Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Blue Screen images


15 Jan 2010   #1

windows 7
 
 
Blue Screen images

Almost every time I access image files on a network drive i get the BSoD
Hope you can help

My System SpecsSystem Spec
.

15 Jan 2010   #2

Win 8 Release candidate 8400
 
 

Quote   Quote: Originally Posted by gavingks View Post
Almost every time I access image files on a network drive i get the BSoD
Hope you can help


Hi and welcome

This crash was caused by mrxsmb10.sys. You obviously upgraded from vista to win 7 and the drivers below are from there. there is a hoxfix available for this specific problem here A reliability and performance update is available for computers that are running Windows Vista SP1 and Windows Server 2008

I would update the drivers
run a system file check to verify and repair your system files
to run type cmd in search>right click abd run as admin>sfc /scannow

Ken J


ancient drivers need to be updated

Code:
int15.sys        0x9d1c1000    0x9d1d2000    0x00011000    0x3f7a664d    10/1/2003 12:29:49 AM                        
BTWSp50.sys        0x9ae23000    0x9ae27500    0x00004500    0x413e0f09    9/7/2004 2:42:01 PM                        
DPortIO.sys        0x914db000    0x914de380    0x00003380    0x43abb190    12/23/2005 3:13:04 AM                        
secdrv.SYS        0xa3cca000    0xa3cd4000    0x0000a000    0x45080528    9/13/2006 8:18:32 AM                        
DKbFltr.sys        0x93a96000    0x93aa0000    0x0000a000    0x4537363c    10/19/2006 3:24:28 AM                        
kqemu.sys        0x92fc2000    0x92fdf000    0x0001d000    0x45c8df26    2/6/2007 3:03:50 PM                        
PxHelp20.sys        0x8b5c9000    0x8b5d1de0    0x00008de0    0x4679a978    6/20/2007 5:26:00 PM                        
000.fcl        0xa3d02000    0xa3d1f000    0x0001d000    0x4705a53f    10/4/2007 9:45:19 PM                        
AlfaFF.sys        0x8b582000    0x8b58ad00    0x00008d00    0x47309837    11/6/2007 11:37:11 AM                        
NTIPPKernel.sys        0x92fdf000    0x92ffce00    0x0001de00    0x4739a4de    11/13/2007 8:21:34 AM                        
itecir.sys        0x93a26000    0x93a7e000    0x00058000    0x47678eeb    12/18/2007 4:12:11 AM                        
SynTP.sys        0x93aad000    0x93adb680    0x0002e680    0x4790f4e7    1/18/2008 1:50:15 PM                        
NTIDrvr.sys        0x93ae9000    0x93af1000    0x00008000    0x47a124c2    1/30/2008 8:30:42 PM                        
vfs101x.sys        0x9afaa000    0x9afb7000    0x0000d000    0x47aa706f    2/6/2008 9:43:59 PM                        
psdfilter.sys        0x8b579000    0x8b582000    0x00009000    0x47b98d02    2/18/2008 8:49:54 AM                        
PSDNServ.sys        0xa3caf000    0xa3cb8000    0x00009000    0x47b98d2b    2/18/2008 8:50:35 AM                        
psdvdisk.sys        0xa3cb8000    0xa3cca000    0x00012000    0x47b98d40    2/18/2008 8:50:56 AM                        
nvlddmkm.sys        0x9282a000    0x92f4c440    0x00722440    0x47d1b339    3/7/2008 4:27:21 PM                        
RTKVHDA.sys        0x9a406000    0x9a5ffc80    0x001f9c80    0x47d66502    3/11/2008 5:54:58 AM                        
iaStor.sys        0x8b425000    0x8b4ff000    0x000da000    0x48cad1b8    9/12/2008 3:31:52 PM                        
dump_iaStor.sys        0x9082d000    0x90907000    0x000da000    0x48cad1b8    9/12/2008 3:31:52 PM                        
AGRSM.sys        0x9ae2f000    0x9af35000    0x00106000    0x49184ba5    11/10/2008 9:56:37 AM

