BSoD references missing file?

T

thynke

Hi all,

for the past couple of weeks, I've been getting BSoDs a couple times a
day on my Dell Inspiron 5100 notebook.

The error indicates that a file, mmig46.sys, is responsible for the
crash. However, a search for the file on my system (along with
searching *.* for files that contain the text "mmig46"), turn up
nothing.

Additionally, a Google search for mmig46.sys turns up zilch.

No such file?

But, I do see a few registry keys on my system which contain
references to the file, namely:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MMIG46

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MMIG46\0000

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root
\LEGACY_MMIG46\0000\Control

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root
\LEGACY_MMIG46\0000\LogConf

I tried backing up the registry and removing these keys, but upon
reboot, the keys are back where they were.

Here's a kernel dump from the most recent crash:

// begin dump
**************************************************************
Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Dumpfiles\Memory.dmp]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a620
Debug session time: Mon May 28 16:52:53.336 2007 (GMT-4)
System Uptime: 0 days 6:55:49.908
Loading Kernel Symbols
..........................................................................................

...............................................
Loading User Symbols

Loading unloaded module list
.................
*******************************************************************************
*
*
* Bugcheck
Analysis *
*
*
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7E, {c0000005, b216ecb8, b22a2c50, b22a294c}

*** ERROR: Module load completed but symbols could not be loaded for
Mmig46.sys
Probably caused by : Mmig46.sys ( Mmig46+ecb8 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
*
*
* Bugcheck
Analysis *
*
*
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e)
This is a very common bugcheck. Usually the exception address
pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this
address.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: b216ecb8, The address that the exception occurred at
Arg3: b22a2c50, Exception Record Address
Arg4: b22a294c, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx"
referenced memory at

"0x%08lx". The memory could not be "%s".

FAULTING_IP:
Mmig46+ecb8
b216ecb8 668908 mov word ptr [eax],cx

EXCEPTION_RECORD: b22a2c50 -- (.exr 0xffffffffb22a2c50)
ExceptionAddress: b216ecb8 (Mmig46+0x0000ecb8)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000001
Parameter[1]: 00000023
Attempt to write to address 00000023

CONTEXT: b22a294c -- (.cxr 0xffffffffb22a294c)
eax=00000023 ebx=00000000 ecx=000044e8 edx=00000004 esi=00000003
edi=00000008
eip=b216ecb8 esp=b22a2d18 ebp=b22a2d6c iopl=0 nv up ei pl nz
na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00010202
Mmig46+0xecb8:
b216ecb8 668908 mov word ptr [eax],cx ds:
0023:00000023=????
Resetting default scope

PROCESS_NAME: System

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx"
referenced memory at

"0x%08lx". The memory could not be "%s".

WRITE_ADDRESS: 00000023

BUGCHECK_STR: 0x7E

DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE

LAST_CONTROL_TRANSFER: from 9b180000 to b216ecb8

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may
be wrong.
b22a2d6c 9b180000 ffff0000 00000023 00000003 Mmig46+0xecb8
b22a2dac 8057d0f1 00000000 00000000 00000000 0x9b180000
b22a2ddc 804f827a b216736c 00000000 00000000 nt!PspSystemThreadStartup
+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_IP:
Mmig46+ecb8
b216ecb8 668908 mov word ptr [eax],cx

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: Mmig46

IMAGE_NAME: Mmig46.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4649d195

SYMBOL_NAME: Mmig46+ecb8

STACK_COMMAND: .cxr 0xffffffffb22a294c ; kb

FAILURE_BUCKET_ID: 0x7E_Mmig46+ecb8

BUCKET_ID: 0x7E_Mmig46+ecb8

Followup: MachineOwner
----------------------------------------

//end dump


Also...

Event Viewer reports an error by the Service Control Manager

category: none
Event ID: 7028

The Mmig46 Registry key denied access to SYSTEM account programs so
the Service Control Manager took ownership of the Registry key.



Any ideas? - TIA
 
T

thynke

sorry, forgot to mention...


