Crash dump help!

G

Guest

Hello,

My main development machine is a Windows XP machine. 2 weeks ago I started
getting blue screens PAGE_FAULT_IN_NONPAGED_AREA. I initialy pointed the RAM,
but replaced it and even ran memcheck for several days without errors.

I have about 20+ dumps that all point to nt!PsCallImageNotifyRoutines+36,
but I have no experience on crash dump analysis. It seems to be a driver
issue, but the driver responsible for this is not easy to find. What I'm
looking here is to locate the file (or driver) responsible to be able to fix
this fast.

I would appreciate some help, as fixing this problem is a high priority. If
needed I can provide the dumps for more analysis, for now Here I post a copy
of windbg records.

Thanks!
Pablo


Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and
Settings\p\Desktop\Dumps\Mini041107-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: srv*c:\cache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a620
Debug session time: Wed Apr 11 20:49:00.946 2007 (GMT-7)
System Uptime: 0 days 0:53:09.498
Loading Kernel Symbols
......................................................................................................................................................
Loading User Symbols
Loading unloaded module list
..............................
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 10000050, {e4e1b000, 0, 89fef3de, 1}


Could not read faulting driver name
Probably caused by : ntoskrnl.exe ( nt!PsCallImageNotifyRoutines+36 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or
it
is pointing at freed memory.
Arguments:
Arg1: e4e1b000, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 89fef3de, If non-zero, the instruction address which referenced the
bad memory
address.
Arg4: 00000001, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: e4e1b000

FAULTING_IP:
+ffffffff89fef3de
89fef3de 668b08 mov cx,word ptr [eax]

MM_INTERNAL_CODE: 1

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: wmiprvse.exe

LAST_CONTROL_TRANSFER: from 8062c1c9 to 89fef3de

STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
af656be4 8062c1c9 89072ad0 00001464 af656c24 0x89fef3de
af656c04 805f11c6 89072ad0 00001464 af656c24 nt!PsCallImageNotifyRoutines+0x36
af656c48 8057a196 88d5ca50 66a00000 af656d18 nt!MiMapViewOfImageSection+0x471
af656ca4 8057259b 00000004 89066110 af656d18 nt!MmMapViewOfSection+0x13c
af656d34 804de7ec 00000354 ffffffff 0086cdc0 nt!NtMapViewOfSection+0x2bd
af656d34 7c90eb94 00000354 ffffffff 0086cdc0 nt!KiFastCallEntry+0xf8
0086cddc 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!PsCallImageNotifyRoutines+36
8062c1c9 56 push esi

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!PsCallImageNotifyRoutines+36