Code:
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\011210-29827-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*d:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x82e13000 PsLoadedModuleList = 0x82f5b810
Debug session time: Tue Jan 12 08:00:53.119 2010 (GMT-5)
System Uptime: 1 days 19:04:02.598
Loading Kernel Symbols
...............................................................
................................................................
.......................................................
Loading User Symbols
Loading unloaded module list
..............
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

RDR_FILE_SYSTEM (27)
    If you see RxExceptionFilter on the stack then the 2nd and 3rd parameters are the
    exception record and context record. Do a .cxr on the 3rd parameter and then kb to
    obtain a more informative stack trace.
    The high 16 bits of the first parameter is the RDBSS bugcheck code, which is defined
    as follows:
     RDBSS_BUG_CHECK_CACHESUP  = 0xca550000,
     RDBSS_BUG_CHECK_CLEANUP   = 0xc1ee0000,
     RDBSS_BUG_CHECK_CLOSE     = 0xc10e0000,
     RDBSS_BUG_CHECK_NTEXCEPT  = 0xbaad0000,
Arguments:
Arg1: baad0073
Arg2: 9a3173d0
Arg3: 9a316fb0
Arg4: 9d16f4ef

Debugging Details:
------------------

Unable to load image \SystemRoot\system32\Drivers\AlfaFF.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for AlfaFF.sys
*** ERROR: Module load completed but symbols could not be loaded for AlfaFF.sys
*** WARNING: Unable to verify timestamp for RapportPG.sys
*** ERROR: Module load completed but symbols could not be loaded for RapportPG.sys

EXCEPTION_RECORD:  9a3173d0 -- (.exr 0xffffffff9a3173d0)
ExceptionAddress: 9d16f4ef (mrxsmb10!MRxSmbQueryFileInformation+0x000005f9)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000000
   Parameter[1]: 00000008
Attempt to read from address 00000008

CONTEXT:  9a316fb0 -- (.cxr 0xffffffff9a316fb0)
eax=00000000 ebx=8a7af860 ecx=00000000 edx=00000000 esi=8a7af950 edi=a84c8648
eip=9d16f4ef esp=9a317498 ebp=9a31753c iopl=0         nv up ei pl zr na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
mrxsmb10!MRxSmbQueryFileInformation+0x5f9:
9d16f4ef 668b4008        mov     ax,word ptr [eax+8]      ds:0023:00000008=????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  00000000

EXCEPTION_PARAMETER2:  00000008

READ_ADDRESS: GetPointerFromAddress: unable to read from 82f7b718
Unable to read MiSystemVaType memory at 82f5b160
 00000008 

FOLLOWUP_IP: 
mrxsmb10!MRxSmbQueryFileInformation+5f9
9d16f4ef 668b4008        mov     ax,word ptr [eax+8]

FAULTING_IP: 
mrxsmb10!MRxSmbQueryFileInformation+5f9
9d16f4ef 668b4008        mov     ax,word ptr [eax+8]