Microsoft Windows XP Professional
Version 5.1.2600 Service Pack 2 Build 2600
OS Manufacturer Microsoft Corporation
System Name NOTEBOOK
System Manufacturer Dell Computer Corporation
System Model Inspiron 5100
System Type X86-based PC
Processor x86 Family 15 Model 2 Stepping 9 GenuineIntel ~2392 Mhz
BIOS Version/Date Dell Computer Corporation A32, 10/18/2004
SMBIOS Version 2.3
Windows Directory C:\WINDOWS
System Directory C:\WINDOWS\system32
Boot Device \Device\HarddiskVolume2
Locale United States
Hardware Abstraction Layer Version = "5.1.2600.2180 (xpsp_sp2_rtm.
040803-2158)"

Total Physical Memory 1,024.00 MB
Available Physical Memory 642.52 MB
Total Virtual Memory 2.00 GB
Available Virtual Memory 1.96 GB
Page File Space 3.41 GB
Page File C:\pagefile.sys
 
F

Fred Pickering

Hi all,

for the past couple of weeks, I've been getting BSoDs a couple times a
day on my Dell Inspiron 5100 notebook.

The error indicates that a file, mmig46.sys, is responsible for the
crash. However, a search for the file on my system (along with
searching *.* for files that contain the text "mmig46"), turn up
nothing.

Additionally, a Google search for mmig46.sys turns up zilch.

No such file?

But, I do see a few registry keys on my system which contain
references to the file, namely:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MMIG46

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MMIG46\0000

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root
\LEGACY_MMIG46\0000\Control

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root
\LEGACY_MMIG46\0000\LogConf

I tried backing up the registry and removing these keys, but upon
reboot, the keys are back where they were.

Here's a kernel dump from the most recent crash:

// begin dump
**************************************************************
Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Dumpfiles\Memory.dmp]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a620
Debug session time: Mon May 28 16:52:53.336 2007 (GMT-4)
System Uptime: 0 days 6:55:49.908
Loading Kernel Symbols
.........................................................................................

..............................................
Loading User Symbols

Loading unloaded module list
................
*******************************************************************************
*
*
* Bugcheck
Analysis *
*
*
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7E, {c0000005, b216ecb8, b22a2c50, b22a294c}

*** ERROR: Module load completed but symbols could not be loaded for
Mmig46.sys
Probably caused by : Mmig46.sys ( Mmig46+ecb8 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
*
*
* Bugcheck
Analysis *
*
*
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e)
This is a very common bugcheck. Usually the exception address
pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this
address.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: b216ecb8, The address that the exception occurred at
Arg3: b22a2c50, Exception Record Address
Arg4: b22a294c, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx"
referenced memory at

"0x%08lx". The memory could not be "%s".

FAULTING_IP:
Mmig46+ecb8
b216ecb8 668908 mov word ptr [eax],cx

EXCEPTION_RECORD: b22a2c50 -- (.exr 0xffffffffb22a2c50)
ExceptionAddress: b216ecb8 (Mmig46+0x0000ecb8)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000001
Parameter[1]: 00000023
Attempt to write to address 00000023

CONTEXT: b22a294c -- (.cxr 0xffffffffb22a294c)
eax=00000023 ebx=00000000 ecx=000044e8 edx=00000004 esi=00000003
edi=00000008
eip=b216ecb8 esp=b22a2d18 ebp=b22a2d6c iopl=0 nv up ei pl nz
na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00010202
Mmig46+0xecb8:
b216ecb8 668908 mov word ptr [eax],cx ds:
0023:00000023=????
Resetting default scope

PROCESS_NAME: System

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx"
referenced memory at

"0x%08lx". The memory could not be "%s".

WRITE_ADDRESS: 00000023

BUGCHECK_STR: 0x7E

DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE

LAST_CONTROL_TRANSFER: from 9b180000 to b216ecb8

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may
be wrong.
b22a2d6c 9b180000 ffff0000 00000023 00000003 Mmig46+0xecb8
b22a2dac 8057d0f1 00000000 00000000 00000000 0x9b180000
b22a2ddc 804f827a b216736c 00000000 00000000 nt!PspSystemThreadStartup
+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_IP:
Mmig46+ecb8
b216ecb8 668908 mov word ptr [eax],cx

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: Mmig46

IMAGE_NAME: Mmig46.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4649d195

SYMBOL_NAME: Mmig46+ecb8

STACK_COMMAND: .cxr 0xffffffffb22a294c ; kb

FAILURE_BUCKET_ID: 0x7E_Mmig46+ecb8

BUCKET_ID: 0x7E_Mmig46+ecb8

Followup: MachineOwner
----------------------------------------

//end dump


Also...

