New
#1
Random BSOD crash
OS: Windows 7 Enterprise x86 32 bit
Original corporate multilicense version, full retail.
age of system (hardware)? : few months
age of OS installation : 1 months
I have a similar problem on three computers. Random restarts and go to BSOD. I use our tool to make report, and minidumps.
I try to analyze minidumps in WinDbg, but all this information is difficult to understand for me.
Code:Microsoft (R) Windows Debugger Version 6.9.0003.113 X86 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Documents and Settings\rasto\Desktop\Windows_NT6_BSOD_jcgriff2\011311-18751-01.dmp] Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: C:\WINDOWS\Symbols Executable search path is: Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2 *** WARNING: Unable to verify timestamp for ntkrnlpa.exe Windows 7 Kernel Version 7600 MP (4 procs) Free x86 compatible Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7600.16617.x86fre.win7_gdr.100618-1621 Kernel base = 0x82a0c000 PsLoadedModuleList = 0x82b54810 Debug session time: Thu Jan 13 07:51:03.987 2011 (GMT+1) System Uptime: 0 days 0:13:13.751 Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2 *** WARNING: Unable to verify timestamp for ntkrnlpa.exe Loading Kernel Symbols ....................................................................................................................................................... Loading User Symbols Loading unloaded module list ..... Unable to load image \SystemRoot\System32\win32k.sys, Win32 error 0n2 *** WARNING: Unable to verify timestamp for win32k.sys ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 1000008E, {c0000005, 98becdd2, a6a34b90, 0} Probably caused by : win32k.sys ( win32k!xxxMinMaximize+2c3 ) Followup: MachineOwner --------- 0: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e) This is a very common bugcheck. Usually the exception address pinpoints the driver/function that caused the problem. Always note this address as well as the link date of the driver/image that contains this address. Some common problems are exception code 0x80000003. This means a hard coded breakpoint or assertion was hit, but this system was booted /NODEBUG. This is not supposed to happen as developers should never have hardcoded breakpoints in retail code, but ... If this happens, make sure a debugger gets connected, and the system is booted /DEBUG. This will let us see why this breakpoint is happening. Arguments: Arg1: c0000005, The exception code that was not handled Arg2: 98becdd2, The address that the