Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: System Crash -Help with Dump file


29 Oct 2010   #1

Windows 7 Home Premium 64bit.
 
 
System Crash -Help with Dump file

My system keeps craching when I open the font folder and when I open an email in outlook.

I have attaxhed a dump file for a crash caused by opening the font file.

Anyone please help!


My System SpecsSystem Spec
.

30 Oct 2010   #2

Win 8 Release candidate 8400
 
 

Quote   Quote: Originally Posted by loboda View Post
My system keeps craching when I open the font folder and when I open an email in outlook.

I have attaxhed a dump file for a crash caused by opening the font file.

Anyone please help!
Not much info in the dump, however I can

ask you to run a system file check and report the results.

SFC /SCANNOW Command - System File Checker

and run memtest to check your memory.
Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder or another ISO burning program. Boot from the CD, and leave it running for at least 5 or 6 passes.


Just remember, any time Memtest reports errors, it can be either bad RAM or a bad motherboard slot. Test the sticks individually, and if you find a good one, test it in all slots.
My System SpecsSystem Spec
30 Oct 2010   #3

Windows 7 Home Premium 64bit.
 
 

I have run both the System File Checker and the Memtest86.
Both came up clean.

While tring to create a txt file of a dump I had another crash.
I have attached a txt file of that crash.
My System SpecsSystem Spec
.


30 Oct 2010   #4

Windows 7 Ultimate 32 bit
 
 

Hi laboda and welcome to the forum. Sorry you are having problems. Please read this tutorial and upload the files to us. This will let us look deeper into your system and give better help.

http://www.sevenforums.com/crashes-d...tructions.html
My System SpecsSystem Spec
30 Oct 2010   #5

Windows 7 Home Premium 64bit.
 
 
BSOD & System Information for review

OK. I am new to all this.

I followed the BSOD posting indstructions and have attached then collected system information.

I have also included some basic information about my computer below.

OS Name Microsoft Windows 7 Home Premium
Version 6.1.7600 Build 7600
Other OS Description Not Available
OS Manufacturer Microsoft Corporation
System Manufacturer Dell Inc.
System Model Studio XPS 8000
System Type x64-based PC
Processor Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz, 2660 Mhz, 4 Core(s), 4 Logical Processor(s)
BIOS Version/Date Dell Inc. A01, 8/11/2009
My System SpecsSystem Spec
30 Oct 2010   #6

Windows 7 Ultimate 32 bit
 
 

Thanks for uploading the files. I looked at your last four most recent dumps. All of the indic

To begin your troubleshooting, I suggest you uninstall AVG using this tool: Tool (64 bit). If you have installed Identity Protection, please uninstall it using this tool:Tool. Download and install Microsoft Security Essentials in its place. AVG is a known BSOD cause on some Win 7 systems.

Quote:
Error code 50 (3X), PAGE_FAULT_IN_NONPAGED_AREA. Usual causes: Defective hardware (particularly memory - but not just RAM), Faulty system service, Antivirus, Device driver, NTFS corruption, BIOS.

Error code 19, BAD_POOL_HEADER. Usual causes: Device driver.
Code:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c60000 PsLoadedModuleList = 0xfffff800`02e9de50
Debug session time: Sat Oct 30 10:39:55.964 2010 (GMT-4)
System Uptime: 0 days 11:10:26.041
Loading Kernel Symbols
...............................................................
................................................................
................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffff900c27ad330, 1, fffff80002e04952, 0}


Could not read faulting driver name
Probably caused by : win32k.sys ( win32k!RFONTOBJ::bRealizeFont+79 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff900c27ad330, memory referenced.
Arg2: 0000000000000001, value 0 = read operation, 1 = write operation.
Arg3: fffff80002e04952, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f080e0
 fffff900c27ad330 

FAULTING_IP: 
nt!ExAllocatePoolWithTag+582
fffff800`02e04952 448820          mov     byte ptr [rax],r12b