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 45e54711

FAILURE_BUCKET_ID: 0x50_nt!PsCallImageNotifyRoutines+36

BUCKET_ID: 0x50_nt!PsCallImageNotifyRoutines+36

Followup: MachineOwner
---------

kd> kb
ChildEBP RetAddr Args to Child
WARNING: Frame IP not in any known module. Following frames may be wrong.
af656be4 8062c1c9 89072ad0 00001464 af656c24 0x89fef3de
af656c04 805f11c6 89072ad0 00001464 af656c24 nt!PsCallImageNotifyRoutines+0x36
af656c48 8057a196 88d5ca50 66a00000 af656d18 nt!MiMapViewOfImageSection+0x471
af656ca4 8057259b 00000004 89066110 af656d18 nt!MmMapViewOfSection+0x13c
af656d34 804de7ec 00000354 ffffffff 0086cdc0 nt!NtMapViewOfSection+0x2bd
af656d34 7c90eb94 00000354 ffffffff 0086cdc0 nt!KiFastCallEntry+0xf8
0086cddc 00000000 00000000 00000000 00000000 0x7c90eb94
kd> r
eax=e4e1b000 ebx=00000000 ecx=8056fe49 edx=e4e1a4e0 esi=89ff6940 edi=00000001
eip=89fef3de esp=af656a5c ebp=af656be4 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
89fef3de 668b08 mov cx,word ptr [eax]
ds:0023:e4e1b000=????
kd> kv
ChildEBP RetAddr Args to Child
WARNING: Frame IP not in any known module. Following frames may be wrong.
af656be4 8062c1c9 89072ad0 00001464 af656c24 0x89fef3de
af656c04 805f11c6 89072ad0 00001464 af656c24
nt!PsCallImageNotifyRoutines+0x36 (FPO: [Non-Fpo])
af656c48 8057a196 88d5ca50 66a00000 af656d18
nt!MiMapViewOfImageSection+0x471 (FPO: [Non-Fpo])
af656ca4 8057259b 00000004 89066110 af656d18 nt!MmMapViewOfSection+0x13c
(FPO: [Non-Fpo])
af656d34 804de7ec 00000354 ffffffff 0086cdc0 nt!NtMapViewOfSection+0x2bd
(FPO: [Non-Fpo])
af656d34 7c90eb94 00000354 ffffffff 0086cdc0 nt!KiFastCallEntry+0xf8 (FPO:
[0,0] TrapFrame @ af656d64)
0086cddc 00000000 00000000 00000000 00000000 0x7c90eb94
kd> lmnt
start end module name
804d7000 806eb500 nt ntoskrnl.exe Wed Feb 28 01:10:41 2007 (45E54711)
806ec000 806ffd80 hal halacpi.dll Tue Aug 03 22:59:04 2004 (41107B28)
af183000 af185f80 mouhid mouhid.sys Fri Aug 17 13:47:57 2001 (3B7D82FD)
af8e7000 af8efd80 HIDCLASS HIDCLASS.SYS Tue Aug 03 23:08:18 2004 (41107D52)
af9a3000 af9a5580 hidusb hidusb.sys Fri Aug 17 14:02:16 2001 (3B7D8658)
afbad000 afbc1400 wdmaud wdmaud.sys Wed Jun 14 02:00:44 2006 (448FD03C)
afe22000 afe30d80 sysaudio sysaudio.sys Tue Aug 03 23:15:54 2004 (41107F1A)
afffa000 b0021f00 secdrv secdrv.sys Tue Aug 31 06:42:55 2004 (4134805F)
b018a000 b01db480 srv srv.sys Mon Aug 14 03:34:39 2006 (44E051BF)
b02f4000 b0334280 HTTP HTTP.sys Thu Mar 16 17:33:09 2006 (441A03C5)
b0335000 b0366940 btslbcsp btslbcsp.sys Fri Jul 22 16:33:57 2005 (42E18265)
b038f000 b03bb400 mrxdav mrxdav.sys Tue Aug 03 23:00:49 2004 (41107B91)
b06cc000 b06cf900 ndisuio ndisuio.sys Tue Apr 19 16:54:03 2005 (42659A1B)
b0704000 b0729580 ino_fltr ino_fltr.sys Fri Jul 07 04:07:19 2006 (44AE4067)
b0736000 b07388c0 s24trans s24trans.sys Fri Aug 06 16:44:12 2004 (411417CC)
b073a000 b073dba0 AegisP AegisP.sys Fri Jul 23 07:33:15 2004 (410121AB)
b0842000 b0859480 dump_atapi dump_atapi.sys Tue Aug 03 22:59:41 2004
(41107B4D)
b085a000 b093d600 LV302V32 LV302V32.SYS Sat Feb 03 09:58:26 2007 (45C4CD42)
b0b44000 b0ba6000 eeCtrl eeCtrl.sys Fri Sep 08 18:11:43 2006 (450214CF)
b0c46000 b0c66f00 ipnat ipnat.sys Wed Sep 29 15:28:36 2004 (415B3714)
b0c67000 b0cd5a00 mrxsmb mrxsmb.sys Fri May 05 02:41:42 2006 (445B1DD6)
b0cd6000 b0d00a00 rdbss rdbss.sys Fri May 05 02:47:55 2006 (445B1F4B)
b0d01000 b0d3c000 vmm vmm.sys Sun Feb 18 00:10:42 2007 (45D80A02)
b0d3c000 b0d5dd00 afd afd.sys Tue Aug 03 23:14:13 2004 (41107EB5)
b0d5e000 b0d85c00 netbt netbt.sys Tue Aug 03 23:14:36 2004 (41107ECC)
b0d86000 b0dddd80 tcpip tcpip.sys Thu Apr 20 04:51:47 2006 (444775D3)
b0dde000 b0df0400 ipsec ipsec.sys Tue Aug 03 23:14:27 2004 (41107EC3)
b0e39000 b0e4c000 mozy mozy.sys Tue Jan 30 16:32:38 2007 (45BFE3A6)
b0e4c000 b0e60100 GPCCARD GPCCARD.sys Fri Jun 09 08:42:55 2006 (448996FF)
b8f39000 b8f3d900 LVPr2Mon LVPr2Mon.sys Tue Feb 06 16:41:29 2007 (45C92039)
b8f59000 b8f8c200 update update.sys Tue Aug 03 22:58:32 2004 (41107B08)
b8f8d000 b8fbd100 rdpdr rdpdr.sys Tue Aug 03 23:01:10 2004 (41107BA6)
b8fda000 b8fdc280 rasacd rasacd.sys Fri Aug 17 13:55:39 2001 (3B7D84CB)
b8fe2000 b8fe5900 SMCLIB SMCLIB.SYS Fri Aug 17 13:50:56 2001 (3B7D83B0)
b8fe6000 b8ffc680 ndiswan ndiswan.sys Tue Aug 03 23:14:30 2004 (41107EC6)
b8ffd000 b907a480 SndTDriverV32 SndTDriverV32.sys Thu Jan 18 02:05:27 2007
(45AF4667)
b907b000 b90b8000 iwca iwca.sys Thu Aug 12 08:44:02 2004 (411B9042)
b90b8000 b91fbce0 btkrnl btkrnl.sys Fri Jul 22 16:32:58 2005 (42E1822A)
b91fc000 b9330ea0 AGRSM AGRSM.sys Fri Feb 20 12:00:41 2004 (40366769)
b9331000 b9354980 portcls portcls.sys Tue Aug 03 23:15:47 2004 (41107F13)
b9355000 b93939a0 stac97 stac97.sys Tue Jan 06 09:10:16 2004 (3FFAEBF8)
b9394000 b93b6680 ks ks.sys Tue Aug 03 23:15:20 2004 (41107EF8)
b93b7000 b93cf7a0 Apfiltr Apfiltr.sys Sun Jul 04 23:25:54 2004 (40E8F472)
b93d0000 b95eb700 w29n51 w29n51.sys Tue Nov 07 19:50:06 2006 (455153EE)
b95ec000 b961ab20 o2mmb o2mmb.sys Mon Apr 05 21:04:56 2004 (40722C68)
b961b000 b963de80 USBPORT USBPORT.SYS Tue Aug 03 23:08:34 2004 (41107D62)
b963e000 b9651780 VIDEOPRT VIDEOPRT.SYS Tue Aug 03 23:07:04 2004 (41107D08)
b9652000 b97a7ac0 ialmnt5 ialmnt5.sys Tue Feb 07 09:04:33 2006 (43E8D321)
b9f14000 b9f17700 CmBatt CmBatt.sys Tue Aug 03 23:07:39 2004 (41107D2B)
b9f20000 b9f22900 Dxapi Dxapi.sys Fri Aug 17 13:53:19 2001 (3B7D843F)
ba4cf000 ba4dbe00 i8042prt i8042prt.sys Tue Aug 03 23:14:36 2004 (41107ECC)
ba4df000 ba4e9f80 bcm4sbxp bcm4sbxp.sys Wed May 26 15:18:17 2004 (40B517A9)
ba4ef000 ba4f7d00 intelppm intelppm.sys Tue Aug 03 22:59:19 2004 (41107B37)
ba51f000 ba527700 wanarp wanarp.sys Tue Aug 03 23:04:57 2004 (41107C89)
ba52f000 ba537880 Fips Fips.SYS Fri Aug 17 18:31:49 2001 (3B7DC585)
ba54f000 ba557700 netbios netbios.sys Tue Aug 03 23:03:19 2004 (41107C27)
ba55f000 ba567900 msgpc msgpc.sys Tue Aug 03 23:04:11 2004 (41107C5B)
ba7a7000 ba7a7c00 audstub audstub.sys Fri Aug 17 13:59:40 2001 (3B7D85BC)
baf07000 baf15100 usbhub usbhub.sys Tue Aug 03 23:08:40 2004 (41107D68)
baf57000 baf60480 NDProxy NDProxy.SYS Fri Aug 17 13:55:30 2001 (3B7D84C2)
bafec000 bafefc80 mssmbios mssmbios.sys Tue Aug 03 23:07:47 2004 (41107D33)
baffc000 baffe580 ndistapi ndistapi.sys Fri Aug 17 13:55:29 2001 (3B7D84C1)
bf800000 bf9c2180 win32k win32k.sys Thu Mar 08 05:47:34 2007 (45F013F6)