exception occurred at Arg3: a6a34b90, Trap Frame Arg4: 00000000 Debugging Details: ------------------ EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s". FAULTING_IP: win32k!xxxMinMaximize+2c3 98becdd2 837d1800 cmp dword ptr [ebp+18h],0 TRAP_FRAME: a6a34b90 -- (.trap 0xffffffffa6a34b90) ErrCode = 00000000 eax=00000001 ebx=fe380b58 ecx=00000000 edx=00000000 esi=a6a34cb8 edi=7e3d7728 eip=98becdd2 esp=a6a34c04 ebp=26a34ccc iopl=0 nv up ei pl zr na pe nc cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246 win32k!xxxMinMaximize+0x2c3: 98becdd2 837d1800 cmp dword ptr [ebp+18h],0 ss:0010:26a34ce4=???????? Resetting default scope CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0x8E PROCESS_NAME: exe LAST_CONTROL_TRANSFER: from 00000000 to 98becdd2 STACK_TEXT: a6a34cc0 00000000 00000001 a6a34d00 98bd4fae win32k!xxxMinMaximize+0x2c3 STACK_COMMAND: kb FOLLOWUP_IP: win32k!xxxMinMaximize+2c3 98becdd2 837d1800 cmp dword ptr [ebp+18h],0 SYMBOL_STACK_INDEX: 0 SYMBOL_NAME: win32k!xxxMinMaximize+2c3 FOLLOWUP_NAME: MachineOwner MODULE_NAME: win32k IMAGE_NAME: win32k.sys DEBUG_FLR_IMAGE_TIMESTAMP: 4cbe5b31 FAILURE_BUCKET_ID: 0x8E_win32k!xxxMinMaximize+2c3 BUCKET_ID: 0x8E_win32k!xxxMinMaximize+2c3 Followup: MachineOwner --------- 0: kd> lmtsmn start end module name 8c09a000 8c0e2000 ACPI ACPI.sys Tue Jul 14 01:11:11 2009 (4A5BBF0F) 9145e000 914b8000 afd afd.sys Tue Jul 14 01:12:34 2009 (4A5BBF62) 9669f000 966b1000 AgileVpn AgileVpn.sys Tue Jul 14 01:55:00 2009 (4A5BC954) 8c1eb000 8c1f4000 amdxata amdxata.sys Tue May 19 19:57:35 2009 (4A12F30F) 96686000 966876c0 ASACPI ASACPI.sys Wed May 13 13:11:32 2009 (4A0AAAE4) 90eca000 90ecb440 AsIO AsIO.sys Mon Dec 17 10:10:20 2007 (47663CFC) 97bc8000 97bd0000 aswFsBlk aswFsBlk.sys Tue Sep 15 12:55:18 2009 (4AAF7296) 97bb1000 97bc8000 aswMonFlt aswMonFlt.sys Tue Sep 15 12:55:08 2009 (4AAF728C) 914b8000 914bbb00 aswRdr aswRdr.SYS Wed Nov 25 00:48:56 2009 (4B0C70E8) 90ea9000 90eca000 aswSP aswSP.SYS Tue Sep 15 12:55:29 2009 (4AAF72A1) 91454000 9145d8c0 aswTdi aswTdi.SYS Wed Nov 25 00:49:06 2009 (4B0C70F2) a1f6a000 a1f73000 asyncmac asyncmac.sys Tue Jul 14 01:54:46 2009 (4A5BC946) 8c1bf000 8c1c8000 atapi atapi.sys Tue Jul 14 01:11:15 2009 (4A5BBF13) 8c1c8000 8c1eb000 ataport ataport.SYS Tue Jul 14 01:11:18 2009 (4A5BBF16) 8c5f4000 8c5fb000 Beep Beep.SYS Tue Jul 14 01:45:00 2009 (4A5BC6FC) 90e9b000 90ea9000 blbdrive blbdrive.sys Tue Jul 14 01:23:04 2009 (4A5BC1D8) 8bebd000 8bec5000 BOOTVID BOOTVID.dll Tue Jul 14 03:04:34 2009 (4A5BD9A2) a049a000 a04b3000 bowser bowser.sys Tue Jul 