Guest User

Primary Analysis

a guest
Mar 26th, 2012
87
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.29 KB | None | 0 0
  1. Primary Analysis
  2.  
  3. Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com)
  4. Online Crash Dump Analysis Service
  5. See http://www.osronline.com for more information
  6. Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible
  7. Product: WinNt, suite: TerminalServer SingleUserTS
  8. Built by: 2600.xpsp_sp3_qfe.100427-1650
  9. Machine Name:
  10. Kernel base = 0x804d7000 PsLoadedModuleList = 0x80554040
  11. Debug session time: Mon Mar 26 06:41:58.718 2012 (UTC - 4:00)
  12. System Uptime: 0 days 0:01:17.281
  13. *******************************************************************************
  14. * *
  15. * Bugcheck Analysis *
  16. * *
  17. *******************************************************************************
  18.  
  19. KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
  20. This is a very common bugcheck. Usually the exception address pinpoints
  21. the driver/function that caused the problem. Always note this address
  22. as well as the link date of the driver/image that contains this address.
  23. Some common problems are exception code 0x80000003. This means a hard
  24. coded breakpoint or assertion was hit, but this system was booted
  25. /NODEBUG. This is not supposed to happen as developers should never have
  26. hardcoded breakpoints in retail code, but ...
  27. If this happens, make sure a debugger gets connected, and the
  28. system is booted /DEBUG. This will let us see why this breakpoint is
  29. happening.
  30. Arguments:
  31. Arg1: c000001d, The exception code that was not handled
  32. Arg2: 00000007, The address that the exception occurred at
  33. Arg3: f8544aa4, Trap Frame
  34. Arg4: 00000000
  35.  
  36. Debugging Details:
  37. ------------------
  38.  
  39.  
  40. EXCEPTION_CODE: (NTSTATUS) 0xc000001d - {EXCEPTION} Illegal Instruction An attempt was made to execute an illegal instruction.
  41.  
  42. FAULTING_IP:
  43. +f8
  44. 00000007 ?? ???
  45.  
  46. TRAP_FRAME: f8544aa4 -- (.trap 0xfffffffff8544aa4)
  47. ErrCode = 00000000
  48. eax=00000000 ebx=01220000 ecx=8279dd88 edx=8279dd88 esi=f8544c90 edi=f8544b00
  49. eip=00000007 esp=f8544b18 ebp=f8544b50 iopl=0 nv up ei pl nz na pe nc
  50. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
  51. 00000007 ?? ???
  52. Resetting default scope
  53.  
  54. CUSTOMER_CRASH_COUNT: 4
  55.  
  56. DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
  57.  
  58. BUGCHECK_STR: 0x8E
  59.  
  60. PROCESS_NAME: csrss.exe
  61.  
  62. LAST_CONTROL_TRANSFER: from 01220000 to 00000007
  63.  
  64. FAILED_INSTRUCTION_ADDRESS:
  65. +f8
  66. 00000007 ?? ???
  67.  
  68. STACK_TEXT:
  69. WARNING: Frame IP not in any known module. Following frames may be wrong.
  70. f8544b14 01220000 007cc46e f8544b68 f8544bf0 0x7
  71. f8544b50 8053d668 ffffffff f8544c90 00000000 0x1220000
  72. f8544b50 804fe435 ffffffff f8544c90 00000000 nt!KiFastCallEntry+0xf8
  73. f8544bd8 bf821f26 ffffffff f8544c90 f8544c78 nt!ZwFreeVirtualMemory+0x11
  74. f8544cdc bf874041 000008b4 f8544d18 f8544d2c win32k!xxxResolveDesktop+0x85c
  75. f8544d4c 8053d668 000008b4 0053fea8 00000000 win32k!NtUserResolveDesktop+0xdb
  76. f8544d4c 7c90e514 000008b4 0053fea8 00000000 nt!KiFastCallEntry+0xf8
  77. 0053fe64 00000000 00000000 00000000 00000000 0x7c90e514
  78.  
  79.  
  80. STACK_COMMAND: kb
  81.  
  82. FOLLOWUP_IP:
  83. win32k!xxxResolveDesktop+85c
  84. bf821f26 e9d6fbffff jmp win32k!xxxResolveDesktop+0x85c (bf821b01)
  85.  
  86. SYMBOL_STACK_INDEX: 4
  87.  
  88. SYMBOL_NAME: win32k!xxxResolveDesktop+85c
  89.  
  90. FOLLOWUP_NAME: MachineOwner
  91.  
  92. MODULE_NAME: win32k
  93.  
  94. IMAGE_NAME: win32k.sys
  95.  
  96. DEBUG_FLR_IMAGE_TIMESTAMP: 4cc6d721
  97.  
  98. FAILURE_BUCKET_ID: 0x8E_BAD_IP_win32k!xxxResolveDesktop+85c
  99.  