bf9c3000 bf9d4580 dxg dxg.sys Tue Aug 03 23:00:51 2004 (41107B93)
bf9d5000 bf9e4000 ialmrnt5 ialmrnt5.dll Tue Feb 07 08:56:14 2006 (43E8D12E)
bf9e4000 bfa06000 ialmdnt5 ialmdnt5.dll Tue Feb 07 08:56:07 2006 (43E8D127)
bfa06000 bfa3eca0 ialmdev5 ialmdev5.DLL Tue Feb 07 08:55:56 2006 (43E8D11C)
bfa3f000 bfb2e000 ialmdd5 ialmdd5.DLL Tue Feb 07 09:03:30 2006 (43E8D2E2)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 00:56:56 2004 (411096C8)
f7402000 f740d900 pcouffin pcouffin.sys Fri Jun 30 06:40:17 2006 (44A529C1)
f7412000 f7423f00 sr sr.sys Tue Aug 03 23:06:22 2004 (41107CDE)
f7424000 f7443780 fltMgr fltMgr.sys Mon Aug 21 02:14:57 2006 (44E97991)
f7444000 f745b800 SCSIPORT SCSIPORT.SYS Tue Aug 03 22:59:39 2004 (41107B4B)
f745c000 f7473480 atapi atapi.sys Tue Aug 03 22:59:41 2004 (41107B4D)
f7474000 f7499700 dmio dmio.sys Tue Aug 03 23:07:13 2004 (41107D11)
f749a000 f74b8880 ftdisk ftdisk.sys Fri Aug 17 13:52:41 2001 (3B7D8419)
f74b9000 f74d6480 pcmcia pcmcia.sys Tue Aug 03 23:07:45 2004 (41107D31)
f74d7000 f74e2d00 raspptp raspptp.sys Tue Aug 03 23:14:26 2004 (41107EC2)
f74e7000 f74f1200 raspppoe raspppoe.sys Tue Aug 03 23:05:06 2004 (41107C92)
f74f7000 f7503880 rasl2tp rasl2tp.sys Tue Aug 03 23:14:21 2004 (41107EBD)
f7557000 f7566900 Cdfs Cdfs.SYS Tue Aug 03 23:14:09 2004 (41107EB1)
f7577000 f7587a80 pci pci.sys Tue Aug 03 23:07:45 2004 (41107D31)
f7588000 f75b5d80 ACPI ACPI.sys Tue Aug 03 23:07:35 2004 (41107D27)
f75b6000 f75d5200 imagesrv imagesrv.sys Fri Nov 12 18:35:07 2004 (419572DB)
f75f7000 f75ffc00 isapnp isapnp.sys Fri Aug 17 13:58:01 2001 (3B7D8559)
f7607000 f7615e80 ohci1394 ohci1394.sys Tue Aug 03 23:10:05 2004 (41107DBD)
f7617000 f7624000 1394BUS 1394BUS.SYS Tue Aug 03 23:10:03 2004 (41107DBB)
f7627000 f7631500 MountMgr MountMgr.sys Tue Aug 03 22:58:29 2004 (41107B05)
f7637000 f7643c80 VolSnap VolSnap.sys Tue Aug 03 23:00:14 2004 (41107B6E)
f7647000 f764fe00 disk disk.sys Tue Aug 03 22:59:53 2004 (41107B59)
f7657000 f7663200 CLASSPNP CLASSPNP.SYS Tue Aug 03 23:14:26 2004 (41107EC2)
f7667000 f766fb80 PxHelp20 PxHelp20.sys Wed Oct 18 10:33:53 2006 (45366581)
f7697000 f76a1380 imapi imapi.sys Tue Aug 03 23:00:12 2004 (41107B6C)
f76a7000 f76b3180 cdrom cdrom.sys Tue Aug 03 22:59:52 2004 (41107B58)
f76b7000 f76c5080 redbook redbook.sys Tue Aug 03 22:59:34 2004 (41107B46)
f76c7000 f76cf700 LVUSBSta LVUSBSta.sys Sat Feb 03 09:46:13 2007 (45C4CA65)
f76d7000 f76e5b80 drmk drmk.sys Tue Aug 03 23:07:54 2004 (41107D3A)
f76e7000 f76f5780 usbaudio usbaudio.sys Tue Aug 03 23:07:52 2004 (41107D38)
f76f7000 f7706000 VMNetSrv VMNetSrv.sys Wed Jan 24 04:05:29 2007 (45B74B89)
f7707000 f770d200 PCIIDEX PCIIDEX.SYS Tue Aug 03 22:59:40 2004 (41107B4C)
f770f000 f7713900 PartMgr PartMgr.sys Fri Aug 17 18:32:23 2001 (3B7DC5A7)
f7717000 f771c200 ino_flpy ino_flpy.sys Fri Jul 07 04:07:05 2006 (44AE4059)
f773f000 f7744000 usbuhci usbuhci.sys Tue Aug 03 23:08:34 2004 (41107D62)
f7747000 f774d800 usbehci usbehci.sys Tue Aug 03 23:08:34 2004 (41107D62)
f774f000 f7754a00 mouclass mouclass.sys Tue Aug 03 22:58:32 2004 (41107B08)
f7757000 f775d000 kbdclass kbdclass.sys Tue Aug 03 22:58:32 2004 (41107B08)
f775f000 f7766000 GEARAspiWDM GEARAspiWDM.sys Mon Aug 07 10:11:27 2006
(44D7743F)
f7767000 f776e580 Modem Modem.SYS Tue Aug 03 23:08:04 2004 (41107D44)
f777f000 f7783880 TDI TDI.SYS Tue Aug 03 23:07:47 2004 (41107D33)
f7787000 f778b580 ptilink ptilink.sys Fri Aug 17 13:49:53 2001 (3B7D8371)
f778f000 f7793080 raspti raspti.sys Fri Aug 17 13:55:32 2001 (3B7D84C4)
f77b7000 f77bc280 BtnHnd BtnHnd.sys Thu Jul 15 19:12:27 2004 (40F7398B)
f77bf000 f77c47a0 btserial btserial.sys Fri Jul 22 16:34:02 2005 (42E1826A)
f77d7000 f77dc200 vga vga.sys Tue Aug 03 23:07:06 2004 (41107D0A)
f77df000 f77e3a80 Msfs Msfs.SYS Tue Aug 03 23:00:37 2004 (41107B85)
f77e7000 f77ee880 Npfs Npfs.SYS Tue Aug 03 23:00:38 2004 (41107B86)
f77f7000 f77feb80 usbccgp usbccgp.sys Tue Aug 03 23:08:45 2004 (41107D6D)
f77ff000 f7803500 watchdog watchdog.sys Tue Aug 03 23:07:32 2004 (41107D24)
f7807000 f780d180 HIDPARSE HIDPARSE.SYS Tue Aug 03 23:08:15 2004 (41107D4F)
f781f000 f7824500 point32 point32.sys Tue Nov 07 23:02:34 2006 (4551810A)
f7828000 f7842580 Mup Mup.sys Tue Aug 03 23:15:20 2004 (41107EF8)
f7843000 f786fa80 NDIS NDIS.sys Tue Aug 03 23:14:27 2004 (41107EC3)
f7870000 f7886780 KSecDD KSecDD.sys Tue Aug 03 22:59:45 2004 (41107B51)
f7887000 f7890f00 termdd termdd.sys Tue Aug 03 22:58:52 2004 (41107B1C)
f7897000 f789a000 BOOTVID BOOTVID.dll Fri Aug 17 13:49:09 2001 (3B7D8345)
f789b000 f789d480 compbatt compbatt.sys Fri Aug 17 13:57:58 2001 (3B7D8556)
f789f000 f78a2700 BATTC BATTC.SYS Fri Aug 17 13:57:52 2001 (3B7D8550)
f7987000 f7988b80 kdcom kdcom.dll Fri Aug 17 13:49:10 2001 (3B7D8346)
f7989000 f798a100 WMILIB WMILIB.SYS Fri Aug 17 14:07:23 2001 (3B7D878B)
f798b000 f798c580 intelide intelide.sys Tue Aug 03 22:59:40 2004 (41107B4C)
f798d000 f798e700 dmload dmload.sys Fri Aug 17 13:58:15 2001 (3B7D8567)
f798f000 f7990700 imagedrv imagedrv.sys Fri Nov 12 18:34:55 2004 (419572CF)
f799b000 f799c280 USBD USBD.SYS Fri Aug 17 14:02:58 2001 (3B7D8682)
f799d000 f799e100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 14:07:23 2001
(3B7D878B)
f79bd000 f79be080 FlashDrv FlashDrv.sys Sun Jul 30 17:48:31 2000 (3984CCDF)
f79d1000 f79d2f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 13:49:37 2001 (3B7D8361)
f79d3000 f79d4080 Beep Beep.SYS Fri Aug 17 13:47:33 2001 (3B7D82E5)
f79d5000 f79d6080 mnmdd mnmdd.SYS Fri Aug 17 13:57:28 2001 (3B7D8538)
f79d7000 f79d8080 RDPCDD RDPCDD.sys Fri Aug 17 13:46:56 2001 (3B7D82C0)
f79df000 f79e0680 MbxStby MbxStby.sys Tue Mar 09 22:44:40 2004 (404EB958)
f79e1000 f79e2480 FUJ02B1 FUJ02B1.sys Tue Jul 31 20:00:21 2001 (3B6770C5)
f79fb000 f79fcc80 lv302af lv302af.sys Sat Feb 03 09:56:10 2007 (45C4CCBA)
f7a07000 f7a08700 RootMdm RootMdm.sys Fri Aug 17 13:57:36 2001 (3B7D8540)
f7a09000 f7a0a100 swenum swenum.sys Tue Aug 03 22:58:41 2004 (41107B11)
f7a4f000 f7a4fd00 pciide pciide.sys Fri Aug 17 13:51:49 2001 (3B7D83E5)
f7a83000 f7a83d00 dxgthk dxgthk.sys Fri Aug 17 13:53:12 2001 (3B7D8438)
f7aa8000 f7aa8b80 Null Null.SYS Fri Aug 17 13:47:39 2001 (3B7D82EB)
f7ab4000 f7ab4a80 PQNTDrv PQNTDrv.SYS Wed May 05 20:48:39 2004 (4099B597)
f7b52000 f7bde480 Ntfs Ntfs.sys Tue Aug 03 23:15:06 2004 (41107EEA)