14 01:14:21 2009 (4A5BBFCD) 98da0000 98dbe000 cdd cdd.dll Tue Nov 02 05:23:36 2010 (4CCF9248) 97b43000 97b59000 cdfs cdfs.sys Tue Jul 14 01:11:14 2009 (4A5BBF12) 8c5ce000 8c5ed000 cdrom cdrom.sys Tue Jul 14 01:11:24 2009 (4A5BBF1C) 8bf07000 8bfb2000 CI CI.dll Tue Jul 14 03:09:28 2009 (4A5BDAC8) 8c580000 8c5a5000 CLASSPNP CLASSPNP.SYS Tue Jul 14 01:11:20 2009 (4A5BBF18) 8bec5000 8bf07000 CLFS CLFS.SYS Tue Jul 14 01:11:10 2009 (4A5BBF0E) 8c39e000 8c3fb000 cng cng.sys Tue Jul 14 01:32:55 2009 (4A5BC427) 96692000 9669f000 CompositeBus CompositeBus.sys Tue Jul 14 01:45:26 2009 (4A5BC716) 97b59000 97b66000 crashdmp crashdmp.sys Tue Jul 14 01:45:50 2009 (4A5BC72E) 90e1f000 90e83000 csc csc.sys Tue Jul 14 01:15:08 2009 (4A5BBFFC) 90e83000 90e9b000 dfsc dfsc.sys Tue Jul 14 01:14:16 2009 (4A5BBFC8) 915b4000 915c0000 discache discache.sys Tue Jul 14 01:24:04 2009 (4A5BC214) 8c600000 8c611000 disk disk.sys Tue Jul 14 01:11:28 2009 (4A5BBF20) 97aa9000 97ac2000 drmk drmk.sys Tue Jul 14 02:36:05 2009 (4A5BD2F5) 97b71000 97b7a000 dump_atapi dump_atapi.sys Tue Jul 14 01:11:15 2009 (4A5BBF13) 97b66000 97b71000 dump_dumpata dump_dumpata.sys Tue Jul 14 01:11:16 2009 (4A5BBF14) 97b7a000 97b8b000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 01:12:47 2009 (4A5BBF6F) 97ac2000 97acc000 Dxapi Dxapi.sys Tue Jul 14 01:25:25 2009 (4A5BC265) 90eff000 90fb6000 dxgkrnl dxgkrnl.sys Tue Nov 02 03:37:53 2010 (4CCF7981) 923a1000 923da000 dxgmms1 dxgmms1.sys Tue Nov 02 03:37:04 2010 (4CCF7950) 8c000000 8c011000 fileinfo fileinfo.sys Tue Jul 14 01:21:51 2009 (4A5BC18F) 8bfb2000 8bfe6000 fltmgr fltmgr.sys Tue Jul 14 01:11:13 2009 (4A5BBF11) 8c20e000 8c217000 Fs_Rec Fs_Rec.sys Tue Jul 14 01:11:14 2009 (4A5BBF12) 8c54e000 8c580000 fvevol fvevol.sys Sat Sep 26 04:24:21 2009 (4ABD7B55) 8c75d000 8c78e000 fwpkclnt fwpkclnt.sys Tue Jul 14 01:12:03 2009 (4A5BBF43) 82e1c000 82e53000 hal halmacpi.dll Tue Jul 14 01:11:03 2009 (4A5BBF07) 923da000 923f9000 HDAudBus HDAudBus.sys Tue Jul 14 01:50:55 2009 (4A5BC85F) 97a2a000 97a7a000 HdAudio HdAudio.sys Tue Jul 14 01:51:46 2009 (4A5BC892) 97afb000 97b0e000 HIDCLASS HIDCLASS.SYS Tue Jul 14 01:51:01 2009 (4A5BC865) 97b0e000 97b14480 HIDPARSE HIDPARSE.SYS Tue Jul 14 01:50:59 2009 (4A5BC863) 97af0000 97afb000 hidusb hidusb.sys Tue Jul 14 01:51:04 2009 (4A5BC868) a0415000 a049a000 HTTP HTTP.sys Tue Jul 14 01:12:53 2009 (4A5BBF75) 8c7ee000 8c7f6000 hwpolicy hwpolicy.sys Tue Jul 14 01:11:01 2009 (4A5BBF05) 8c194000 8c19b000 intelide intelide.sys Tue Jul 14 01:11:19 2009 (4A5BBF17) 90eed000 90eff000 intelppm