MM_INTERNAL_CODE:  0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  wordpad.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88007af35c0 -- (.trap 0xfffff88007af35c0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff900c27ad330 rbx=0000000000000000 rcx=fffff900c27acba0
rdx=fffff900c27acb90 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002e04952 rsp=fffff88007af3750 rbp=fffff880053d9cc0
 r8=0000000000000021  r9=fffff880053da260 r10=fffff880053d9cc8
r11=fffffa8007814b60 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
nt!ExAllocatePoolWithTag+0x582:
fffff800`02e04952 448820          mov     byte ptr [rax],r12b ds:fffff900`c27ad330=??
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002d50f14 to fffff80002cd0740

STACK_TEXT:  
fffff880`07af3458 fffff800`02d50f14 : 00000000`00000050 fffff900`c27ad330 00000000`00000001 fffff880`07af35c0 : nt!KeBugCheckEx
fffff880`07af3460 fffff800`02cce82e : 00000000`00000001 fffff900`c27acfc0 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x42837
fffff880`07af35c0 fffff800`02e04952 : fffff960`000f91d8 fffff960`0014482d fffff960`000f91d8 fffff900`00000048 : nt!KiPageFault+0x16e
fffff880`07af3750 fffff960`00100035 : fffff900`00000000 fffff900`c00ded80 00000000`00000002 00000000`00000000 : nt!ExAllocatePoolWithTag+0x582
fffff880`07af3840 fffff960`00158df0 : fffff900`c00ded80 fffff880`07af3ad0 fffff880`07af39d0 fffff880`07af3b20 : win32k!RFONTOBJ::bRealizeFont+0x79
fffff880`07af3960 fffff960`0012a861 : 00000000`10010000 fffff900`00000000 000011b3`00000000 00000000`00000002 : win32k!RFONTOBJ::bInit+0x548
fffff880`07af3a80 fffff960`0012a7eb : fffff900`c0081000 fffff880`07af3ca0 00000000`322f534f 000007fe`f64b43ee : win32k!ulGetFontData2+0x31
fffff880`07af3af0 fffff960`0012a701 : 00000000`ffffffff 00000000`ffffffff fffffa80`074b1650 fffff960`001a4e4a : win32k!ulGetFontData+0x7f
fffff880`07af3b40 fffff800`02ccf993 : ffffffff`fa0111b3 00000000`00000000 00000000`0455f178 00000000`00000000 : win32k!NtGdiGetFontData+0x8d
fffff880`07af3bb0 000007fe`fcd67f9a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0455f158 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fcd67f9a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
win32k!RFONTOBJ::bRealizeFont+79
fffff960`00100035 488bd8          mov     rbx,rax

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  win32k!RFONTOBJ::bRealizeFont+79

