Blue Screen images

[gavingks]

Almost every time I access image files on a network drive i get the BSoD
Hope you can help

 

[zigzag3143]

Almost every time I access image files on a network drive i get the BSoD
Hope you can help

Hi and welcome

This crash was caused by mrxsmb10.sys. You obviously upgraded from vista to win 7 and the drivers below are from there. there is a hoxfix available for this specific problem here A reliability and performance update is available for computers that are running Windows Vista SP1 and Windows Server 2008

I would update the drivers
run a system file check to verify and repair your system files
to run type cmd in search>right click abd run as admin>sfc /scannow

Ken J


ancient drivers need to be updated

int15.sys        0x9d1c1000    0x9d1d2000    0x00011000    0x3f7a664d    10/1/2003 12:29:49 AM                        
BTWSp50.sys        0x9ae23000    0x9ae27500    0x00004500    0x413e0f09    9/7/2004 2:42:01 PM                        
DPortIO.sys        0x914db000    0x914de380    0x00003380    0x43abb190    12/23/2005 3:13:04 AM                        
secdrv.SYS        0xa3cca000    0xa3cd4000    0x0000a000    0x45080528    9/13/2006 8:18:32 AM                        
DKbFltr.sys        0x93a96000    0x93aa0000    0x0000a000    0x4537363c    10/19/2006 3:24:28 AM                        
kqemu.sys        0x92fc2000    0x92fdf000    0x0001d000    0x45c8df26    2/6/2007 3:03:50 PM                        
PxHelp20.sys        0x8b5c9000    0x8b5d1de0    0x00008de0    0x4679a978    6/20/2007 5:26:00 PM                        
000.fcl        0xa3d02000    0xa3d1f000    0x0001d000    0x4705a53f    10/4/2007 9:45:19 PM                        
AlfaFF.sys        0x8b582000    0x8b58ad00    0x00008d00    0x47309837    11/6/2007 11:37:11 AM                        
NTIPPKernel.sys        0x92fdf000    0x92ffce00    0x0001de00    0x4739a4de    11/13/2007 8:21:34 AM                        
itecir.sys        0x93a26000    0x93a7e000    0x00058000    0x47678eeb    12/18/2007 4:12:11 AM                        
SynTP.sys        0x93aad000    0x93adb680    0x0002e680    0x4790f4e7    1/18/2008 1:50:15 PM                        
NTIDrvr.sys        0x93ae9000    0x93af1000    0x00008000    0x47a124c2    1/30/2008 8:30:42 PM                        
vfs101x.sys        0x9afaa000    0x9afb7000    0x0000d000    0x47aa706f    2/6/2008 9:43:59 PM                        
psdfilter.sys        0x8b579000    0x8b582000    0x00009000    0x47b98d02    2/18/2008 8:49:54 AM                        
PSDNServ.sys        0xa3caf000    0xa3cb8000    0x00009000    0x47b98d2b    2/18/2008 8:50:35 AM                        
psdvdisk.sys        0xa3cb8000    0xa3cca000    0x00012000    0x47b98d40    2/18/2008 8:50:56 AM                        
nvlddmkm.sys        0x9282a000    0x92f4c440    0x00722440    0x47d1b339    3/7/2008 4:27:21 PM                        
RTKVHDA.sys        0x9a406000    0x9a5ffc80    0x001f9c80    0x47d66502    3/11/2008 5:54:58 AM                        
iaStor.sys        0x8b425000    0x8b4ff000    0x000da000    0x48cad1b8    9/12/2008 3:31:52 PM                        
dump_iaStor.sys        0x9082d000    0x90907000    0x000da000    0x48cad1b8    9/12/2008 3:31:52 PM                        
AGRSM.sys        0x9ae2f000    0x9af35000    0x00106000    0x49184ba5    11/10/2008 9:56:37 AM