Event Viewer reports an error by the Service Control Manager

category: none
Event ID: 7028

The Mmig46 Registry key denied access to SYSTEM account programs so
the Service Control Manager took ownership of the Registry key.



Any ideas? - TIA
Click to expand...

If you do a search on google it will throw up a site that then switches to a
porn site
 
G

Guest

[email protected] said:
Hi all,

for the past couple of weeks, I've been getting BSoDs a couple times a
day on my Dell Inspiron 5100 notebook.

The error indicates that a file, mmig46.sys, is responsible for the
crash. However, a search for the file on my system (along with
searching *.* for files that contain the text "mmig46"), turn up
nothing.

Additionally, a Google search for mmig46.sys turns up zilch.

No such file?

But, I do see a few registry keys on my system which contain
references to the file, namely:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MMIG46

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MMIG46\0000

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root
\LEGACY_MMIG46\0000\Control

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root
\LEGACY_MMIG46\0000\LogConf

I tried backing up the registry and removing these keys, but upon
reboot, the keys are back where they were.

Here's a kernel dump from the most recent crash:

// begin dump
**************************************************************
Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Dumpfiles\Memory.dmp]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a620
Debug session time: Mon May 28 16:52:53.336 2007 (GMT-4)
System Uptime: 0 days 6:55:49.908
Loading Kernel Symbols
..........................................................................................

...............................................
Loading User Symbols

Loading unloaded module list
.................
*******************************************************************************
*
*
* Bugcheck
Analysis *
*
*
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7E, {c0000005, b216ecb8, b22a2c50, b22a294c}

*** ERROR: Module load completed but symbols could not be loaded for
Mmig46.sys
Probably caused by : Mmig46.sys ( Mmig46+ecb8 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
*
*
* Bugcheck
Analysis *
*
*
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e)
This is a very common bugcheck. Usually the exception address
pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this
address.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: b216ecb8, The address that the exception occurred at
Arg3: b22a2c50, Exception Record Address
Arg4: b22a294c, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx"
referenced memory at

"0x%08lx". The memory could not be "%s".

FAULTING_IP:
Mmig46+ecb8
b216ecb8 668908 mov word ptr [eax],cx

EXCEPTION_RECORD: b22a2c50 -- (.exr 0xffffffffb22a2c50)
ExceptionAddress: b216ecb8 (Mmig46+0x0000ecb8)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000001
Parameter[1]: 00000023
Attempt to write to address 00000023

CONTEXT: b22a294c -- (.cxr 0xffffffffb22a294c)
eax=00000023 ebx=00000000 ecx=000044e8 edx=00000004 esi=00000003
edi=00000008
eip=b216ecb8 esp=b22a2d18 ebp=b22a2d6c iopl=0 nv up ei pl nz
na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00010202
Mmig46+0xecb8:
b216ecb8 668908 mov word ptr [eax],cx ds:
0023:00000023=????
Resetting default scope

PROCESS_NAME: System
Click to expand...
<snip>

Run a scan from here online:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/

1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Taps:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

2... You need to be sure your system is clean from malwares and Viruses by
scanning for them
Scan for malwares from here:
http://www.lavasoft.com/products/ad-aware_se_personal.php
http://www.safer-networking.org ; for Spybot S&D
http://free.grisoft.com/doc/5390/lng/us/tpl/v5
Run a disk Cleanup and Dfrag in safe mode.
HTH.
nass
 
T

thynke

thanks for the suggestions, but that porn page referenced in the
google search results wasnt there until i posted this - so me thinks
sum1 has a nasty bot scraping usenet for random keywords - go figure

anyway...some1 posted a suggestion in another group, ill include it
here for it's value:

I would do an in place repair (the second time you get an option to
repair) and see if it works.
Click to expand...



Holz,

thanks for the suggestion. I couldnt find the orig cd (yes, im an
idiot)

believe it or not though, dell sent me a free backup overnight
*shock*.

anyways - did the hot re-install and am approaching 24 hours with no
crash

mucho appreciated mate

--- mike
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

BSoD references missing file? 2
win32k.sys bsod 2
Random STOP error 7e - help reading WinDbg analysis of full dump 3
Please help with BSOD... 1
!!! BSOD when playing WOW !!! 1
BugCheck A0 INTERNAL_POWER_ERROR Reboot Loop 1
Please help with Blue Screen problem :( 5
Windows Auto Reboot IRQL_NOT_LESS_OR_EQUAL 5

Top