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c7dc13c

FAILURE_BUCKET_ID:  X64_0x50_win32k!RFONTOBJ::bRealizeFont+79

BUCKET_ID:  X64_0x50_win32k!RFONTOBJ::bRealizeFont+79

Followup: MachineOwner
---------

3: kd> lmtsmn
start             end                 module name
fffff880`03b71000 fffff880`03baf000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00fa3000 fffff880`00ffa000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02d30000 fffff880`02dba000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03a00000 fffff880`03a16000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00def000 fffff880`00dfa000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00dbc000 fffff880`00dc5000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00dc5000 fffff880`00def000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`04866000 fffff880`04e7c000   atikmdag atikmdag.sys Sun Jun 14 22:41:39 2009 (4A35B4E3)
fffff880`05c00000 fffff880`05c34000   AVGIDSDriver AVGIDSDriver.Sys Tue Aug 03 18:24:45 2010 (4C58972D)
fffff880`018ae000 fffff880`018b8000   AVGIDSEH AVGIDSEH.Sys Mon Sep 13 18:46:38 2010 (4C8EA9CE)
fffff880`0289e000 fffff880`028aa000   AVGIDSFilter AVGIDSFilter.Sys Tue Aug 03 18:23:21 2010 (4C5896D9)
fffff880`03ae6000 fffff880`03b35000   avgldx64 avgldx64.sys Mon Sep 06 20:49:29 2010 (4C858C19)
fffff880`01918000 fffff880`01927000   avgmfx64 avgmfx64.sys Mon Sep 06 20:49:14 2010 (4C858C0A)
fffff880`018a4000 fffff880`018ae000   avgrkx64 avgrkx64.sys Mon Sep 06 20:49:37 2010 (4C858C21)
fffff880`02c8a000 fffff880`02ceb000   avgtdia  avgtdia.sys  Mon Sep 06 20:52:11 2010 (4C858CBB)
fffff880`01930000 fffff880`01937000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`0180f000 fffff880`01820000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`029b9000 fffff880`029d7000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00680000 fffff960`006a7000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`018ee000 fffff880`01918000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00ce2000 fffff880`00da2000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01874000 fffff880`018a4000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c84000 fffff880`00ce2000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01000000 fffff880`01073000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`04856000 fffff880`04866000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`04251000 fffff880`0425f000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`013da000 fffff880`013f8000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`01800000 fffff880`0180f000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0185e000 fffff880`01874000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`043ce000 fffff880`043f0000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`043f6000 fffff880`043ff000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0425f000 fffff880`0426b000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`03b35000 fffff880`03b48000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`03b48000 fffff880`03b54000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04e7c000 fffff880`04f70000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04f70000 fffff880`04fb6000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`018b8000 fffff880`018ee000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`01134000 fffff880`01148000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010e8000 fffff880`01134000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`013d0000 fffff880`013da000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01824000 fffff880`0185e000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0148b000 fffff880`014d5000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02c17000 fffff800`02c60000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04fb6000 fffff880`04fda000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`04335000 fffff880`04391000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`04200000 fffff880`04219000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`0501b000 fffff880`05023080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`051f0000 fffff880`051fe000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`028f1000 fffff880`029b9000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`015f2000 fffff880`015fb000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03b5b000 fffff880`03b71000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`03baf000 fffff880`03c00000   k57nd60a k57nd60a.sys Sat Jun 20 07:34:49 2009 (4A3CC959)
fffff880`03abf000 fffff880`03ace000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`04219000 fffff880`04227000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bbd000 fffff800`00bc7000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`04271000 fffff880`042b4000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013a5000 fffff880`013bf000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`043f0000 fffff880`043f5200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`028c4000 fffff880`028d9000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`010bf000 fffff880`010e2000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c2c000 fffff880`00c70000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`014dd000 fffff880`014eb000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03ace000 fffff880`03add000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`04244000 fffff880`04251000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00da2000 fffff880`00dbc000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`029d7000 fffff880`029ef000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02800000 fffff880`0282d000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`0282d000 fffff880`0287b000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`0287b000 fffff880`0289e000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`01995000 fffff880`019a0000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e09000 fffff880`00e13000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01154000 fffff880`011b2000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`019e8000 