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\011210-29827-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*d:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x82e13000 PsLoadedModuleList = 0x82f5b810
Debug session time: Tue Jan 12 08:00:53.119 2010 (GMT-5)
System Uptime: 1 days 19:04:02.598
Loading Kernel Symbols
...............................................................
................................................................
.......................................................
Loading User Symbols
Loading unloaded module list
..............
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

RDR_FILE_SYSTEM (27)
    If you see RxExceptionFilter on the stack then the 2nd and 3rd parameters are the
    exception record and context record. Do a .cxr on the 3rd parameter and then kb to
    obtain a more informative stack trace.
    The high 16 bits of the first parameter is the RDBSS bugcheck code, which is defined
    as follows:
     RDBSS_BUG_CHECK_CACHESUP  = 0xca550000,
     RDBSS_BUG_CHECK_CLEANUP   = 0xc1ee0000,
     RDBSS_BUG_CHECK_CLOSE     = 0xc10e0000,
     RDBSS_BUG_CHECK_NTEXCEPT  = 0xbaad0000,
Arguments:
Arg1: baad0073
Arg2: 9a3173d0
Arg3: 9a316fb0
Arg4: 9d16f4ef

Debugging Details:
------------------

Unable to load image \SystemRoot\system32\Drivers\AlfaFF.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for AlfaFF.sys
*** ERROR: Module load completed but symbols could not be loaded for AlfaFF.sys
*** WARNING: Unable to verify timestamp for RapportPG.sys
*** ERROR: Module load completed but symbols could not be loaded for RapportPG.sys

EXCEPTION_RECORD:  9a3173d0 -- (.exr 0xffffffff9a3173d0)
ExceptionAddress: 9d16f4ef (mrxsmb10!MRxSmbQueryFileInformation+0x000005f9)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000000
   Parameter[1]: 00000008
Attempt to read from address 00000008

CONTEXT:  9a316fb0 -- (.cxr 0xffffffff9a316fb0)
eax=00000000 ebx=8a7af860 ecx=00000000 edx=00000000 esi=8a7af950 edi=a84c8648
eip=9d16f4ef esp=9a317498 ebp=9a31753c iopl=0         nv up ei pl zr na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
mrxsmb10!MRxSmbQueryFileInformation+0x5f9:
9d16f4ef 668b4008        mov     ax,word ptr [eax+8]      ds:0023:00000008=????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  00000000

EXCEPTION_PARAMETER2:  00000008

READ_ADDRESS: GetPointerFromAddress: unable to read from 82f7b718
Unable to read MiSystemVaType memory at 82f5b160
 00000008 

FOLLOWUP_IP: 
mrxsmb10!MRxSmbQueryFileInformation+5f9
9d16f4ef 668b4008        mov     ax,word ptr [eax+8]

FAULTING_IP: 
mrxsmb10!MRxSmbQueryFileInformation+5f9
9d16f4ef 668b4008        mov     ax,word ptr [eax+8]