  100. BUCKET_ID: 0x8E_BAD_IP_win32k!xxxResolveDesktop+85c
  101.  
  102. Followup: MachineOwner
  103. [/code]
  104.  
  105. [code]
  106. Loaded Module List
  107.  
  108. start end module name
  109. 804d7000 806d0100 nt ntkrnlpa.exe
  110. 806d1000 806f1300 hal halaacpi.dll
  111. a8f2e000 a8f58180 kmixer kmixer.sys
  112. a9071000 a90b1e00 HTTP HTTP.sys
  113. a949a000 a94ae480 wdmaud wdmaud.sys
  114. a96b7000 a970e380 srv srv.sys
  115. a989f000 a98caf80 mrxdav mrxdav.sys
  116. a9973000 a9981d80 sysaudio sysaudio.sys
  117. a9a33000 a9a48480 aswMon2 aswMon2.SYS
  118. a9bb1000 a9bd1a00 exFat exFat.SYS
  119. a9bfe000 a9c01900 ndisuio ndisuio.sys
  120. a9d12000 a9d29900 dump_atapi dump_atapi.sys
  121. a9d52000 a9dec000 aswSnx aswSnx.SYS
  122. a9e14000 a9e64680 aswSP aswSP.SYS
  123. a9e65000 a9e8a500 ipnat ipnat.sys
  124. a9e8b000 a9efaa00 mrxsmb mrxsmb.sys
  125. a9efb000 a9f25e80 rdbss rdbss.sys
  126. a9f26000 a9f47d00 afd afd.sys
  127. a9f48000 a9f6fc00 netbt netbt.sys
  128. a9f70000 a9fc8480 tcpip tcpip.sys
  129. a9fc9000 a9fdb600 ipsec ipsec.sys
  130. aa004000 aa006900 Dxapi Dxapi.sys
  131. aa020000 aa023980 kbdhid kbdhid.sys
  132. aa054000 aa05c700 wanarp wanarp.sys
  133. aa0c4000 aa0c6f80 mouhid mouhid.sys
  134. aa0c8000 aa0ca880 hidusb hidusb.sys
  135. aa0ec000 aa10fa80 portcls portcls.sys
  136. aa110000 aa758000 RtkHDAud RtkHDAud.sys
  137. bf000000 bf011600 dxg dxg.sys
  138. bf012000 bf024000 igxprd32 igxprd32.dll
  139. bf024000 bf04e000 igxpgd32 igxpgd32.dll
  140. bf04e000 bf1cbc80 igxpdv32 igxpdv32.DLL
  141. bf1cc000 bf436000 igxpdx32 igxpdx32.DLL
  142. bf800000 bf9c6b00 win32k win32k.sys
  143. f79f8000 f7a55f00 update update.sys
  144. f7a56000 f7a85e80 rdpdr rdpdr.sys
  145. f7a9e000 f7aa0280 rasacd rasacd.sys
  146. f7aa6000 f7aa8400 Fs_Rec Fs_Rec.SYS
  147. f7aae000 f7abee00 psched psched.sys
  148. f7abf000 f7ad5580 ndiswan ndiswan.sys
  149. f7ad6000 f7af8700 ks ks.sys
  150. f7af9000 f7b18d80 Rtnicxp Rtnicxp.sys
  151. f7b19000 f7b53000 b57xp32 b57xp32.sys
  152. f7b53000 f7b7b000 HDAudBus HDAudBus.sys
  153. f7b7b000 f7b9e200 USBPORT USBPORT.SYS
  154. f7b9f000 f7bb2f00 VIDEOPRT VIDEOPRT.SYS
  155. f7be7000 f814fc60 igxpmp32 igxpmp32.sys
  156. f8198000 f81b1b80 Mup Mup.sys
  157. f81b2000 f823e600 Ntfs Ntfs.sys
  158. f823f000 f8255b00 KSecDD KSecDD.sys
  159. f8256000 f8282980 NDIS NDIS.SYS
  160. f8283000 f82a5600 dwprot dwprot.sys
  161. f82a6000 f82b7f00 sr sr.sys
  162. f82b8000 f82d7b00 fltMgr fltMgr.sys
  163. f82d8000 f82ef900 atapi atapi.sys
  164. f82f0000 f8315800 dmio dmio.sys
  165. f8316000 f8334a00 ftdisk ftdisk.sys
  166. f8335000 f8345b80 pci pci.sys
  167. f8346000 f8373f80 ACPI ACPI.sys
  168. f8475000 f847e280 isapnp isapnp.sys
  169. f8485000 f848f580 MountMgr MountMgr.sys
  170. f8495000 f84a1b00 VolSnap VolSnap.sys
  171. f84a5000 f84ade00 disk disk.sys
  172. f84b5000 f84c1180 CLASSPNP CLASSPNP.SYS
  173. f84c5000 f84d0000 Aavmker4 Aavmker4.SYS
  174. f84d5000 f84e4580 rspndr rspndr.sys
