k!xxxActivateThisWindow+3ac
    
    BUCKET_ID:  X64_0x3B_win32k!xxxActivateThisWindow+3ac
    
    Followup: MachineOwner
    ---------
    
     
  4. Thriller

    Thriller TS Rookie Topic Starter

    Code:
    kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
    This is a very common bugcheck.  Usually the exception address pinpoints
    the driver/function that caused the problem.  Always note this address
    as well as the link date of the driver/image that contains this address.
    Some common problems are exception code 0x80000003.  This means a hard
    coded breakpoint or assertion was hit, but this system was booted
    /NODEBUG.  This is not supposed to happen as developers should never have
    hardcoded breakpoints in retail code, but ...
    If this happens, make sure a debugger gets connected, and the
    system is booted /DEBUG.  This will let us see why this breakpoint is
    happening.
    Arguments:
    Arg1: ffffffffc0000005, The exception code that was not handled
    Arg2: fffff800012c4422, The address that the exception occurred at
    Arg3: fffffadfc8e24a70, Exception Record Address
    Arg4: fffffadfc8e24480, Context Record Address
    
    Debugging Details:
    ------------------
    
    
    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
    
    FAULTING_IP: 
    nt!_NULL_IMPORT_DESCRIPTOR <PERF> (nt+0x2c4422)+0
    fffff800`012c4422 498b85f0000000   mov     rax,[r13+0xf0]
    
    EXCEPTION_RECORD:  fffffadfc8e24a70 -- (.exr fffffadfc8e24a70)
    ExceptionAddress: fffff800012c4422 (nt!_NULL_IMPORT_DESCRIPTOR <PERF> (nt+0x2c4422))
       ExceptionCode: c0000005 (Access violation)
      ExceptionFlags: 00000000
    NumberParameters: 2
       Parameter[0]: 0000000000000000
       Parameter[1]: 00000000000000f0
    Attempt to read from address 00000000000000f0
    
    CONTEXT:  fffffadfc8e24480 -- (.cxr fffffadfc8e24480)
    rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
    rdx=0000000000514000 rsi=0000000000000000 rdi=fffffadfcdd52a20
    rip=fffff800012c4422 rsp=fffffadfc8e24c90 rbp=fffffadfcdd52a28
     r8=fffffadfceadbc20  r9=fffffadfceada760 r10=fffff80001174180
    r11=fffffadfcddd27a0 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei pl zr na po nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
    nt!_NULL_IMPORT_DESCRIPTOR <PERF> (nt+0x2c4422):
    fffff800`012c4422 498b85f0000000 mov rax,[r13+0xf0] ds:002b:00000000`000000f0=????????????????
    Resetting default scope
    