fffff880`019f3000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015e0000 fffff880`015f2000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014ee000 fffff880`015e0000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04feb000 fffff880`04ff7000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`03a3a000 fffff880`03a69000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04320000 fffff880`04335000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02de9000 fffff880`02df8000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02ceb000 fffff880`02d30000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`019a0000 fffff880`019b1000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`019dc000 fffff880`019e8000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c60000 fffff800`0323c000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01202000 fffff880`013a5000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01927000 fffff880`01930000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`02dc3000 fffff880`02de9000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00e53000 fffff880`00e68000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00e13000 fffff880`00e46000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00ed9000 fffff880`00ee0000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00ee0000 fffff880`00ef0000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013bf000 fffff880`013d0000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`05cf7000 fffff880`05d9d000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`04391000 fffff880`043ce000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c70000 fffff880`00c84000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`01148000 fffff880`01153e00   PxHlpa64 PxHlpa64.sys Tue Jun 23 19:16:35 2009 (4A416253)
fffff880`03a16000 fffff880`03a3a000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03a69000 fffff880`03a84000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03a84000 fffff880`03aa5000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03aa5000 fffff880`03abf000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02c2f000 fffff880`02c80000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`0197a000 fffff880`01983000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01983000 fffff880`0198c000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0198c000 fffff880`01995000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`011b2000 fffff880`011ec000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`028d9000 fffff880`028f1000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05024000 fffff880`051d0900   RTKVHD64 RTKVHD64.sys Fri May 22 14:04:20 2009 (4A16E924)
fffff880`05d9d000 fffff880`05da8000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`014d5000 fffff880`014dd000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0606e000 fffff880`06104000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`05c34000 fffff880`05c9b000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`05da8000 fffff880`05dd5000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`04ff7000 fffff880`04ff8480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01603000 fffff880`01800000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`05dd5000 fffff880`05de7000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`019cf000 fffff880`019dc000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`019b1000 fffff880`019cf000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02c1b000 fffff880`02c2f000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00530000 fffff960`0053a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`042b4000 fffff880`042c6000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`051d1000 fffff880`051ee000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`051ee000 fffff880`051eff00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04fda000 fffff880`04feb000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`042c6000 fffff880`04320000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04800000 fffff880`04856000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`04238000 fffff880`04244000   usbprint usbprint.sys Mon Jul 13 20:38:18 2009 (4A5BD37A)
fffff880`04227000 fffff880`04238000   usbscan  usbscan.sys  Mon Jul 13 20:35:32 2009 (4A5BD2D4)
fffff880`05000000 fffff880`0501b000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`00e46000 fffff880`00e53000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01937000 fffff880`01945000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01945000 fffff880`0196a000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00e68000 fffff880`00e7d000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e7d000 fffff880`00ed9000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01073000 fffff880`010bf000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02c00000 fffff880`02c1b000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`0196a000 fffff880`0197a000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00ef0000 fffff880`00f94000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f94000 fffff880`00fa3000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02dba000 fffff880`02dc3000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000e0000 fffff960`003ef000   win32k   win32k.sys   Tue Aug 31 22:58:04 2010 (4C7DC13C)
fffff880`00e00000 fffff880`00e09000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00c00000 fffff880`00c21000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`06104000 fffff880`06135000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`06135000 fffff880`061a6000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018b8000 fffff880`018c6000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018c6000 fffff880`018d2000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018d2000 fffff880`018db000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018db000 fffff880`018ee000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`03b35000 fffff880`03b5b000   tunnel.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {21, fffff900c1e76000, 3b80, fffff900c1e79bc0}