Unloaded modules:
aee84000 aeeaf000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
afa97000 afac2000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79e3000 f79e5000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba5e4000 ba5e5000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
afe82000 afe8f000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b0404000 b0412000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
afb62000 afb85000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b052c000 b053c000 Serial.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b093e000 b0b1c000 LVMVDrv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba53f000 ba54f000 tosrfcom.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f77cf000 f77d4000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f77c7000 f77cc000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f77bf000 f77c6000 Fdc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7a03000 f7a05000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7507000 f7510000 LVUSBSta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79fb000 f79fd000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7517000 f7520000 LVUSBSta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79f7000 f79f9000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7527000 f7530000 LVUSBSta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79f3000 f79f5000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7537000 f7540000 LVUSBSta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79ef000 f79f1000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7547000 f7550000 LVUSBSta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79eb000 f79ed000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7557000 f7560000 LVUSBSta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79e7000 f79e9000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7567000 f7570000 LVUSBSta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79e3000 f79e5000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f76c7000 f76d0000 LVUSBSta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
 
W

Will Denny

Hi

Please try the following link to Jim Eshelman's web page - left hand column
(50)

http://aumha.org/win5/kbestop.htm

--


Will Denny

MS MVP Shell/User
Please Reply to the News Groups


Pablo said:
Hello,

My main development machine is a Windows XP machine. 2 weeks ago I started
getting blue screens PAGE_FAULT_IN_NONPAGED_AREA. I initialy pointed the
RAM,
but replaced it and even ran memcheck for several days without errors.

I have about 20+ dumps that all point to nt!PsCallImageNotifyRoutines+36,
but I have no experience on crash dump analysis. It seems to be a driver
issue, but the driver responsible for this is not easy to find. What I'm
looking here is to locate the file (or driver) responsible to be able to
fix
this fast.

I would appreciate some help, as fixing this problem is a high priority.
If
needed I can provide the dumps for more analysis, for now Here I post a
copy
of windbg records.