intelppm.sys Tue Jul 14 01:11:03 2009 (4A5BBF07) 96746000 96753000 kbdclass kbdclass.sys Tue Jul 14 01:11:15 2009 (4A5BBF13) 97b15000 97b21000 kbdhid kbdhid.sys Tue Jul 14 01:45:09 2009 (4A5BC705) 80bb5000 80bbd000 kdcom kdcom.dll Tue Jul 14 03:08:58 2009 (4A5BDAAA) 96762000 96796000 ks ks.sys Thu Mar 04 04:57:52 2010 (4B8F2FC0) 8c38b000 8c39e000 ksecdd ksecdd.sys Tue Jul 14 01:11:56 2009 (4A5BBF3C) 8c4fc000 8c521000 ksecpkg ksecpkg.sys Fri Dec 11 05:04:22 2009 (4B21C4C6) 91a00000 91a10000 L1E62x86 L1E62x86.sys Sun Aug 23 07:06:36 2009 (4A90CE5C) 97bea000 97bfa000 lltdio lltdio.sys Tue Jul 14 01:53:18 2009 (4A5BC8EE) 97b96000 97bb1000 luafv luafv.sys Tue Jul 14 01:15:44 2009 (4A5BC020) 8be34000 8beac000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 03:06:41 2009 (4A5BDA21) 97b38000 97b43000 monitor monitor.sys Tue Jul 14 01:25:58 2009 (4A5BC286) 96753000 96760000 mouclass mouclass.sys Tue Jul 14 01:11:15 2009 (4A5BBF13) 97b8b000 97b96000 mouhid mouhid.sys Tue Jul 14 01:45:08 2009 (4A5BC704) 8c1a9000 8c1bf000 mountmgr mountmgr.sys Tue Jul 14 01:11:27 2009 (4A5BBF1F) a04b3000 a04c5000 mpsdrv mpsdrv.sys Tue Jul 14 01:52:52 2009 (4A5BC8D4) a04c5000 a04e8000 mrxsmb mrxsmb.sys Sat Feb 27 08:32:02 2010 (4B88CA72) a04e8000 a0523000 mrxsmb10 mrxsmb10.sys Sat Feb 27 08:32:21 2010 (4B88CA85) a0523000 a053e000 mrxsmb20 mrxsmb20.sys Sat Feb 27 08:32:11 2010 (4B88CA7B) 8be29000 8be34000 Msfs Msfs.SYS Tue Jul 14 01:11:26 2009 (4A5BBF1E) 8c0eb000 8c0f3000 msisadrv msisadrv.sys Tue Jul 14 01:11:09 2009 (4A5BBF0D) 8c360000 8c38b000 msrpc msrpc.sys Tue Jul 14 01:11:59 2009 (4A5BBF3F) 915aa000 915b4000 mssmbios mssmbios.sys Tue Jul 14 01:19:25 2009 (4A5BC0FD) 8c7de000 8c7ee000 mup mup.sys Tue Jul 14 01:14:14 2009 (4A5BBFC6) 8c407000 8c4be000 ndis ndis.sys Tue Jul 14 01:12:24 2009 (4A5BBF58) 966c9000 966d4000 ndistapi ndistapi.sys Tue Jul 14 01:54:24 2009 (4A5BC930) 966d4000 966f6000 ndiswan ndiswan.sys Tue Jul 14 01:54:34 2009 (4A5BC93A) 967e8000 967f9000 NDProxy NDProxy.SYS Tue Jul 14 01:54:27 2009 (4A5BC933) 91514000 91522000 netbios netbios.sys Tue Jul 14 01:53:54 2009 (4A5BC912) 914bc000 914ee000 netbt netbt.sys Tue Jul 14 01:12:18 2009 (4A5BBF52) 8c4be000 8c4fc000 NETIO NETIO.SYS Tue Jul 14 01:12:35 2009 (4A5BBF63) 8bfe6000 8bff4000 Npfs Npfs.SYS Tue Jul 14 01:11:31 2009 (4A5BBF23) 915a0000 915aa000 nsiproxy nsiproxy.sys Tue Jul 14 01:12:08 2009 (4A5BBF48) 82a0c000 82e1c000 nt ntkrnlpa.exe Sat Jun 19 05:55:24 2010 (4C1C3FAC) 8c231000 8c360000 Ntfs Ntfs.sys Tue Jul 14 01:12:05 2009 (4A5BBF45) 8c5ed000 8c5f4000 Null Null.SYS