OS: Windows 7 Enterprise x86 32 bit Original corporate multilicense version, full retail. age of system (hardware)? : few months
age of OS installation : 1 months
I have a similar problem on three computers. Random restarts and go to BSOD. I use our tool to make report, and minidumps.
I try to analyze minidumps in WinDbg, but all this information is difficult to understand for me.
Code:
Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Documents and Settings\rasto\Desktop\Windows_NT6_BSOD_jcgriff2\011311-18751-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: C:\WINDOWS\Symbols
Executable search path is:
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
Windows 7 Kernel Version 7600 MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Kernel base = 0x82a0c000 PsLoadedModuleList = 0x82b54810
Debug session time: Thu Jan 13 07:51:03.987 2011 (GMT+1)
System Uptime: 0 days 0:13:13.751
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
Loading Kernel Symbols
.......................................................................................................................................................
Loading User Symbols
Loading unloaded module list
.....
Unable to load image \SystemRoot\System32\win32k.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for win32k.sys
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000008E, {c0000005, 98becdd2, a6a34b90, 0}
Probably caused by : win32k.sys ( win32k!xxxMinMaximize+2c3 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 98becdd2, The address that the exception occurred at
Arg3: a6a34b90, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
FAULTING_IP:
win32k!xxxMinMaximize+2c3
98becdd2 837d1800 cmp dword ptr [ebp+18h],0
TRAP_FRAME: a6a34b90 -- (.trap 0xffffffffa6a34b90)
ErrCode = 00000000
eax=00000001 ebx=fe380b58 ecx=00000000 edx=00000000 esi=a6a34cb8 edi=7e3d7728
eip=98becdd2 esp=a6a34c04 ebp=26a34ccc iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
win32k!xxxMinMaximize+0x2c3:
98becdd2 837d1800 cmp dword ptr [ebp+18h],0 ss:0010:26a34ce4=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: exe
LAST_CONTROL_TRANSFER: from 00000000 to 98becdd2
STACK_TEXT:
a6a34cc0 00000000 00000001 a6a34d00 98bd4fae win32k!xxxMinMaximize+0x2c3
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k!xxxMinMaximize+2c3
98becdd2 837d1800 cmp dword ptr [ebp+18h],0
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32k!xxxMinMaximize+2c3
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4cbe5b31
FAILURE_BUCKET_ID: 0x8E_win32k!xxxMinMaximize+2c3
BUCKET_ID: 0x8E_win32k!xxxMinMaximize+2c3
Followup: MachineOwner
---------
0: kd> lmtsmn
start end module name
8c09a000 8c0e2000 ACPI ACPI.sys Tue Jul 14 01:11:11 2009 (4A5BBF0F)
9145e000 914b8000 afd afd.sys Tue Jul 14 01:12:34 2009 (4A5BBF62)
