Hello, Yesterday i got a Blue Screen with:
INVALID_KERNEL_HANDLE (93)
At the time i was watching a .AVI on WMP11 and went to my display Properties>Screen Saver> then clicked the power button, as soon as i did that i got a blue screen, this is the first time in about 1 year that iv had this happen...
i have included my Bugcheck Analysis...can anyone tell me what happened?
I am not to good at pc's, but i am trying
Loading Dump File [C:\WINDOWS\Minidump\Mini010307-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: C:\Symbols
Executable search path is:
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
Debug session time: Wed Jan 3 12:38:25.609 2007 (GMT+0)
System Uptime: 0 days 6:47:16.202
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
.........................................................................................................................
Loading User Symbols
Loading unloaded module list
...............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 93, {83, 0, 0, 0}
Probably caused by : ntoskrnl.exe ( nt!FsRtlRemoveMcbEntryPrivate+68 )
Followup: MachineOwner
---------
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
INVALID_KERNEL_HANDLE (93)
This message occurs if kernel code (server, redirector, other driver, etc.)
attempts to close a handle that is not a valid handle.
Arguments:
Arg1: 00000083, The handle that NtClose was called with.
Arg2: 00000000, means a protected handle was closed.
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x93
PROCESS_NAME: rundll32.exe
LAST_CONTROL_TRANSFER: from 805b04e3 to 804f8925
STACK_TEXT:
a77534a8 805b04e3 00000093 00000083 00000000 nt!FsRtlRemoveMcbEntryPrivate+0x68
a77534d4 805b05dd e478a978 e46e9838 00000083 nt!CmpOpenHiveFiles+0x33a
a775351c 805b0715 00000083 00000000 00000000 nt!CmpInitHiveFromFile+0x48
a7753530 8053c808 00000083 a77535c4 804fd479 nt!CmpPrefetchHiveFile+0x1a
a775353c 804fd479 badb0d00 a77535b4 a7753934 nt!ObpPushStackInfo+0x75
a77535c4 805bb460 a7753a10 00000001 00000001 nt!CcScheduleReadAhead+0xc4
a77535dc 805be213 e4522900 a7753960 a77539ec nt!CmpCheckValueList+0x11a
a7753944 8053c808 0000000a a7753a10 00000001 nt!IoInitializeCrashDump+0x46
a7753960 804fdce9 badb0d00 a77539d8 805ec5fd nt!ObpPushStackInfo+0x75
a7753d48 8053c808 0000000a 587f1f94 00000001 nt!FsRtlPrivateInsertSharedLock+0x20
a7753d64 7c90eb94 badb0d00 0007e658 b72cad98 nt!ObpPushStackInfo+0x75
WARNING: Frame IP not in any known module. Following frames may be wrong.
a7753d70 b72cad98 b72cadcc 00000000 00000000 0x7c90eb94
a7753d74 b72cadcc 00000000 00000000 00000000 0xb72cad98
a7753d78 00000000 00000000 00000000 00000000 0xb72cadcc
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!FsRtlRemoveMcbEntryPrivate+68
804f8925 5d pop ebp
SYMBOL_STACK_INDEX: 0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntoskrnl.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 42250a1d
SYMBOL_NAME: nt!FsRtlRemoveMcbEntryPrivate+68
FAILURE_BUCKET_ID: 0x93_nt!FsRtlRemoveMcbEntryPrivate+68
BUCKET_ID: 0x93_nt!FsRtlRemoveMcbEntryPrivate+68
Followup: MachineOwner
INVALID_KERNEL_HANDLE (93)
At the time i was watching a .AVI on WMP11 and went to my display Properties>Screen Saver> then clicked the power button, as soon as i did that i got a blue screen, this is the first time in about 1 year that iv had this happen...
i have included my Bugcheck Analysis...can anyone tell me what happened?
I am not to good at pc's, but i am trying
Loading Dump File [C:\WINDOWS\Minidump\Mini010307-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: C:\Symbols
Executable search path is:
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
Debug session time: Wed Jan 3 12:38:25.609 2007 (GMT+0)
System Uptime: 0 days 6:47:16.202
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
.........................................................................................................................
Loading User Symbols
Loading unloaded module list
...............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 93, {83, 0, 0, 0}
Probably caused by : ntoskrnl.exe ( nt!FsRtlRemoveMcbEntryPrivate+68 )
Followup: MachineOwner
---------
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
INVALID_KERNEL_HANDLE (93)
This message occurs if kernel code (server, redirector, other driver, etc.)
attempts to close a handle that is not a valid handle.
Arguments:
Arg1: 00000083, The handle that NtClose was called with.
Arg2: 00000000, means a protected handle was closed.
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x93
PROCESS_NAME: rundll32.exe
LAST_CONTROL_TRANSFER: from 805b04e3 to 804f8925
STACK_TEXT:
a77534a8 805b04e3 00000093 00000083 00000000 nt!FsRtlRemoveMcbEntryPrivate+0x68
a77534d4 805b05dd e478a978 e46e9838 00000083 nt!CmpOpenHiveFiles+0x33a
a775351c 805b0715 00000083 00000000 00000000 nt!CmpInitHiveFromFile+0x48
a7753530 8053c808 00000083 a77535c4 804fd479 nt!CmpPrefetchHiveFile+0x1a
a775353c 804fd479 badb0d00 a77535b4 a7753934 nt!ObpPushStackInfo+0x75
a77535c4 805bb460 a7753a10 00000001 00000001 nt!CcScheduleReadAhead+0xc4
a77535dc 805be213 e4522900 a7753960 a77539ec nt!CmpCheckValueList+0x11a
a7753944 8053c808 0000000a a7753a10 00000001 nt!IoInitializeCrashDump+0x46
a7753960 804fdce9 badb0d00 a77539d8 805ec5fd nt!ObpPushStackInfo+0x75
a7753d48 8053c808 0000000a 587f1f94 00000001 nt!FsRtlPrivateInsertSharedLock+0x20
a7753d64 7c90eb94 badb0d00 0007e658 b72cad98 nt!ObpPushStackInfo+0x75
WARNING: Frame IP not in any known module. Following frames may be wrong.
a7753d70 b72cad98 b72cadcc 00000000 00000000 0x7c90eb94
a7753d74 b72cadcc 00000000 00000000 00000000 0xb72cad98
a7753d78 00000000 00000000 00000000 00000000 0xb72cadcc
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!FsRtlRemoveMcbEntryPrivate+68
804f8925 5d pop ebp
SYMBOL_STACK_INDEX: 0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntoskrnl.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 42250a1d
SYMBOL_NAME: nt!FsRtlRemoveMcbEntryPrivate+68
FAILURE_BUCKET_ID: 0x93_nt!FsRtlRemoveMcbEntryPrivate+68
BUCKET_ID: 0x93_nt!FsRtlRemoveMcbEntryPrivate+68
Followup: MachineOwner