Tue Jul 14 01:11:12 2009 (4A5BBF10) 9239f000 923a0080 nvBridge nvBridge.kmd Wed Jun 10 15:38:05 2009 (4A2FB73D) 91a2e000 9239ed20 nvlddmkm nvlddmkm.sys Wed Jun 10 16:17:13 2009 (4A2FC069) 914f5000 91514000 pacer pacer.sys Tue Jul 14 01:53:58 2009 (4A5BC916) 9666e000 96686000 parport parport.sys Tue Jul 14 01:45:34 2009 (4A5BC71E) 8c128000 8c139000 partmgr partmgr.sys Tue Jul 14 01:11:35 2009 (4A5BBF27) a053e000 a0545000 parvdm parvdm.sys Tue Jul 14 01:45:29 2009 (4A5BC719) 8c0f3000 8c11d000 pci pci.sys Tue Jul 14 01:11:16 2009 (4A5BBF14) 8c19b000 8c1a9000 PCIIDEX PCIIDEX.SYS Tue Jul 14 01:11:15 2009 (4A5BBF13) 8c200000 8c20e000 pcw pcw.sys Tue Jul 14 01:11:10 2009 (4A5BBF0E) a0547000 a05de000 peauth peauth.sys Tue Jul 14 02:35:44 2009 (4A5BD2E0) 97a7a000 97aa9000 portcls portcls.sys Tue Jul 14 01:51:00 2009 (4A5BC864) 8beac000 8bebd000 PSHED PSHED.dll Tue Jul 14 03:09:36 2009 (4A5BDAD0) 966b1000 966c9000 rasl2tp rasl2tp.sys Tue Jul 14 01:54:33 2009 (4A5BC939) 966f6000 9670e000 raspppoe raspppoe.sys Tue Jul 14 01:54:53 2009 (4A5BC94D) 9670e000 96725000 raspptp raspptp.sys Tue Jul 14 01:54:47 2009 (4A5BC947) 96725000 9673c000 rassstp rassstp.sys Tue Jul 14 01:54:57 2009 (4A5BC951) 9155f000 915a0000 rdbss rdbss.sys Tue Jul 14 01:14:26 2009 (4A5BBFD2) 9673c000 96746000 rdpbus rdpbus.sys Tue Jul 14 02:02:40 2009 (4A5BCB20) 8c011000 8c019000 RDPCDD RDPCDD.sys Tue Jul 14 02:01:40 2009 (4A5BCAE4) 8c1f4000 8c1fc000 rdpencdd rdpencdd.sys Tue Jul 14 02:01:39 2009 (4A5BCAE3) 8be21000 8be29000 rdprefmp rdprefmp.sys Tue Jul 14 02:01:41 2009 (4A5BCAE5) 8c521000 8c54e000 rdyboost rdyboost.sys Tue Jul 14 01:22:02 2009 (4A5BC19A) 97a00000 97a13000 rspndr rspndr.sys Tue Jul 14 01:53:20 2009 (4A5BC8F0) a05de000 a05e8000 secdrv secdrv.SYS Wed Sep 13 15:18:32 2006 (45080528) 96688000 96692000 serenum serenum.sys Tue Jul 14 01:45:27 2009 (4A5BC717) 91522000 9153c000 serial serial.sys Tue Jul 14 01:45:33 2009 (4A5BC71D) 8c7d6000 8c7de000 spldr spldr.sys Mon May 11 18:13:47 2009 (4A084EBB) a1e8e000 a1edf000 srv srv.sys Fri Aug 27 05:31:26 2010 (4C77318E) a1e3f000 a1e8e000 srv2 srv2.sys Fri Aug 27 05:30:45 2010 (4C773165) 90fb6000 90fd7000 srvnet srvnet.sys Fri Aug 27 05:30:39 2010 (4C77315F) 96760000 96761380 swenum swenum.sys Tue Jul 14 01:45:08 2009 (4A5BC704) a0545000 a05462c0 TBPanel TBPanel.SYS Sat Jul 27 01:01:04 2002 (3D41D4B0) 8c614000 8c75d000 tcpip tcpip.sys Mon Jun 14 05:36:59 2010 (4C15A3DB) a05e8000 a05f5000 tcpipreg tcpipreg.sys Tue Jul 14 01:54:14 2009 (4A5BC926) 91449000 91454000 TDI TDI.SYS Tue Jul 14 01:12:12 2009 (4A5BBF4C) 91432000 91449000 tdx tdx.sys Tue Jul 14 01:12:10 2009 (4A5BBF4A) 9154f000 9155f000 termdd termdd.sys Tue Jul 14 02:01:35 2009 (4A5BCADF) 98d70000 98d79000 TSDDD TSDDD.dll unavailable (00000000) 90ecc000 90eed000 tunnel tunnel.sys Tue Jul 14 01:54:03 2009 (4A5BC91B) 96796000 967a4000 umbus umbus.sys Tue Jul 14 01:51:38 2009 (4A5BC88A) 97ad9000 97af0000 usbccgp usbccgp.sys Tue Jul 14 01:51:31 2009 (4A5BC883) 97ad7000 97ad8700 USBD USBD.SYS Tue Jul 14 01:51:05 2009 (4A5BC869) 9665f000 9666e000 usbehci usbehci.sys Tue Jul 14 01:51:14 2009 (4A5BC872) 967a4000 967e8000 usbhub usbhub.sys Tue Jul 14 01:52:06 2009 (4A5BC8A6) 96614000 9665f000 USBPORT USBPORT.SYS Tue Jul 14 01:51:13 2009 (4A5BC871) 97acc000 97ad7000 usbprint usbprint.sys Tue Jul 14 02:17:06 2009 (4A5BCE82) 97b21000 97b38000 USBSTOR USBSTOR.SYS Tue Jul 14 01:51:19 2009 (4A5BC877) 91a10000 91a1b000 usbuhci usbuhci.sys Tue Jul 14 01:51:10 2009 (4A5BC86E) 8c11d000 8c128000 vdrvroot vdrvroot.sys Tue Jul 14 01:46:19 2009 (4A5BC74B) 8c217000 8c223000 vga vga.sys Tue Jul 14 01:25:50 2009 (4A5BC27E) 8be00000 8be21000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 01:25:49 2009 (4A5BC27D) 8c78e000 8c796380 vmstorfl vmstorfl.sys Tue Jul 14 01:28:44 2009 (4A5BC32C) 8c139000 8c149000 volmgr volmgr.sys Tue Jul 14 01:11:25 2009 (4A5BBF1D) 8c149000 8c194000 volmgrx volmgrx.sys Tue Jul 14 01:11:41 2009 (4A5BBF2D) 8c797000 8c7d6000 volsnap volsnap.sys Tue Jul 14 01:11:34 2009 (4A5BBF26) 9153c000 9154f000 wanarp wanarp.sys Tue Jul 14 01:55:02 2009 (4A5BC956) 8c223000 8c230000 watchdog watchdog.sys Tue Jul 14 01:24:10 2009 (4A5BC21A) 8c01b000 8c08c000 Wdf01000 Wdf01000.sys Tue Jul 14 01:11:36 2009 (4A5BBF28) 8c08c000 8c09a000 WDFLDR WDFLDR.SYS Tue Jul 14 01:11:25 2009 (4A5BBF1D) 914ee000 914f5000 wfplwf wfplwf.sys Tue Jul 14 01:53:51 2009 (4A5BC90F) 98b10000 98d5b000 win32k win32k.sys Wed Oct 20 05:00:01 2010 (4CBE5B31) 8c0e2000 8c0eb000 WMILIB WMILIB.SYS Tue Jul 14 01:11:22 2009 (4A5BBF1A) 97bd0000 97bea000 WudfPf WudfPf.sys Tue Jul 14 01:50:13 2009 (4A5BC835) a1edf000 a1eff480 WUDFRd WUDFRd.sys Tue Jul 14 01:50:44 2009 (4A5BC854) Unloaded modules: a1f00000 a1f6a000 spsys.sys Timestamp: unavailable (00000000) Checksum: 00000000 8c5a5000 8c5b2000 crashdmp.sys Timestamp: unavailable (00000000) Checksum: 00000000 8c5b2000 8c5bd000 dump_ataport Timestamp: unavailable (00000000) Checksum: 00000000 8c7f6000 8c7ff000 dump_atapi.s Timestamp: unavailable (00000000) Checksum: 00000000 8c5bd000 8c5ce000 dump_dumpfve Timestamp: unavailable (00000000) Checksum: 00000000