9669f000 966b1000 AgileVpn AgileVpn.sys Tue Jul 14 01:55:00 2009 (4A5BC954)
8c1eb000 8c1f4000 amdxata amdxata.sys Tue May 19 19:57:35 2009 (4A12F30F)
96686000 966876c0 ASACPI ASACPI.sys Wed May 13 13:11:32 2009 (4A0AAAE4)
90eca000 90ecb440 AsIO AsIO.sys Mon Dec 17 10:10:20 2007 (47663CFC)
97bc8000 97bd0000 aswFsBlk aswFsBlk.sys Tue Sep 15 12:55:18 2009 (4AAF7296)
97bb1000 97bc8000 aswMonFlt aswMonFlt.sys Tue Sep 15 12:55:08 2009 (4AAF728C)
914b8000 914bbb00 aswRdr aswRdr.SYS Wed Nov 25 00:48:56 2009 (4B0C70E8)
90ea9000 90eca000 aswSP aswSP.SYS Tue Sep 15 12:55:29 2009 (4AAF72A1)
91454000 9145d8c0 aswTdi aswTdi.SYS Wed Nov 25 00:49:06 2009 (4B0C70F2)
a1f6a000 a1f73000 asyncmac asyncmac.sys Tue Jul 14 01:54:46 2009 (4A5BC946)
8c1bf000 8c1c8000 atapi atapi.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
8c1c8000 8c1eb000 ataport ataport.SYS Tue Jul 14 01:11:18 2009 (4A5BBF16)
8c5f4000 8c5fb000 Beep Beep.SYS Tue Jul 14 01:45:00 2009 (4A5BC6FC)
90e9b000 90ea9000 blbdrive blbdrive.sys Tue Jul 14 01:23:04 2009 (4A5BC1D8)
8bebd000 8bec5000 BOOTVID BOOTVID.dll Tue Jul 14 03:04:34 2009 (4A5BD9A2)
a049a000 a04b3000 bowser bowser.sys Tue Jul 14 01:14:21 2009 (4A5BBFCD)
98da0000 98dbe000 cdd cdd.dll Tue Nov 02 05:23:36 2010 (4CCF9248)
97b43000 97b59000 cdfs cdfs.sys Tue Jul 14 01:11:14 2009 (4A5BBF12)
8c5ce000 8c5ed000 cdrom cdrom.sys Tue Jul 14 01:11:24 2009 (4A5BBF1C)
8bf07000 8bfb2000 CI CI.dll Tue Jul 14 03:09:28 2009 (4A5BDAC8)
8c580000 8c5a5000 CLASSPNP CLASSPNP.SYS Tue Jul 14 01:11:20 2009 (4A5BBF18)
8bec5000 8bf07000 CLFS CLFS.SYS Tue Jul 14 01:11:10 2009 (4A5BBF0E)
8c39e000 8c3fb000 cng cng.sys Tue Jul 14 01:32:55 2009 (4A5BC427)
96692000 9669f000 CompositeBus CompositeBus.sys Tue Jul 14 01:45:26 2009 (4A5BC716)
97b59000 97b66000 crashdmp crashdmp.sys Tue Jul 14 01:45:50 2009 (4A5BC72E)
90e1f000 90e83000 csc csc.sys Tue Jul 14 01:15:08 2009 (4A5BBFFC)
90e83000 90e9b000 dfsc dfsc.sys Tue Jul 14 01:14:16 2009 (4A5BBFC8)
915b4000 915c0000 discache discache.sys Tue Jul 14 01:24:04 2009 (4A5BC214)
8c600000 8c611000 disk disk.sys Tue Jul 14 01:11:28 2009 (4A5BBF20)
97aa9000 97ac2000 drmk drmk.sys Tue Jul 14 02:36:05 2009 (4A5BD2F5)
97b71000 97b7a000 dump_atapi dump_atapi.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
97b66000 97b71000 dump_dumpata dump_dumpata.sys Tue Jul 14 01:11:16 2009 (4A5BBF14)
97b7a000 97b8b000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 01:12:47 2009 (4A5BBF6F)
97ac2000 97acc000 Dxapi Dxapi.sys Tue Jul 14 01:25:25 2009 (4A5BC265)
90eff000 90fb6000 dxgkrnl dxgkrnl.sys Tue Nov 02 03:37:53 2010 (4CCF7981)
923a1000 923da000 dxgmms1 dxgmms1.sys Tue Nov 02 03:37:04 2010 (4CCF7950)
8c000000 8c011000 fileinfo fileinfo.sys Tue Jul 14 01:21:51 2009 (4A5BC18F)
8bfb2000 8bfe6000 fltmgr fltmgr.sys Tue Jul 14 01:11:13 2009 (4A5BBF11)
8c20e000 8c217000 Fs_Rec Fs_Rec.sys Tue Jul 14 01:11:14 2009 (4A5BBF12)