BUGCHECK_STR:  0x27

DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

LAST_CONTROL_TRANSFER:  from 9d135e39 to 9d16f4ef

STACK_TEXT:  
9a31753c 9d135e39 8a7af860 9a317624 9151e4ab mrxsmb10!MRxSmbQueryFileInformation+0x5f9
9a317548 9151e4ab 8a7af860 8a7af8f0 8a7af860 mrxsmb!SmbShellQueryFileInformation+0x1b
9a317624 9142b81b 017af860 9a3178b4 9a31765c csc!CscQueryFileInformation+0x1c0
9a317634 91449cc0 8a7af860 a4800b90 00000005 rdbss!RxpQueryInfoMiniRdr+0x53
9a31765c 9144996a 8a7af860 89f97008 a4800b90 rdbss!RxQueryStandardInfo+0xbe
9a3176bc 91427fb1 8a7af860 89f97008 0b72f058 rdbss!RxCommonQueryInformation+0x1f5
9a317744 91442e2b 91438240 89f97008 85b19190 rdbss!RxFsdCommonDispatch+0x646
9a317774 9d146298 8a7dc1d0 05f97008 89f970c0 rdbss!RxFsdDispatch+0x1ab
9a317790 82e4f4bc 8a7dc1d0 01f97008 89f970e4 mrxsmb!MRxSmbFsdDispatch+0x9a
9a3177a8 8bbebbb0 00000103 8572fd48 85b19190 nt!IofCallDriver+0x63
9a3177c4 8bbeab52 8572fd48 00000000 89f97008 mup!MupiCallUncProvider+0x10f
9a3177dc 8bbeb13e 8572fd48 00000000 870f7030 mup!MupStateMachine+0x9b
9a3177f4 82e4f4bc 870f7030 8572fd48 89f97008 mup!MupFsdIrpPassThrough+0x93
9a31780c 8b53a20c 00000000 85cd8280 00000000 nt!IofCallDriver+0x63
9a317830 8b53b0bf 9a317850 870f77a8 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x2aa
9a317868 8b58650e 870f8c48 859c3390 9a3178b4 fltmgr!FltPerformSynchronousIo+0xb9
WARNING: Stack unwind information not available. Following frames may be wrong.
9a317878 8b5865fe 870f8c48 85cd8280 9a31789c AlfaFF+0x450e
9a3178b4 8b583837 8727fcf8 9a31792c 859c3390 AlfaFF+0x45fe
9a3178f0 8b583a21 0127fcf8 9a31792c 859097e0 AlfaFF+0x1837
9a317908 8b536324 8727fcf8 9a31792c 859097e0 AlfaFF+0x1a21
9a317970 8b539512 0027fc98 8727fc98 1000000c fltmgr!FltpPerformPostCallbacks+0x24a
9a317984 8b539b46 8727fc98 85997c18 9a3179c4 fltmgr!FltpProcessIoCompletion+0x10
9a317994 8b53a29c 870f77a8 85997c18 8727fc98 fltmgr!FltpPassThroughCompletion+0x98
9a3179c4 8b54d8c9 9a3179e4 00000000 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x33a
9a317a10 82e4f4bc 870f77a8 870f7278 85b191ec fltmgr!FltpCreate+0x2db
9a317a28 8305362d b37dd328 9a317bd0 00000000 nt!IofCallDriver+0x63
9a317b00 830341d7 870f7030 855c5950 8adeb5d0 nt!IopParseDevice+0xed7
9a317b7c 8305a24d 00000000 9a317bd0 00000040 nt!ObpLookupObjectName+0x4fa
9a317bdc 830525ab 0071ef94 855c5950 83093001 nt!ObOpenObjectByName+0x159
9a317c58 8305deb6 0071f050 00100080 0071ef94 nt!IopCreateFile+0x673
9a317ca4 914674e9 0071f050 00100080 0071ef94 nt!NtCreateFile+0x34
9a317d00 82e5642a 0071f050 00100080 0071ef94 RapportPG+0x14e9
9a317d00 777e64f4 0071f050 00100080 0071ef94 nt!KiFastCallEntry+0x12a
0071eff8 00000000 00000000 00000000 00000000 0x777e64f4


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  mrxsmb10!MRxSmbQueryFileInformation+5f9

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: mrxsmb10

IMAGE_NAME:  mrxsmb10.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bbfda

STACK_COMMAND:  .cxr 0xffffffff9a316fb0 ; kb

FAILURE_BUCKET_ID:  0x27_mrxsmb10!MRxSmbQueryFileInformation+5f9

BUCKET_ID:  0x27_mrxsmb10!MRxSmbQueryFileInformation+5f9

Followup: MachineOwner
---------
My System SpecsSystem Spec
15 Jan 2010   #3

windows 7
 
 
THank you but

Tried the link you gave but was advised the downloaded update was not applicable on my PC
the link took me to a vista download page but warned me that this is not my OS
am i just being a bit thick
My System SpecsSystem Spec
.


Reply

 Blue Screen images




Thread Tools



Similar help and support threads for: Blue Screen images
Thread Forum
Blue Screen Error but no actual blue screen pops up BSOD Help and Support
Thumnail images on my Screen o.O ??? Browsers & Mail
Blue Screen and Memory Dump after opening directory with many images BSOD Help and Support
Blue Screen out of the Blue, Was working fine for 9+ hours then c... BSOD Help and Support
Screen Flickering with certain images... BSOD Help and Support
World's first 'thought images' seen on screen Chillout Room

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:22 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33