Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Can someone please analyze this dump file?

21 Sep 2011   #1

Windows 2000 5.0 Build 2195
Can someone please analyze this dump file?

For some reason, I can't get Windbg to work for me and its driving me nuts! >_<

Much appreciated!

My error:

DBGHELP: c:\symbols\ntkrnlmp.pdb\47F5C3BF9E0A493C9F63BB8F6413358B2\ntkrnlmp.pdb - file system or network error reading pdb
DBGHELP: ntkrnlmp.pdb - file not found
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntkrnlmp.exe -

My System SpecsSystem Spec
21 Sep 2011   #2

Windows 7 Ultimate 64bit SP1

volsnap.sys Volume Shadow Copy Driver.
HTML Code:
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Users\x\Desktop\Dump\092111-44273-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`04e49000 PsLoadedModuleList = 0xfffff800`0508e670
Debug session time: Wed Sep 21 07:15:02.214 2011 (UTC + 3:00)
System Uptime: 1 days 0:09:10.167
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

Use !analyze -v to get detailed debugging information.

BugCheck 19, {21, fffffa801514e000, 3850, 0}

Probably caused by : volsnap.sys ( volsnap!VspFreeBitMap+3d )

Followup: MachineOwner

1: kd> !analyze -v
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arg1: 0000000000000021, the data following the pool block being freed is corrupt.  Typically this means the consumer (call stack ) has overrun the block.
Arg2: fffffa801514e000, The pool pointer being freed.
Arg3: 0000000000003850, The number of bytes allocated for the pool block.
Arg4: 0000000000000000, The corrupted value found following the pool block.

Debugging Details:

BUGCHECK_STR:  0x19_21

POOL_ADDRESS: GetPointerFromAddress: unable to read from fffff800050f8100





LAST_CONTROL_TRANSFER:  from fffff80004ff39b2 to fffff80004ec5c40

fffff880`03585a38 fffff800`04ff39b2 : 00000000`00000019 00000000`00000021 fffffa80`1514e000 00000000`00003850 : nt!KeBugCheckEx
fffff880`03585a40 fffff880`01a69dfd : 00000000`00000000 fffffa80`0f0eea30 00000000`6d536f56 00000000`00000000 : nt!ExDeferredFreePool+0xfaa
fffff880`03585af0 fffff880`01aa02fa : fffffa80`0d363650 00000000`01d1c240 fffffa80`0f0eea30 fffffa80`11690850 : volsnap!VspFreeBitMap+0x3d
fffff880`03585b20 fffff800`04ed0001 : fffff880`01aa0060 fffff800`050662b8 fffffa80`0c781b60 fffffa80`13e53dc0 : volsnap!VspReadjustBitmap+0x29a
fffff880`03585b70 fffff800`05160fee : 00000000`00000000 fffffa80`0c781b60 00000000`00000080 fffffa80`0c6fe890 : nt!ExpWorkerThread+0x111
fffff880`03585c00 fffff800`04eb75e6 : fffff880`03389180 fffffa80`0c781b60 fffff880`033940c0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`03585c40 00000000`00000000 : fffff880`03586000 fffff880`03580000 fffff880`03585690 00000000`00000000 : nt!KxStartSystemThread+0x16


fffff880`01a69dfd 4c8b5b08        mov     r11,qword ptr [rbx+8]


SYMBOL_NAME:  volsnap!VspFreeBitMap+3d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: volsnap

IMAGE_NAME:  volsnap.sys


FAILURE_BUCKET_ID:  X64_0x19_21_volsnap!VspFreeBitMap+3d

BUCKET_ID:  X64_0x19_21_volsnap!VspFreeBitMap+3d

Followup: MachineOwner
For the windbg,

Uninstall it,reinstall it,set this symbol path,

Also the last post HERE it may help you work faster
My System SpecsSystem Spec
21 Sep 2011   #3

Windows 2000 5.0 Build 2195

Thank you. I appreciate everything include the advice At least I know what's causing my recent frequent BSODs now, and I know exactly where to start.

Thanks once again!
My System SpecsSystem Spec

21 Sep 2011   #4

Windows 7 Ultimate 64bit SP1

You are welcome!
My System SpecsSystem Spec

 Can someone please analyze this dump file?

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Similar help and support threads
Thread Forum
BSOD problem, need help to analyze the dump
The minidump is in the .rar file. I would greatly appreciate if someone took a bit of their time and would take a look at it. My specs are in my profile. This is pretty fresh win 7 64 bit install, but recently after installing some important software I've been receiving this same BSOD dump. ...
BSOD Help and Support
Where do I retreive a core dump and how do I analyze it?
My PC keeps crashing with the blue screen of death. The BSOD dumps my physical memory somewhere. I assume that's so we can figure out what went wrong. Where is the physical memory dump? How do I analyze it (or, more accurately, who can analyze it for me)? The (important part of the) BSOD's...
BSOD Help and Support
Can anyone analyze these dump files...
...and tell me the culprit? They are from a Dell Latitude D630, running XP SP3. Thank you!
BSOD Help and Support
Can anyone analyze dump files?
Hey all, new to the forums. I have an issue that's been around for a long time: 'nvlddmkm has stopped responding and has recovered' I've been through the ringer trying to pin this down on my specific system the past few weeks (I received the system less than a month ago). From updating...
The page failed to load.. Dump File Plz Analyze
I get the error "The page failed to load" in control panel, but for a strange reason, it only occurs on every 5th attempt at opening a setting. After this error, explorer.exe will either freeze/crash (and I need to kill it) or it'll just sit there still trying to load the page but allows me to...
BSOD Help and Support
Can you please analyze this dump file .
ANd also explain how to read this ( what program is needed ) . I just see random stuff in the dmp file .. Thanks a million ..
BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 21:26.

Twitter Facebook Google+

Windows 7 Forums

Seven Forums Android App Seven Forums IOS App