8c54e000 8c580000 fvevol fvevol.sys Sat Sep 26 04:24:21 2009 (4ABD7B55)
8c75d000 8c78e000 fwpkclnt fwpkclnt.sys Tue Jul 14 01:12:03 2009 (4A5BBF43)
82e1c000 82e53000 hal halmacpi.dll Tue Jul 14 01:11:03 2009 (4A5BBF07)
923da000 923f9000 HDAudBus HDAudBus.sys Tue Jul 14 01:50:55 2009 (4A5BC85F)
97a2a000 97a7a000 HdAudio HdAudio.sys Tue Jul 14 01:51:46 2009 (4A5BC892)
97afb000 97b0e000 HIDCLASS HIDCLASS.SYS Tue Jul 14 01:51:01 2009 (4A5BC865)
97b0e000 97b14480 HIDPARSE HIDPARSE.SYS Tue Jul 14 01:50:59 2009 (4A5BC863)
97af0000 97afb000 hidusb hidusb.sys Tue Jul 14 01:51:04 2009 (4A5BC868)
a0415000 a049a000 HTTP HTTP.sys Tue Jul 14 01:12:53 2009 (4A5BBF75)
8c7ee000 8c7f6000 hwpolicy hwpolicy.sys Tue Jul 14 01:11:01 2009 (4A5BBF05)
8c194000 8c19b000 intelide intelide.sys Tue Jul 14 01:11:19 2009 (4A5BBF17)
90eed000 90eff000 intelppm intelppm.sys Tue Jul 14 01:11:03 2009 (4A5BBF07)
96746000 96753000 kbdclass kbdclass.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
97b15000 97b21000 kbdhid kbdhid.sys Tue Jul 14 01:45:09 2009 (4A5BC705)
80bb5000 80bbd000 kdcom kdcom.dll Tue Jul 14 03:08:58 2009 (4A5BDAAA)
96762000 96796000 ks ks.sys Thu Mar 04 04:57:52 2010 (4B8F2FC0)
8c38b000 8c39e000 ksecdd ksecdd.sys Tue Jul 14 01:11:56 2009 (4A5BBF3C)
8c4fc000 8c521000 ksecpkg ksecpkg.sys Fri Dec 11 05:04:22 2009 (4B21C4C6)
91a00000 91a10000 L1E62x86 L1E62x86.sys Sun Aug 23 07:06:36 2009 (4A90CE5C)
97bea000 97bfa000 lltdio lltdio.sys Tue Jul 14 01:53:18 2009 (4A5BC8EE)
97b96000 97bb1000 luafv luafv.sys Tue Jul 14 01:15:44 2009 (4A5BC020)
8be34000 8beac000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 03:06:41 2009 (4A5BDA21)
97b38000 97b43000 monitor monitor.sys Tue Jul 14 01:25:58 2009 (4A5BC286)
96753000 96760000 mouclass mouclass.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
97b8b000 97b96000 mouhid mouhid.sys Tue Jul 14 01:45:08 2009 (4A5BC704)
8c1a9000 8c1bf000 mountmgr mountmgr.sys Tue Jul 14 01:11:27 2009 (4A5BBF1F)
a04b3000 a04c5000 mpsdrv mpsdrv.sys Tue Jul 14 01:52:52 2009 (4A5BC8D4)
a04c5000 a04e8000 mrxsmb mrxsmb.sys Sat Feb 27 08:32:02 2010 (4B88CA72)
a04e8000 a0523000 mrxsmb10 mrxsmb10.sys Sat Feb 27 08:32:21 2010 (4B88CA85)
a0523000 a053e000 mrxsmb20 mrxsmb20.sys Sat Feb 27 08:32:11 2010 (4B88CA7B)
8be29000 8be34000 Msfs Msfs.SYS Tue Jul 14 01:11:26 2009 (4A5BBF1E)
8c0eb000 8c0f3000 msisadrv msisadrv.sys Tue Jul 14 01:11:09 2009 (4A5BBF0D)
8c360000 8c38b000 msrpc msrpc.sys Tue Jul 14 01:11:59 2009 (4A5BBF3F)
915aa000 915b4000 mssmbios mssmbios.sys Tue Jul 14 01:19:25 2009 (4A5BC0FD)
8c7de000 8c7ee000 mup mup.sys Tue Jul 14 01:14:14 2009 (4A5BBFC6)
8c407000 8c4be000 ndis ndis.sys Tue Jul 14 01:12:24 2009 (4A5BBF58)
966c9000 966d4000 ndistapi ndistapi.sys Tue Jul 14 01:54:24 2009 (4A5BC930)
966d4000 966f6000 ndiswan ndiswan.sys Tue Jul 14 01:54:34 2009 (4A5BC93A)