Thanks!
Pablo
Click to expand...
<snipped>
 
C

CreateWindow

Hi Pablo,

Try a chkdsk /r on your system drive. After thats done and rebooted, check
the Application event log for event ID 1001 (winlogon). Here you will find
the results of the chkdsk /r (repair).
Not as sexy as a windbg analysis but may fix your problem.

Cheers
CreateWindow


Pablo said:
Hello,

My main development machine is a Windows XP machine. 2 weeks ago I started
getting blue screens PAGE_FAULT_IN_NONPAGED_AREA. I initialy pointed the
RAM,
but replaced it and even ran memcheck for several days without errors.

I have about 20+ dumps that all point to nt!PsCallImageNotifyRoutines+36,
but I have no experience on crash dump analysis. It seems to be a driver
issue, but the driver responsible for this is not easy to find. What I'm
looking here is to locate the file (or driver) responsible to be able to
fix
this fast.

I would appreciate some help, as fixing this problem is a high priority.
If
needed I can provide the dumps for more analysis, for now Here I post a
copy
of windbg records.

Thanks!
Pablo


Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and
Settings\p\Desktop\Dumps\Mini041107-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is:
srv*c:\cache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a620
Debug session time: Wed Apr 11 20:49:00.946 2007 (GMT-7)
System Uptime: 0 days 0:53:09.498
Loading Kernel Symbols
.....................................................................................................................................................
Loading User Symbols
Loading unloaded module list
.............................
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 10000050, {e4e1b000, 0, 89fef3de, 1}


Could not read faulting driver name
Probably caused by : ntoskrnl.exe ( nt!PsCallImageNotifyRoutines+36 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by
try-except,
it must be protected by a Probe. Typically the address is just plain bad
or
it
is pointing at freed memory.
Arguments:
Arg1: e4e1b000, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 89fef3de, If non-zero, the instruction address which referenced the
bad memory
address.
Arg4: 00000001, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: e4e1b000

FAULTING_IP:
+ffffffff89fef3de
89fef3de 668b08 mov cx,word ptr [eax]

MM_INTERNAL_CODE: 1

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: wmiprvse.exe

LAST_CONTROL_TRANSFER: from 8062c1c9 to 89fef3de

STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
af656be4 8062c1c9 89072ad0 00001464 af656c24 0x89fef3de
af656c04 805f11c6 89072ad0 00001464 af656c24
nt!PsCallImageNotifyRoutines+0x36
af656c48 8057a196 88d5ca50 66a00000 af656d18
nt!MiMapViewOfImageSection+0x471
af656ca4 8057259b 00000004 89066110 af656d18 nt!MmMapViewOfSection+0x13c
af656d34 804de7ec 00000354 ffffffff 0086cdc0 nt!NtMapViewOfSection+0x2bd
af656d34 7c90eb94 00000354 ffffffff 0086cdc0 nt!KiFastCallEntry+0xf8
0086cddc 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!PsCallImageNotifyRoutines+36
8062c1c9 56 push esi

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!PsCallImageNotifyRoutines+36