BUGCHECK_STR:  0x27

DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

LAST_CONTROL_TRANSFER:  from 9d135e39 to 9d16f4ef

STACK_TEXT:  
9a31753c 9d135e39 8a7af860 9a317624 9151e4ab mrxsmb10!MRxSmbQueryFileInformation+0x5f9
9a317548 9151e4ab 8a7af860 8a7af8f0 8a7af860 mrxsmb!SmbShellQueryFileInformation+0x1b
9a317624 9142b81b 017af860 9a3178b4 9a31765c csc!CscQueryFileInformation+0x1c0
9a317634 91449cc0 8a7af860 a4800b90 00000005 rdbss!RxpQueryInfoMiniRdr+0x53
9a31765c 9144996a 8a7af860 89f97008 a4800b90 rdbss!RxQueryStandardInfo+0xbe
9a3176bc 91427fb1 8a7af860 89f97008 0b72f058 rdbss!RxCommonQueryInformation+0x1f5
9a317744 91442e2b 91438240 89f97008 85b19190 rdbss!RxFsdCommonDispatch+0x646
9a317774 9d146298 8a7dc1d0 05f97008 89f970c0 rdbss!RxFsdDispatch+0x1ab
9a317790 82e4f4bc 8a7dc1d0 01f97008 89f970e4 mrxsmb!MRxSmbFsdDispatch+0x9a
9a3177a8 8bbebbb0 00000103 8572fd48 85b19190 nt!IofCallDriver+0x63
9a3177c4 8bbeab52 8572fd48 00000000 89f97008 mup!MupiCallUncProvider+0x10f
9a3177dc 8bbeb13e 8572fd48 00000000 870f7030 mup!MupStateMachine+0x9b
9a3177f4 82e4f4bc 870f7030 8572fd48 89f97008 mup!MupFsdIrpPassThrough+0x93
9a31780c 8b53a20c 00000000 85cd8280 00000000 nt!IofCallDriver+0x63
9a317830 8b53b0bf 9a317850 870f77a8 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x2aa
9a317868 8b58650e 870f8c48 859c3390 9a3178b4 fltmgr!FltPerformSynchronousIo+0xb9
WARNING: Stack unwind information not available. Following frames may be wrong.
9a317878 8b5865fe 870f8c48 85cd8280 9a31789c AlfaFF+0x450e
9a3178b4 8b583837 8727fcf8 9a31792c 859c3390 AlfaFF+0x45fe
9a3178f0 8b583a21 0127fcf8 9a31792c 859097e0 AlfaFF+0x1837
9a317908 8b536324 8727fcf8 9a31792c 859097e0 AlfaFF+0x1a21
9a317970 8b539512 0027fc98 8727fc98 1000000c fltmgr!FltpPerformPostCallbacks+0x24a
9a317984 8b539b46 8727fc98 85997c18 9a3179c4 fltmgr!FltpProcessIoCompletion+0x10
9a317994 8b53a29c 870f77a8 85997c18 8727fc98 fltmgr!FltpPassThroughCompletion+0x98
9a3179c4 8b54d8c9 9a3179e4 00000000 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x33a
9a317a10 82e4f4bc 870f77a8 870f7278 85b191ec fltmgr!FltpCreate+0x2db
9a317a28 8305362d b37dd328 9a317bd0 00000000 nt!IofCallDriver+0x63
9a317b00 830341d7 870f7030 855c5950 8adeb5d0 nt!IopParseDevice+0xed7
9a317b7c 8305a24d 00000000 9a317bd0 00000040 nt!ObpLookupObjectName+0x4fa
9a317bdc 830525ab 0071ef94 855c5950 83093001 nt!ObOpenObjectByName+0x159
9a317c58 8305deb6 0071f050 00100080 0071ef94 nt!IopCreateFile+0x673
9a317ca4 914674e9 0071f050 00100080 0071ef94 nt!NtCreateFile+0x34
9a317d00 82e5642a 0071f050 00100080 0071ef94 RapportPG+0x14e9
9a317d00 777e64f4 0071f050 00100080 0071ef94 nt!KiFastCallEntry+0x12a
0071eff8 00000000 00000000 00000000 00000000 0x777e64f4


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  mrxsmb10!MRxSmbQueryFileInformation+5f9

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: mrxsmb10

IMAGE_NAME:  mrxsmb10.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bbfda

STACK_COMMAND:  .cxr 0xffffffff9a316fb0 ; kb

FAILURE_BUCKET_ID:  0x27_mrxsmb10!MRxSmbQueryFileInformation+5f9

BUCKET_ID:  0x27_mrxsmb10!MRxSmbQueryFileInformation+5f9

Followup: MachineOwner
---------

 

[gavingks]

THank you but

Tried the link you gave but was advised the downloaded update was not applicable on my PC
the link took me to a vista download page but warned me that this is not my OS
am i just being a bit thick