Bsod during Office XP "file/save" operation

P

PeteO

Well here is a problem that is about to drive me insane. We recently
upgrade our office 97 installs to Office XP. Almost immediately we
began to receive reports that some of the machines were crashing
during "file/save" operations in Word and Excel. The machine BSOD's
and reboots. All of the affected machines are Compaq Evo D51C pc's
running 1.8 processors. The machines are all running Windows XP and
have been upgraded to service pack1. They all have at lest 256 megs of
ram, with several upgraded to 512. I have performed all of the usual
troubleshooting routines, reinstall of Office, applying all Windows
update files, updating the chipset, and updating the ntoskernal. I
have also examined the crash dump files. The result is the exact same
from every machine. I cannot find any helpful info on the
iNVALID_PROCESS_DETACH_ATTEMPT error. Microsoft is usually pretty
helpful with their error code explanations, however for this error it
only states that it will be rarely seen. I am very sad to be the rare
exception so any help is appreciated

INVALID_PROCESS_DETACH_ATTEMPT (6)
Arguments:
Arg1: 00000000
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x6

LAST_CONTROL_TRANSFER: from 804ee3a9 to 804ef4e2

STACK_TEXT:
f00d1c24 804ee3a9 00000006 00000000 ff7efb30 nt!KeBugCheck+0x10
f00d1c4c 8059052d f00d1c64 00000000 00000000
nt!KeUnstackDetachProcess+0x10b
f00d1c80 80590607 000009f0 00000000 00000001 nt!ObpCloseHandle+0xb5
f00d1c90 80552948 800009f0 00000000 f00d1d64 nt!ObCloseHandle+0xf
f00d1d48 805283c1 000003e0 02d7d600 0292aa58
nt!NtSetInformationFile+0x7cc
f00d1d48 7ffe0304 000003e0 02d7d600 0292aa58 nt!KiSystemService+0xc4
02d7d674 00000000 00000000 00000000 00000000
SharedUserData!SystemCallStub+0x4


FOLLOWUP_IP:
nt!KeUnstackDetachProcess+10b
804ee3a9 cc int 3

SYMBOL_STACK_INDEX: 1

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!KeUnstackDetachProcess+10b

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 3c7ac994

STACK_COMMAND: kb

BUCKET_ID: 0x6_nt!KeUnstackDetachProcess+10b

Followup: MachineOwner
 
C

Carey Frisch [MVP]

Contact Microsoft Support:
http://support.microsoft.com/default.aspx?scid=fh;[LN];CNTACTMS

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-----------------------------------------------------------------------------------


| Well here is a problem that is about to drive me insane. We recently
| upgrade our office 97 installs to Office XP. Almost immediately we
| began to receive reports that some of the machines were crashing
| during "file/save" operations in Word and Excel. The machine BSOD's
| and reboots. All of the affected machines are Compaq Evo D51C pc's
| running 1.8 processors. The machines are all running Windows XP and
| have been upgraded to service pack1. They all have at lest 256 megs of
| ram, with several upgraded to 512. I have performed all of the usual
| troubleshooting routines, reinstall of Office, applying all Windows
| update files, updating the chipset, and updating the ntoskernal. I
| have also examined the crash dump files. The result is the exact same
| from every machine. I cannot find any helpful info on the
| iNVALID_PROCESS_DETACH_ATTEMPT error. Microsoft is usually pretty
| helpful with their error code explanations, however for this error it
| only states that it will be rarely seen. I am very sad to be the rare
| exception so any help is appreciated
|
| INVALID_PROCESS_DETACH_ATTEMPT (6)
| Arguments:
| Arg1: 00000000
| Arg2: 00000000
| Arg3: 00000000
| Arg4: 00000000
|
| Debugging Details:
| ------------------
|
|
| CUSTOMER_CRASH_COUNT: 2
|
| DEFAULT_BUCKET_ID: DRIVER_FAULT
|
| BUGCHECK_STR: 0x6
|
| LAST_CONTROL_TRANSFER: from 804ee3a9 to 804ef4e2
|
| STACK_TEXT:
| f00d1c24 804ee3a9 00000006 00000000 ff7efb30 nt!KeBugCheck+0x10
| f00d1c4c 8059052d f00d1c64 00000000 00000000
| nt!KeUnstackDetachProcess+0x10b
| f00d1c80 80590607 000009f0 00000000 00000001 nt!ObpCloseHandle+0xb5
| f00d1c90 80552948 800009f0 00000000 f00d1d64 nt!ObCloseHandle+0xf
| f00d1d48 805283c1 000003e0 02d7d600 0292aa58
| nt!NtSetInformationFile+0x7cc
| f00d1d48 7ffe0304 000003e0 02d7d600 0292aa58 nt!KiSystemService+0xc4
| 02d7d674 00000000 00000000 00000000 00000000
| SharedUserData!SystemCallStub+0x4
|
|
| FOLLOWUP_IP:
| nt!KeUnstackDetachProcess+10b
| 804ee3a9 cc int 3
|
| SYMBOL_STACK_INDEX: 1
|
| FOLLOWUP_NAME: MachineOwner
|
| SYMBOL_NAME: nt!KeUnstackDetachProcess+10b
|
| MODULE_NAME: nt
|
| IMAGE_NAME: ntoskrnl.exe
|
| DEBUG_FLR_IMAGE_TIMESTAMP: 3c7ac994
|
| STACK_COMMAND: kb
|
| BUCKET_ID: 0x6_nt!KeUnstackDetachProcess+10b
|
| Followup: MachineOwner
 
Top