967e8000 967f9000 NDProxy NDProxy.SYS Tue Jul 14 01:54:27 2009 (4A5BC933)
91514000 91522000 netbios netbios.sys Tue Jul 14 01:53:54 2009 (4A5BC912)
914bc000 914ee000 netbt netbt.sys Tue Jul 14 01:12:18 2009 (4A5BBF52)
8c4be000 8c4fc000 NETIO NETIO.SYS Tue Jul 14 01:12:35 2009 (4A5BBF63)
8bfe6000 8bff4000 Npfs Npfs.SYS Tue Jul 14 01:11:31 2009 (4A5BBF23)
915a0000 915aa000 nsiproxy nsiproxy.sys Tue Jul 14 01:12:08 2009 (4A5BBF48)
82a0c000 82e1c000 nt ntkrnlpa.exe Sat Jun 19 05:55:24 2010 (4C1C3FAC)
8c231000 8c360000 Ntfs Ntfs.sys Tue Jul 14 01:12:05 2009 (4A5BBF45)
8c5ed000 8c5f4000 Null Null.SYS Tue Jul 14 01:11:12 2009 (4A5BBF10)
9239f000 923a0080 nvBridge nvBridge.kmd Wed Jun 10 15:38:05 2009 (4A2FB73D)
91a2e000 9239ed20 nvlddmkm nvlddmkm.sys Wed Jun 10 16:17:13 2009 (4A2FC069)
914f5000 91514000 pacer pacer.sys Tue Jul 14 01:53:58 2009 (4A5BC916)
9666e000 96686000 parport parport.sys Tue Jul 14 01:45:34 2009 (4A5BC71E)
8c128000 8c139000 partmgr partmgr.sys Tue Jul 14 01:11:35 2009 (4A5BBF27)
a053e000 a0545000 parvdm parvdm.sys Tue Jul 14 01:45:29 2009 (4A5BC719)
8c0f3000 8c11d000 pci pci.sys Tue Jul 14 01:11:16 2009 (4A5BBF14)
8c19b000 8c1a9000 PCIIDEX PCIIDEX.SYS Tue Jul 14 01:11:15 2009 (4A5BBF13)
8c200000 8c20e000 pcw pcw.sys Tue Jul 14 01:11:10 2009 (4A5BBF0E)
a0547000 a05de000 peauth peauth.sys Tue Jul 14 02:35:44 2009 (4A5BD2E0)
97a7a000 97aa9000 portcls portcls.sys Tue Jul 14 01:51:00 2009 (4A5BC864)
8beac000 8bebd000 PSHED PSHED.dll Tue Jul 14 03:09:36 2009 (4A5BDAD0)
966b1000 966c9000 rasl2tp rasl2tp.sys Tue Jul 14 01:54:33 2009 (4A5BC939)
966f6000 9670e000 raspppoe raspppoe.sys Tue Jul 14 01:54:53 2009 (4A5BC94D)
9670e000 96725000 raspptp raspptp.sys Tue Jul 14 01:54:47 2009 (4A5BC947)
96725000 9673c000 rassstp rassstp.sys Tue Jul 14 01:54:57 2009 (4A5BC951)
9155f000 915a0000 rdbss rdbss.sys Tue Jul 14 01:14:26 2009 (4A5BBFD2)
9673c000 96746000 rdpbus rdpbus.sys Tue Jul 14 02:02:40 2009 (4A5BCB20)
8c011000 8c019000 RDPCDD RDPCDD.sys Tue Jul 14 02:01:40 2009 (4A5BCAE4)
8c1f4000 8c1fc000 rdpencdd rdpencdd.sys Tue Jul 14 02:01:39 2009 (4A5BCAE3)
8be21000 8be29000 rdprefmp rdprefmp.sys Tue Jul 14 02:01:41 2009 (4A5BCAE5)
8c521000 8c54e000 rdyboost rdyboost.sys Tue Jul 14 01:22:02 2009 (4A5BC19A)
97a00000 97a13000 rspndr rspndr.sys Tue Jul 14 01:53:20 2009 (4A5BC8F0)
a05de000 a05e8000 secdrv secdrv.SYS Wed Sep 13 15:18:32 2006 (45080528)
96688000 96692000 serenum serenum.sys Tue Jul 14 01:45:27 2009 (4A5BC717)
91522000 9153c000 serial serial.sys Tue Jul 14 01:45:33 2009 (4A5BC71D)
8c7d6000 8c7de000 spldr spldr.sys Mon May 11 18:13:47 2009 (4A084EBB)
a1e8e000 a1edf000 srv srv.sys Fri Aug 27 05:31:26 2010 (4C77318E)
a1e3f000 a1e8e000 srv2 srv2.sys Fri Aug 27 05:30:45 2010 (4C773165)
90fb6000 90fd7000 srvnet srvnet.sys Fri Aug 27 05:30:39 2010 (4C77315F)