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 45e54711

FAILURE_BUCKET_ID: 0x50_nt!PsCallImageNotifyRoutines+36

BUCKET_ID: 0x50_nt!PsCallImageNotifyRoutines+36

Followup: MachineOwner
---------

kd> kb
ChildEBP RetAddr Args to Child
WARNING: Frame IP not in any known module. Following frames may be wrong.
af656be4 8062c1c9 89072ad0 00001464 af656c24 0x89fef3de
af656c04 805f11c6 89072ad0 00001464 af656c24
nt!PsCallImageNotifyRoutines+0x36
af656c48 8057a196 88d5ca50 66a00000 af656d18
nt!MiMapViewOfImageSection+0x471
af656ca4 8057259b 00000004 89066110 af656d18 nt!MmMapViewOfSection+0x13c
af656d34 804de7ec 00000354 ffffffff 0086cdc0 nt!NtMapViewOfSection+0x2bd
af656d34 7c90eb94 00000354 ffffffff 0086cdc0 nt!KiFastCallEntry+0xf8
0086cddc 00000000 00000000 00000000 00000000 0x7c90eb94
kd> r
eax=e4e1b000 ebx=00000000 ecx=8056fe49 edx=e4e1a4e0 esi=89ff6940
edi=00000001
eip=89fef3de esp=af656a5c ebp=af656be4 iopl=0 nv up ei ng nz na po
nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00010282
89fef3de 668b08 mov cx,word ptr [eax]
ds:0023:e4e1b000=????
kd> kv
ChildEBP RetAddr Args to Child
WARNING: Frame IP not in any known module. Following frames may be wrong.
af656be4 8062c1c9 89072ad0 00001464 af656c24 0x89fef3de
af656c04 805f11c6 89072ad0 00001464 af656c24
nt!PsCallImageNotifyRoutines+0x36 (FPO: [Non-Fpo])
af656c48 8057a196 88d5ca50 66a00000 af656d18
nt!MiMapViewOfImageSection+0x471 (FPO: [Non-Fpo])
af656ca4 8057259b 00000004 89066110 af656d18 nt!MmMapViewOfSection+0x13c
(FPO: [Non-Fpo])
af656d34 804de7ec 00000354 ffffffff 0086cdc0 nt!NtMapViewOfSection+0x2bd
(FPO: [Non-Fpo])
af656d34 7c90eb94 00000354 ffffffff 0086cdc0 nt!KiFastCallEntry+0xf8 (FPO:
[0,0] TrapFrame @ af656d64)
0086cddc 00000000 00000000 00000000 00000000 0x7c90eb94
kd> lmnt
start end module name
804d7000 806eb500 nt ntoskrnl.exe Wed Feb 28 01:10:41 2007
(45E54711)
806ec000 806ffd80 hal halacpi.dll Tue Aug 03 22:59:04 2004
(41107B28)
af183000 af185f80 mouhid mouhid.sys Fri Aug 17 13:47:57 2001
(3B7D82FD)
af8e7000 af8efd80 HIDCLASS HIDCLASS.SYS Tue Aug 03 23:08:18 2004
(41107D52)
af9a3000 af9a5580 hidusb hidusb.sys Fri Aug 17 14:02:16 2001
(3B7D8658)
afbad000 afbc1400 wdmaud wdmaud.sys Wed Jun 14 02:00:44 2006
(448FD03C)
afe22000 afe30d80 sysaudio sysaudio.sys Tue Aug 03 23:15:54 2004
(41107F1A)
afffa000 b0021f00 secdrv secdrv.sys Tue Aug 31 06:42:55 2004
(4134805F)
b018a000 b01db480 srv srv.sys Mon Aug 14 03:34:39 2006
(44E051BF)
b02f4000 b0334280 HTTP HTTP.sys Thu Mar 16 17:33:09 2006
(441A03C5)
b0335000 b0366940 btslbcsp btslbcsp.sys Fri Jul 22 16:33:57 2005
(42E18265)
b038f000 b03bb400 mrxdav mrxdav.sys Tue Aug 03 23:00:49 2004
(41107B91)
b06cc000 b06cf900 ndisuio ndisuio.sys Tue Apr 19 16:54:03 2005
(42659A1B)
b0704000 b0729580 ino_fltr ino_fltr.sys Fri Jul 07 04:07:19 2006
(44AE4067)
b0736000 b07388c0 s24trans s24trans.sys Fri Aug 06 16:44:12 2004
(411417CC)
b073a000 b073dba0 AegisP AegisP.sys Fri Jul 23 07:33:15 2004
(410121AB)
b0842000 b0859480 dump_atapi dump_atapi.sys Tue Aug 03 22:59:41 2004
(41107B4D)
b085a000 b093d600 LV302V32 LV302V32.SYS Sat Feb 03 09:58:26 2007
(45C4CD42)
b0b44000 b0ba6000 eeCtrl eeCtrl.sys Fri Sep 08 18:11:43 2006
(450214CF)
b0c46000 b0c66f00 ipnat ipnat.sys Wed Sep 29 15:28:36 2004
(415B3714)
b0c67000 b0cd5a00 mrxsmb mrxsmb.sys Fri May 05 02:41:42 2006
(445B1DD6)
b0cd6000 b0d00a00 rdbss rdbss.sys Fri May 05 02:47:55 2006
(445B1F4B)
b0d01000 b0d3c000 vmm vmm.sys Sun Feb 18 00:10:42 2007
(45D80A02)
b0d3c000 b0d5dd00 afd afd.sys Tue Aug 03 23:14:13 2004
(41107EB5)
b0d5e000 b0d85c00 netbt netbt.sys Tue Aug 03 23:14:36 2004
(41107ECC)
b0d86000 b0dddd80 tcpip tcpip.sys Thu Apr 20 04:51:47 2006
(444775D3)
b0dde000 b0df0400 ipsec ipsec.sys Tue Aug 03 23:14:27 2004
(41107EC3)
b0e39000 b0e4c000 mozy mozy.sys Tue Jan 30 16:32:38 2007
(45BFE3A6)
b0e4c000 b0e60100 GPCCARD GPCCARD.sys Fri Jun 09 08:42:55 2006
(448996FF)
b8f39000 b8f3d900 LVPr2Mon LVPr2Mon.sys Tue Feb 06 16:41:29 2007
(45C92039)
b8f59000 b8f8c200 update update.sys Tue Aug 03 22:58:32 2004
(41107B08)
b8f8d000 b8fbd100 rdpdr rdpdr.sys Tue Aug 03 23:01:10 2004
(41107BA6)
b8fda000 b8fdc280 rasacd rasacd.sys Fri Aug 17 13:55:39 2001
(3B7D84CB)
b8fe2000 b8fe5900 SMCLIB SMCLIB.SYS Fri Aug 17 13:50:56 2001
(3B7D83B0)
b8fe6000 b8ffc680 ndiswan ndiswan.sys Tue Aug 03 23:14:30 2004
(41107EC6)
b8ffd000 b907a480 SndTDriverV32 SndTDriverV32.sys Thu Jan 18 02:05:27
2007
(45AF4667)
b907b000 b90b8000 iwca iwca.sys Thu Aug 12 08:44:02 2004
(411B9042)
b90b8000 b91fbce0 btkrnl btkrnl.sys Fri Jul 22 16:32:58 2005
(42E1822A)
b91fc000 b9330ea0 AGRSM AGRSM.sys Fri Feb 20 12:00:41 2004
(40366769)
b9331000 b9354980 portcls portcls.sys Tue Aug 03 23:15:47 2004
(41107F13)
b9355000 b93939a0 stac97 stac97.sys Tue Jan 06 09:10:16 2004
(3FFAEBF8)
b9394000 b93b6680 ks ks.sys Tue Aug 03 23:15:20 2004
(41107EF8)
b93b7000 b93cf7a0 Apfiltr Apfiltr.sys Sun Jul 04 23:25:54 2004
(40E8F472)
b93d0000 b95eb700 w29n51 w29n51.sys Tue Nov 07 19:50:06 2006
(455153EE)
b95ec000 b961ab20 o2mmb o2mmb.sys Mon Apr 05 21:04:56 2004
(40722C68)
b961b000 b963de80 USBPORT USBPORT.SYS Tue Aug 03 23:08:34 2004
(41107D62)
b963e000 b9651780 VIDEOPRT VIDEOPRT.SYS Tue Aug 03 23:07:04 2004
(41107D08)
b9652000 b97a7ac0 ialmnt5 ialmnt5.sys Tue Feb 07 09:04:33 2006
(43E8D321)
b9f14000 b9f17700 CmBatt CmBatt.sys Tue Aug 03 23:07:39 2004
(41107D2B)
b9f20000 b9f22900 Dxapi Dxapi.sys Fri Aug 17 13:53:19 2001
(3B7D843F)
ba4cf000 ba4dbe00 i8042prt i8042prt.sys Tue Aug 03 23:14:36 2004
(41107ECC)
ba4df000 ba4e9f80 bcm4sbxp bcm4sbxp.sys Wed May 26 15:18:17 2004
(40B517A9)
ba4ef000 ba4f7d00 intelppm intelppm.sys Tue Aug 03 22:59:19 2004
(41107B37)
ba51f000 ba527700 wanarp wanarp.sys Tue Aug 03 23:04:57 2004
(41107C89)
ba52f000 ba537880 Fips Fips.SYS Fri Aug 17 18:31:49 2001
(3B7DC585)
ba54f000 ba557700 netbios netbios.sys Tue Aug 03 23:03:19 2004
(41107C27)
ba55f000 ba567900 msgpc msgpc.sys Tue Aug 03 23:04:11 2004
(41107C5B)
ba7a7000 ba7a7c00 audstub audstub.sys Fri Aug 17 13:59:40 2001
(3B7D85BC)
baf07000 baf15100 usbhub usbhub.sys Tue Aug 03 23:08:40 2004
(41107D68)
baf57000 baf60480 NDProxy NDProxy.SYS Fri Aug 17 13:55:30 2001
(3B7D84C2)
bafec000 bafefc80 mssmbios mssmbios.sys Tue Aug 03 23:07:47 2004
(41107D33)
baffc000 baffe580 ndistapi ndistapi.sys Fri Aug 17 13:55:29 2001
(3B7D84C1)
bf800000 bf9c2180 win32k win32k.sys Thu Mar 08 05:47:34 2007