Probably caused by : win32k.sys ( win32k!EngFreeMem+21 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000021, the data following the pool block being freed is corrupt.  Typically this means the consumer (call stack ) has overrun the block.
Arg2: fffff900c1e76000, The pool pointer being freed.
Arg3: 0000000000003b80, The number of bytes allocated for the pool block.
Arg4: fffff900c1e79bc0, The corrupted value found following the pool block.

Debugging Details:
------------------


BUGCHECK_STR:  0x19_21

POOL_ADDRESS: GetPointerFromAddress: unable to read from fffff80002eb50e0
 fffff900c1e76000 

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002db03cd to fffff80002c7d740

STACK_TEXT:  
fffff880`03b900d8 fffff800`02db03cd : 00000000`00000019 00000000`00000021 fffff900`c1e76000 00000000`00003b80 : nt!KeBugCheckEx
fffff880`03b900e0 fffff960`000693f1 : fffff900`c00cb540 fffff900`c00cb540 00000000`64667454 fffff900`00000001 : nt!ExDeferredFreePool+0xf8a
fffff880`03b90190 fffff960`002dadd4 : fffff880`03b902e0 00000000`00000004 fffffa80`00000040 fffff800`00000000 : win32k!EngFreeMem+0x21
fffff880`03b901c0 fffff960`002a211e : fffff960`002dad60 fffff880`03b902e0 fffff900`c09bdc90 fffff900`c064bd58 : win32k!ttfdSemDestroyFont+0x74
fffff880`03b901f0 fffff960`002a034a : fffffa80`07a396f0 fffff880`03b902f0 fffff880`03b90350 fffff880`03b905b0 : win32k!PDEVOBJ::DestroyFont+0xf2
fffff880`03b90260 fffff960`000c7ab7 : fffffa80`07a396f0 fffff900`c00cb540 fffff900`c008a010 fffff800`02c821fa : win32k!RFONTOBJ::vDeleteRFONT+0x4a
fffff880`03b902d0 fffff960`000c74eb : fffff900`c00cb540 fffff880`03b90370 fffff900`c00cb540 fffff880`03b905b0 : win32k!RFONTOBJ::bMakeInactiveHelper+0x427
fffff880`03b90350 fffff960`000c8a94 : fffffa80`054024b0 00000000`00000000 fffff880`03b905b0 fffff880`03b90990 : win32k!RFONTOBJ::vMakeInactive+0xa3
fffff880`03b903f0 fffff960`00082505 : ffffffff`fffffb80 fffff880`00000002 fffffa80`00000000 fffffa80`00000002 : win32k!RFONTOBJ::bInit+0x1ec
fffff880`03b90510 fffff960`00081caf : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!GreExtTextOutWLocked+0x7e5
fffff880`03b90930 fffff960`00249329 : fffff880`03b90a90 fffff880`03b90ca0 fffff880`03b90ac8 fffff960`00102bb9 : win32k!GreExtTextOutWInternal+0x10f
fffff880`03b909e0 fffff800`02c7c993 : 00000000`00000000 fffff880`03b90ca0 00000000`00000001 fffff880`03b90c00 : win32k!NtGdiExtTextOutW+0x341
fffff880`03b90bb0 000007fe`fda5373a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`01f6e728 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fda5373a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
win32k!EngFreeMem+21
fffff960`000693f1 4883c420        add     rsp,20h

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  win32k!EngFreeMem+21

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c7dc13c

FAILURE_BUCKET_ID:  X64_0x19_21_win32k!EngFreeMem+21

BUCKET_ID:  X64_0x19_21_win32k!EngFreeMem+21

Followup: MachineOwner
---------
You have some outdated drivers loading on your system. Older drivers can and do cause memory corruption and BSOD's. Update the following drivers.
Quote:
k57nd60a.sys Sat Jun 20 07:34:49 2009 - Broadcom NetLink (TM) Gigabit Ethernet driver. Broadcom.com - Products

PxHlpa64.sys Tue Jun 23 19:16:35 2009 - Sonic CD/DVD driver (used by many different CD/DVD programs) pxHelp20.sys programs
Go to C:\Windows\System32\drivers and rename PxHlpa64.sys to PxHlpa64.BAK
This will break your CD/DVD program, but can easily be renamed after we've finished.

RTKVHD64.sys Fri May 22 14:04:20 2009 - Realtek High Definition Audio Function Driver Realtek
How to find drivers -
Quote:
- I have listed links to most of the drivers in the code box below. Please use the links there to see what info I've found about those drivers.
- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.


- - The most common drivers are listed on this page: Driver Reference
- - Driver manufacturer links are on this page: Drivers and Downloads
Uninstall AVG, update these drivers, reboot and let's see how your system does. If you get another BSOS, upload the dump and we will go from there.
My System SpecsSystem Spec
30 Oct 2010   #7

Windows 7 Home Premium 64bit.
 
 

I will give it a try.
Will let you know
My System SpecsSystem Spec
30 Oct 2010   #8

Windows 7 Ultimate 32 bit
 
 

Very good. And I hope your news is good!
My System SpecsSystem Spec
30 Oct 2010   #9

Windows 7 Home Premium 64bit.
 
 

No luck.
will Resend the latest BSOD info in a bit

New info is attached
My System SpecsSystem Spec
30 Oct 2010   #10

Windows 7 Ultimate 32 bit
 
 

That is not what we wanted to hear!
My System SpecsSystem Spec
Reply

 System Crash -Help with Dump file




Thread Tools



Similar help and support threads for2: System Crash -Help with Dump file
Thread Forum
Solved Crash Dump File Attached BSOD Help and Support
Solved help, NEED help analyzing crash dump file !!! PLEASE! BSOD Help and Support
Help debugging dump file from application crash BSOD Help and Support
Conquer Online Crash Dump File BSOD Help and Support
Crash Dump File Won't Open? [WINDBG.EXE] BSOD Help and Support
bad_pool_caller crash: dump file attached BSOD Help and Support
win 7 crash and dump file attached BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 06:53 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33