96760000 96761380 swenum swenum.sys Tue Jul 14 01:45:08 2009 (4A5BC704)
a0545000 a05462c0 TBPanel TBPanel.SYS Sat Jul 27 01:01:04 2002 (3D41D4B0)
8c614000 8c75d000 tcpip tcpip.sys Mon Jun 14 05:36:59 2010 (4C15A3DB)
a05e8000 a05f5000 tcpipreg tcpipreg.sys Tue Jul 14 01:54:14 2009 (4A5BC926)
91449000 91454000 TDI TDI.SYS Tue Jul 14 01:12:12 2009 (4A5BBF4C)
91432000 91449000 tdx tdx.sys Tue Jul 14 01:12:10 2009 (4A5BBF4A)
9154f000 9155f000 termdd termdd.sys Tue Jul 14 02:01:35 2009 (4A5BCADF)
98d70000 98d79000 TSDDD TSDDD.dll unavailable (00000000)
90ecc000 90eed000 tunnel tunnel.sys Tue Jul 14 01:54:03 2009 (4A5BC91B)
96796000 967a4000 umbus umbus.sys Tue Jul 14 01:51:38 2009 (4A5BC88A)
97ad9000 97af0000 usbccgp usbccgp.sys Tue Jul 14 01:51:31 2009 (4A5BC883)
97ad7000 97ad8700 USBD USBD.SYS Tue Jul 14 01:51:05 2009 (4A5BC869)
9665f000 9666e000 usbehci usbehci.sys Tue Jul 14 01:51:14 2009 (4A5BC872)
967a4000 967e8000 usbhub usbhub.sys Tue Jul 14 01:52:06 2009 (4A5BC8A6)
96614000 9665f000 USBPORT USBPORT.SYS Tue Jul 14 01:51:13 2009 (4A5BC871)
97acc000 97ad7000 usbprint usbprint.sys Tue Jul 14 02:17:06 2009 (4A5BCE82)
97b21000 97b38000 USBSTOR USBSTOR.SYS Tue Jul 14 01:51:19 2009 (4A5BC877)
91a10000 91a1b000 usbuhci usbuhci.sys Tue Jul 14 01:51:10 2009 (4A5BC86E)
8c11d000 8c128000 vdrvroot vdrvroot.sys Tue Jul 14 01:46:19 2009 (4A5BC74B)
8c217000 8c223000 vga vga.sys Tue Jul 14 01:25:50 2009 (4A5BC27E)
8be00000 8be21000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 01:25:49 2009 (4A5BC27D)
8c78e000 8c796380 vmstorfl vmstorfl.sys Tue Jul 14 01:28:44 2009 (4A5BC32C)
8c139000 8c149000 volmgr volmgr.sys Tue Jul 14 01:11:25 2009 (4A5BBF1D)
8c149000 8c194000 volmgrx volmgrx.sys Tue Jul 14 01:11:41 2009 (4A5BBF2D)
8c797000 8c7d6000 volsnap volsnap.sys Tue Jul 14 01:11:34 2009 (4A5BBF26)
9153c000 9154f000 wanarp wanarp.sys Tue Jul 14 01:55:02 2009 (4A5BC956)
8c223000 8c230000 watchdog watchdog.sys Tue Jul 14 01:24:10 2009 (4A5BC21A)
8c01b000 8c08c000 Wdf01000 Wdf01000.sys Tue Jul 14 01:11:36 2009 (4A5BBF28)
8c08c000 8c09a000 WDFLDR WDFLDR.SYS Tue Jul 14 01:11:25 2009 (4A5BBF1D)
914ee000 914f5000 wfplwf wfplwf.sys Tue Jul 14 01:53:51 2009 (4A5BC90F)
98b10000 98d5b000 win32k win32k.sys Wed Oct 20 05:00:01 2010 (4CBE5B31)
8c0e2000 8c0eb000 WMILIB WMILIB.SYS Tue Jul 14 01:11:22 2009 (4A5BBF1A)
97bd0000 97bea000 WudfPf WudfPf.sys Tue Jul 14 01:50:13 2009 (4A5BC835)
a1edf000 a1eff480 WUDFRd WUDFRd.sys Tue Jul 14 01:50:44 2009 (4A5BC854)
Unloaded modules:
a1f00000 a1f6a000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8c5a5000 8c5b2000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8c5b2000 8c5bd000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
8c7f6000 8c7ff000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
8c5bd000 8c5ce000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000