(45F013F6)
bf9c3000 bf9d4580 dxg dxg.sys Tue Aug 03 23:00:51 2004
(41107B93)
bf9d5000 bf9e4000 ialmrnt5 ialmrnt5.dll Tue Feb 07 08:56:14 2006
(43E8D12E)
bf9e4000 bfa06000 ialmdnt5 ialmdnt5.dll Tue Feb 07 08:56:07 2006
(43E8D127)
bfa06000 bfa3eca0 ialmdev5 ialmdev5.DLL Tue Feb 07 08:55:56 2006
(43E8D11C)
bfa3f000 bfb2e000 ialmdd5 ialmdd5.DLL Tue Feb 07 09:03:30 2006
(43E8D2E2)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 00:56:56 2004
(411096C8)
f7402000 f740d900 pcouffin pcouffin.sys Fri Jun 30 06:40:17 2006
(44A529C1)
f7412000 f7423f00 sr sr.sys Tue Aug 03 23:06:22 2004
(41107CDE)
f7424000 f7443780 fltMgr fltMgr.sys Mon Aug 21 02:14:57 2006
(44E97991)
f7444000 f745b800 SCSIPORT SCSIPORT.SYS Tue Aug 03 22:59:39 2004
(41107B4B)
f745c000 f7473480 atapi atapi.sys Tue Aug 03 22:59:41 2004
(41107B4D)
f7474000 f7499700 dmio dmio.sys Tue Aug 03 23:07:13 2004
(41107D11)
f749a000 f74b8880 ftdisk ftdisk.sys Fri Aug 17 13:52:41 2001
(3B7D8419)
f74b9000 f74d6480 pcmcia pcmcia.sys Tue Aug 03 23:07:45 2004
(41107D31)
f74d7000 f74e2d00 raspptp raspptp.sys Tue Aug 03 23:14:26 2004
(41107EC2)
f74e7000 f74f1200 raspppoe raspppoe.sys Tue Aug 03 23:05:06 2004
(41107C92)
f74f7000 f7503880 rasl2tp rasl2tp.sys Tue Aug 03 23:14:21 2004
(41107EBD)
f7557000 f7566900 Cdfs Cdfs.SYS Tue Aug 03 23:14:09 2004
(41107EB1)
f7577000 f7587a80 pci pci.sys Tue Aug 03 23:07:45 2004
(41107D31)
f7588000 f75b5d80 ACPI ACPI.sys Tue Aug 03 23:07:35 2004
(41107D27)
f75b6000 f75d5200 imagesrv imagesrv.sys Fri Nov 12 18:35:07 2004
(419572DB)
f75f7000 f75ffc00 isapnp isapnp.sys Fri Aug 17 13:58:01 2001
(3B7D8559)
f7607000 f7615e80 ohci1394 ohci1394.sys Tue Aug 03 23:10:05 2004
(41107DBD)
f7617000 f7624000 1394BUS 1394BUS.SYS Tue Aug 03 23:10:03 2004
(41107DBB)
f7627000 f7631500 MountMgr MountMgr.sys Tue Aug 03 22:58:29 2004
(41107B05)
f7637000 f7643c80 VolSnap VolSnap.sys Tue Aug 03 23:00:14 2004
(41107B6E)
f7647000 f764fe00 disk disk.sys Tue Aug 03 22:59:53 2004
(41107B59)
f7657000 f7663200 CLASSPNP CLASSPNP.SYS Tue Aug 03 23:14:26 2004
(41107EC2)
f7667000 f766fb80 PxHelp20 PxHelp20.sys Wed Oct 18 10:33:53 2006
(45366581)
f7697000 f76a1380 imapi imapi.sys Tue Aug 03 23:00:12 2004
(41107B6C)
f76a7000 f76b3180 cdrom cdrom.sys Tue Aug 03 22:59:52 2004
(41107B58)
f76b7000 f76c5080 redbook redbook.sys Tue Aug 03 22:59:34 2004
(41107B46)
f76c7000 f76cf700 LVUSBSta LVUSBSta.sys Sat Feb 03 09:46:13 2007
(45C4CA65)
f76d7000 f76e5b80 drmk drmk.sys Tue Aug 03 23:07:54 2004
(41107D3A)
f76e7000 f76f5780 usbaudio usbaudio.sys Tue Aug 03 23:07:52 2004
(41107D38)
f76f7000 f7706000 VMNetSrv VMNetSrv.sys Wed Jan 24 04:05:29 2007
(45B74B89)
f7707000 f770d200 PCIIDEX PCIIDEX.SYS Tue Aug 03 22:59:40 2004
(41107B4C)
f770f000 f7713900 PartMgr PartMgr.sys Fri Aug 17 18:32:23 2001
(3B7DC5A7)
f7717000 f771c200 ino_flpy ino_flpy.sys Fri Jul 07 04:07:05 2006
(44AE4059)
f773f000 f7744000 usbuhci usbuhci.sys Tue Aug 03 23:08:34 2004
(41107D62)
f7747000 f774d800 usbehci usbehci.sys Tue Aug 03 23:08:34 2004
(41107D62)
f774f000 f7754a00 mouclass mouclass.sys Tue Aug 03 22:58:32 2004
(41107B08)
f7757000 f775d000 kbdclass kbdclass.sys Tue Aug 03 22:58:32 2004
(41107B08)
f775f000 f7766000 GEARAspiWDM GEARAspiWDM.sys Mon Aug 07 10:11:27 2006
(44D7743F)
f7767000 f776e580 Modem Modem.SYS Tue Aug 03 23:08:04 2004
(41107D44)
f777f000 f7783880 TDI TDI.SYS Tue Aug 03 23:07:47 2004
(41107D33)
f7787000 f778b580 ptilink ptilink.sys Fri Aug 17 13:49:53 2001
(3B7D8371)
f778f000 f7793080 raspti raspti.sys Fri Aug 17 13:55:32 2001
(3B7D84C4)
f77b7000 f77bc280 BtnHnd BtnHnd.sys Thu Jul 15 19:12:27 2004
(40F7398B)
f77bf000 f77c47a0 btserial btserial.sys Fri Jul 22 16:34:02 2005
(42E1826A)
f77d7000 f77dc200 vga vga.sys Tue Aug 03 23:07:06 2004
(41107D0A)
f77df000 f77e3a80 Msfs Msfs.SYS Tue Aug 03 23:00:37 2004
(41107B85)
f77e7000 f77ee880 Npfs Npfs.SYS Tue Aug 03 23:00:38 2004
(41107B86)
f77f7000 f77feb80 usbccgp usbccgp.sys Tue Aug 03 23:08:45 2004
(41107D6D)
f77ff000 f7803500 watchdog watchdog.sys Tue Aug 03 23:07:32 2004
(41107D24)
f7807000 f780d180 HIDPARSE HIDPARSE.SYS Tue Aug 03 23:08:15 2004
(41107D4F)
f781f000 f7824500 point32 point32.sys Tue Nov 07 23:02:34 2006
(4551810A)
f7828000 f7842580 Mup Mup.sys Tue Aug 03 23:15:20 2004
(41107EF8)
f7843000 f786fa80 NDIS NDIS.sys Tue Aug 03 23:14:27 2004
(41107EC3)
f7870000 f7886780 KSecDD KSecDD.sys Tue Aug 03 22:59:45 2004
(41107B51)
f7887000 f7890f00 termdd termdd.sys Tue Aug 03 22:58:52 2004
(41107B1C)
f7897000 f789a000 BOOTVID BOOTVID.dll Fri Aug 17 13:49:09 2001
(3B7D8345)
f789b000 f789d480 compbatt compbatt.sys Fri Aug 17 13:57:58 2001
(3B7D8556)
f789f000 f78a2700 BATTC BATTC.SYS Fri Aug 17 13:57:52 2001
(3B7D8550)
f7987000 f7988b80 kdcom kdcom.dll Fri Aug 17 13:49:10 2001
(3B7D8346)
f7989000 f798a100 WMILIB WMILIB.SYS Fri Aug 17 14:07:23 2001
(3B7D878B)
f798b000 f798c580 intelide intelide.sys Tue Aug 03 22:59:40 2004
(41107B4C)
f798d000 f798e700 dmload dmload.sys Fri Aug 17 13:58:15 2001
(3B7D8567)
f798f000 f7990700 imagedrv imagedrv.sys Fri Nov 12 18:34:55 2004
(419572CF)
f799b000 f799c280 USBD USBD.SYS Fri Aug 17 14:02:58 2001
(3B7D8682)
f799d000 f799e100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 14:07:23 2001
(3B7D878B)
f79bd000 f79be080 FlashDrv FlashDrv.sys Sun Jul 30 17:48:31 2000
(3984CCDF)
f79d1000 f79d2f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 13:49:37 2001
(3B7D8361)
f79d3000 f79d4080 Beep Beep.SYS Fri Aug 17 13:47:33 2001
(3B7D82E5)
f79d5000 f79d6080 mnmdd mnmdd.SYS Fri Aug 17 13:57:28 2001
(3B7D8538)
f79d7000 f79d8080 RDPCDD RDPCDD.sys Fri Aug 17 13:46:56 2001
(3B7D82C0)
f79df000 f79e0680 MbxStby MbxStby.sys Tue Mar 09 22:44:40 2004
(404EB958)
f79e1000 f79e2480 FUJ02B1 FUJ02B1.sys Tue Jul 31 20:00:21 2001
(3B6770C5)
f79fb000 f79fcc80 lv302af lv302af.sys Sat Feb 03 09:56:10 2007
(45C4CCBA)
f7a07000 f7a08700 RootMdm RootMdm.sys Fri Aug 17 13:57:36 2001
(3B7D8540)
f7a09000 f7a0a100 swenum swenum.sys Tue Aug 03 22:58:41 2004
(41107B11)
f7a4f000 f7a4fd00 pciide pciide.sys Fri Aug 17 13:51:49 2001
(3B7D83E5)
f7a83000 f7a83d00 dxgthk dxgthk.sys Fri Aug 17 13:53:12 2001
(3B7D8438)
f7aa8000 f7aa8b80 Null Null.SYS Fri Aug 17 13:47:39 2001
(3B7D82EB)
f7ab4000 f7ab4a80 PQNTDrv PQNTDrv.SYS Wed May 05 20:48:39 2004
(4099B597)
f7b52000 f7bde480 Ntfs Ntfs.sys Tue Aug 03 23:15:06 2004
(41107EEA)