    CUSTOMER_CRASH_COUNT:  3
    
    CURRENT_IRQL:  0
    
    ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
    
    WRITE_ADDRESS:  0000000000000002 
    
    BUGCHECK_STR:  0x7E
    
    DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE
    
    LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff800012c4422
    
    STACK_TEXT:  
    fffffadf`c8e24c90 00000000`00000000 : fffffa80`02494040 00000000`00000000 fffffa80`02494040 fffffadf`ce403ed0 : nt!_NULL_IMPORT_DESCRIPTOR <PERF> (nt+0x2c4422)
    fffffadf`c8e24c98 fffffa80`02494040 : 00000000`00000000 fffffa80`02494040 fffffadf`ce403ed0 00000000`00000000 : 0x0
    fffffadf`c8e24ca0 00000000`00000000 : fffffa80`02494040 fffffadf`ce403ed0 00000000`00000000 00000000`00000000 : 0xfffffa80`02494040
    fffffadf`c8e24ca8 fffffa80`02494040 : fffffadf`ce403ed0 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
    fffffadf`c8e24cb0 fffffadf`ce403ed0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000001 : 0xfffffa80`02494040
    fffffadf`c8e24cb8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000001 00000000`00000000 : 0xfffffadf`ce403ed0fffffadf`c8e24cf8 fffff800`01038f43 : fffffadf`0000000c fffff800`01196ae0 fffff800`012c4390 fffffadf`ceada760 : nt!ObpReleaseLookupContextObject+0x49
    fffffadf`c8e24d00 fffffadf`0000000c : fffff800`01196ae0 fffff800`012c4390 fffffadf`ceada760 00000000`00000000 : nt!RtlUnwind+0x10b
    fffffadf`c8e24d08 fffff800`01196ae0 : fffff800`012c4390 fffffadf`ceada760 00000000`00000000 00000000`00000000 : 0xfffffadf`0000000c
    fffffadf`c8e24d10 fffff800`012c4390 : fffffadf`ceada760 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtGetContextThread+0x59
    fffffadf`c8e24d18 fffffadf`ceada760 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!_NULL_IMPORT_DESCRIPTOR <PERF> (nt+0x2c4390)
    fffffadf`c8e24d20 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffffadf`ceada760
    fffffadf`c8e24d28 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff800`004e3070 : 0x0
    fffffadf`c8e24d30 00000000`00000000 : 00000000`00000000 00000000`00000000 fffff800`004e3070 fffffadf`ceadbc20 : 0x0
    fffffadf`c8e24d38 00000000`00000000 : 00000000`00000000 fffff800`004e3070 fffffadf`ceadbc20 00000000`00000000 : 0x0
    fffffadf`c8e24d40 00000000`00000000 : fffff800`004e3070 fffffadf`ceadbc20 00000000`00000000 fffffadf`ceadb848 : 0x0
    fffffadf`c8e24d48 fffff800`004e3070 : fffffadf`ceadbc20 00000000`00000000 fffffadf`ceadb848 fffff800`012b226e : 0x0
    fffffadf`c8e24d50 fffffadf`ceadbc20 : 00000000`00000000 fffffadf`ceadb848 fffff800`012b226e fffffadf`ceada760 : 0xfffff800`004e3070
    fffffadf`c8e24d58 00000000`00000000 : fffffadf`ceadb848 fffff800`012b226e fffffadf`ceada760 00000000`00000080 : 0xfffffadf`ceadbc20
    fffffadf`c8e24d60 fffffadf`ceadb848 : fffff800`012b226e fffffadf`ceada760 00000000`00000080 fffffadf`ceada760 : 0x0
    fffffadf`c8e24d68 fffff800`012b226e : fffffadf`ceada760 00000000`00000080 fffffadf`ceada760 fffffadf`ceacc040 : 0xfffffadf`ceadb848
    fffffadf`c8e24d70 fffffadf`ceada760 : 00000000`00000080 fffffadf`ceada760 fffffadf`ceacc040 00000000`00000000 : nt!_NULL_IMPORT_DESCRIPTOR <PERF> (nt+0x2b226e)
    fffffadf`c8e24d78 00000000`00000080 : fffffadf`ceada760 fffffadf`ceacc040 00000000`00000000 00000000`00000000 : 0xfffffadf`ceada760
    fffffadf`c8e24d80 fffffadf`ceada760 : fffffadf`ceacc040 00000000`00000000 00000000`00000000 00000000`00000000 : 0x80
    fffffadf`c8e24d88 fffffadf`ceacc040 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffffadf`ceada760
    fffffadf`c8e24d90 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffffadf`ceacc040
    fffffadf`c8e24d98 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 fffffadf`c8e23c30 : 0x0
    fffffadf`c8e24da0 00000000`00000000 : 00000000`00000000 00000000`00000000 fffffadf`c8e23c30 fffffadf`ceacc138 : 0x0
    fffffadf`c8e24da8 00000000`00000000 : 00000000`00000000  fffffadf`ceadb848 00000000`00000000 : nt!RtlAppendUnicodeToString+0x64
    fffffadf`c8e24dd8 fffffadf`ceada760 : fffffadf`ceacc040 fffffadf`ceadb848 00000000`00000000 00000000`00000000 : nt!CmpRebuildSecurityCache+0x13
    fffffadf`c8e24de0 fffffadf`ceacc040 : fffffadf`ceadb848 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffffadf`ceada760
    fffffadf`c8e24ee0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
    
    
    STACK_COMMAND:  .bugcheck ; kb
    
    FOLLOWUP_IP: 
    nt!_NULL_IMPORT_DESCRIPTOR <PERF> (nt+0x2c4422)+0
    fffff800`012c4422 498b85f0000000   mov     rax,[r13+0xf0]
    
    FAULTING_SOURCE_CODE:  
    
    
    FOLLOWUP_NAME:  MachineOwner
    
    SYMBOL_NAME:  nt!_NULL_IMPORT_DESCRIPTOR <PERF> (nt+0x2c4422)+0
    
    MODULE_NAME:  nt
    
    IMAGE_NAME:  ntoskrnl.exe
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  42436096
    
    FAILURE_BUCKET_ID:  X64_0x7E_nt!_NULL_IMPORT_DESCRIPTOR__PERF__(nt+0x2c4422)+0
    
    BUCKET_ID:  X64_0x7E_nt!_NULL_IMPORT_DESCRIPTOR__PERF__(nt+0x2c4422)+0
    
    Followup: MachineOwner
    ---------
    
    
    

    I've trimmed the debug data info of all the 3 above minidumps due to the characters limit of each post, by deleting the extra mem info which I think won't be needed here.

    Thanks for any help on this.
     
  5. Thriller

    Thriller TS Rookie Topic Starter

    *bump* need some help here..
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...