  175. f84e5000 f84ee000 HIDCLASS HIDCLASS.SYS
  176. f84f5000 f8504900 Cdfs Cdfs.SYS
  177. f85a5000 f85aef00 intelppm intelppm.sys
  178. f85b5000 f85c4e00 serial serial.sys
  179. f85c5000 f85d4600 cdrom cdrom.sys
  180. f85d5000 f85e3400 redbook redbook.sys
  181. f85e5000 f85f1880 rasl2tp rasl2tp.sys
  182. f85f5000 f85ff200 raspppoe raspppoe.sys
  183. f8605000 f8610d00 raspptp raspptp.sys
  184. f8615000 f861d900 msgpc msgpc.sys
  185. f8625000 f862ef00 termdd termdd.sys
  186. f8645000 f864f000 NDProxy NDProxy.SYS
  187. f8665000 f8673880 usbhub usbhub.sys
  188. f8675000 f8683b00 drmk drmk.sys
  189. f8695000 f869ea80 raddrvv3 raddrvv3.sys
  190. f86b5000 f86c0100 aswTdi aswTdi.SYS
  191. f86c5000 f86cd780 netbios netbios.sys
  192. f86e5000 f86efe00 Fips Fips.SYS
  193. f86f5000 f86fb180 PCIIDEX PCIIDEX.SYS
  194. f86fd000 f8701d00 PartMgr PartMgr.sys
  195. f8705000 f8709a80 TDI TDI.SYS
  196. f873d000 f8743700 USBSTOR USBSTOR.SYS
  197. f876d000 f8772080 usbuhci usbuhci.sys
  198. f8775000 f877c600 usbehci usbehci.sys
  199. f877d000 f877e000 fdc fdc.sys
  200. f878d000 f8791580 ptilink ptilink.sys
  201. f8795000 f8799080 raspti raspti.sys
  202. f879d000 f87a3100 kbdclass kbdclass.sys
  203. f87a5000 f87aab00 mouclass mouclass.sys
  204. f87ad000 f87b2000 flpydisk flpydisk.sys
  205. f87bd000 f87c3180 HIDPARSE HIDPARSE.SYS
  206. f87c5000 f87ca200 vga vga.sys
  207. f87cd000 f87d1a80 Msfs Msfs.SYS
  208. f87d5000 f87dc880 Npfs Npfs.SYS
  209. f87dd000 f87e3a00 aswRdr aswRdr.SYS
  210. f87f5000 f87fcd80 usbccgp usbccgp.sys
  211. f87fd000 f8801500 watchdog watchdog.sys
  212. f8885000 f8888000 BOOTVID BOOTVID.dll
  213. f8899000 f889bf80 aswFsBlk aswFsBlk.SYS
  214. f8921000 f8924d80 serenum serenum.sys
  215. f8929000 f892b780 ndistapi ndistapi.sys
  216. f8941000 f8944c80 mssmbios mssmbios.sys
  217. f8975000 f8976b80 kdcom kdcom.dll
  218. f8977000 f8978100 WMILIB WMILIB.SYS
  219. f8979000 f897a580 intelide intelide.sys
  220. f897b000 f897c700 dmload dmload.sys
  221. f8985000 f8986100 swenum swenum.sys
  222. f8987000 f8988280 USBD USBD.SYS
  223. f898b000 f898c080 Beep Beep.SYS
  224. f898d000 f898e080 mnmdd mnmdd.SYS
  225. f898f000 f8990080 RDPCDD RDPCDD.sys
  226. f89a1000 f89a2100 dump_WMILIB dump_WMILIB.SYS
  227. f8a3d000 f8a3dd00 pciide pciide.sys
  228. f8a7d000 f8a7db80 Null Null.SYS
  229. f8b48000 f8b48d00 dxgthk dxgthk.sys
  230. f8b7d000 f8b7dd00 rminiv3 rminiv3.sys
  231. f8b7e000 f8b7ec00 audstub audstub.sys
  232.  
  233. Unloaded modules:
  234. a944c000 a9477000 kmixer.sys
  235. f8bb5000 f8bb6000 drmkaud.sys
  236. a9657000 a9664000 DMusic.sys
  237. a9ad1000 a9adf000 swmidi.sys
  238. a9477000 a949a000 aec.sys
  239. f89f5000 f89f7000 splitter.sys
  240. a9863000 a9877000 Parport.SYS
  241. f86d5000 f86e0000 imapi.sys
  242. f7aa2000 f7aa6000 kbdhid.sys
  243. f86a5000 f86b2000 i8042prt.SYS
  244. f87b5000 f87ba000 Cdaudio.SYS
  245. f7aaa000 f7aad000 Sfloppy.SYS
Advertisement
Add Comment
Please, Sign In to add comment