Unloaded modules:
aee84000 aeeaf000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
afa97000 afac2000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79e3000 f79e5000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba5e4000 ba5e5000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
afe82000 afe8f000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b0404000 b0412000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
afb62000 afb85000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b052c000 b053c000 Serial.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b093e000 b0b1c000 LVMVDrv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba53f000 ba54f000 tosrfcom.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f77cf000 f77d4000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f77c7000 f77cc000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f77bf000 f77c6000 Fdc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7a03000 f7a05000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7507000 f7510000 LVUSBSta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79fb000 f79fd000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7517000 f7520000 LVUSBSta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79f7000 f79f9000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7527000 f7530000 LVUSBSta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79f3000 f79f5000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7537000 f7540000 LVUSBSta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79ef000 f79f1000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7547000 f7550000 LVUSBSta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79eb000 f79ed000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7557000 f7560000 LVUSBSta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79e7000 f79e9000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7567000 f7570000 LVUSBSta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79e3000 f79e5000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f76c7000 f76d0000 LVUSBSta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
Click to expand...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Windows Explorer Error 8
BSOD 0x050 Dump file..help please 4
Bug Check - Reboot 4
STOP 0XD1 Error on XP SP2 2
BSOD apparently caused by ntkrpamp.exe 3
Driver Conflict 2
Blue Screen 2
dump file any thoughts on this? 8

Top