IRQL_NOT_LESS_OR_EQUAL, on shutdown only, safemode and regular boot
Dell Dimension XPS Gen5 The computer came in not showing anything on the screen. Replaced the video card with 8400 E-GEFORCE card. Booted up, installed the drivers, shut it down and it blue screened. Started back up, downloaded/installed the newest drivers, shut down, got the error, rebooted, shutdown, got the error, uninstalled the software removed card tried a different one, same problem, tried an old trident pci, same thing. Doesn't matter if it is in safemode or not, everytime on shut down it blue screens. I have tried system restore, sfc /scannow, windows updates, tested the ram. Any ideas?
It's probably the RAM. In about 98% of the cases this specific error occurs its the RAM. In this case it's occuring when windows is shutting down, so the RAM is cleared/flushed. If you have multiple modules, try running with only one and see if it still happens. If it does try the other to see which one is failing.
It could also be a matter of vibrations. The RAM could have vibrated a little out of the slots. Even a millimeter could make a difference. Re-inserting the modules should resolve this. I had the same problem on a server once. All I Had to do was take the modules out, put them back in and press firmly and all was resolved..
It could also be a matter of vibrations. The RAM could have vibrated a little out of the slots. Even a millimeter could make a difference. Re-inserting the modules should resolve this. I had the same problem on a server once. All I Had to do was take the modules out, put them back in and press firmly and all was resolved..
try the following (valid for any bluescreens you might have in the future)
Install Windows Debugging Tools on a workstation with Internet access:
http://msdl.microsoft.com/download/symbols/debuggers/dbg_x86_6.11.1.404.msi
Open Windbg and on file menu symbols path configure the symbols path to the Microsoft public symbol server.
srv*c:\symcache*http://msdl.microsoft.com/download/symbols
Open the Crash dump (usually %SystemRoot%\MEMORY.DMP ) by going to windbg file menu "OPEN CRASH DUMP"
Wait for the KD> prompt (takes a while since is accessing the symbols over the inet) on the bottom then type:
!analyze -v (and press enter)
lmt (them press enter)
Copy and past the result content here.
Install Windows Debugging Tools on a workstation with Internet access:
http://msdl.microsoft.com/download/symbols/debuggers/dbg_x86_6.11.1.404.msi
Open Windbg and on file menu symbols path configure the symbols path to the Microsoft public symbol server.
srv*c:\symcache*http://msdl.microsoft.com/download/symbols
Open the Crash dump (usually %SystemRoot%\MEMORY.DMP ) by going to windbg file menu "OPEN CRASH DUMP"
Wait for the KD> prompt (takes a while since is accessing the symbols over the inet) on the bottom then type:
!analyze -v (and press enter)
lmt (them press enter)
Copy and past the result content here.
Can you boot into safe mode,go into the device manager, and choose the menu option to display hidden devices so you can look for any older video drivers?
In addition to this, go into the BIOS if the computer also has an onboard videocard, and make sure it's not selected.
In addition to this, go into the BIOS if the computer also has an onboard videocard, and make sure it's not selected.
another thing, did the videocards you use have a power supply connection that you forgot to connect?
try and remove/disable parts one at a time and see if any of them will cause the error msg to go away, but memory is an easy check to do first...
The best information for driver problems (which you most likely have) comes from minidump file analysis. If you can't follow asrdias' recommendation to analyze them yourself, post the last 2 mindump files here after nenaming them with a .txt extension. Minidump files are located in C:\windows\minidump folder and have a .dmp extension.
Since the problem occurs in safe mode as well, an intrinsic XP driver is probably at fault. It also could be an AV program -- some load services even in safe mode.
Since the problem occurs in safe mode as well, an intrinsic XP driver is probably at fault. It also could be an AV program -- some load services even in safe mode.
ASKER
Wow. I have some catching up to do. Thanks for everyone's help. I'll try to answer some questions.
1. No onboard video,
2. No power jacks on video cards
3 RAM- I reseated the ram after I cleaned out the inside of the computer. I booted the computer with one stick in bank 0, got the same error, tried the other stick, got the same error, tried a stick from my old memory box, and got the same error. I then used SeaTools to check the hard drive, controllers and memory.
4. I disabled the antivirus, used msconfig and disabled all the startup options.
I will try the debugging thing sometime today. Thanks for your help
1. No onboard video,
2. No power jacks on video cards
3 RAM- I reseated the ram after I cleaned out the inside of the computer. I booted the computer with one stick in bank 0, got the same error, tried the other stick, got the same error, tried a stick from my old memory box, and got the same error. I then used SeaTools to check the hard drive, controllers and memory.
4. I disabled the antivirus, used msconfig and disabled all the startup options.
I will try the debugging thing sometime today. Thanks for your help
ASKER
Okay, I am getting stumped. There doesn't seem to be any files with the extension of .dmp on the computer. I searched the computer, looking in hidden files and everything, for any .dmp files. Any ideas?
I downloaded the windows debugger and installed and got to the point to open the crash dump and couldn't find one. Thanks for your help.
I downloaded the windows debugger and installed and got to the point to open the crash dump and couldn't find one. Thanks for your help.
Ensure that small dump otion is selected in System Settings. Here's more info.
http://support.microsoft.com/kb/315263
http://support.microsoft.com/kb/315263
ASKER
Thanks willcomp. I have made sure there are no hidden video devices or anything exclaimed or disabled. I had started a defrag and scandisk so it will be a bit before I can setup the minidump. No wonder people just wipe it off and start fresh. Trouble is nobody ever has their software.
ASKER
Okay, I am stumped again. I confirmed the settings for the small dump file and checked to make sure it was directed to the c:\windows\minidump folder and the folder does exist on the computer. I have shut it down several times getting the same blue screen each time but it doesn't drop a file in the minidump folder. I have also searched the computer for *.dmp files but none exist that were made within the last year. I also checked the system date\time and it is correct.
Apparently, minidumps are not being created. Probably because error is occurring during shutdown and file cannot be created.
Copy down the exact blue screen error message and post. An alternative is to take a picture of the BSOD and attach to a comment.
Copy down the exact blue screen error message and post. An alternative is to take a picture of the BSOD and attach to a comment.
ASKER
Thanks willcomp, here it is.
A problem has been detected and windows has been shut down to prevent damage to your computer.
IRQL_NOT_LESS_OR_EQUAL
If this is the first time you've seen this stop error screen, restart your computer. If this screen appears again follow these steps:
Check to make sure any new hardware or software is properly installed. If this is a new installation, ask your hardware or software manufacturer for any windows updates you might need.
If problems continue, disable or remove any newly installed hardware or software. Disable bios memory options such as caching or shadowing. If you need to use safemode to remove or disable components, restart your computer, press F8 to select advanced startup options, and then select Safe Mode.
Technical Information:
***STOP: OXOOOOOOOA (OXOOOOO2F4, OXOOOOOOO2, OXOOOOOOO1, OX806E6A16)
A problem has been detected and windows has been shut down to prevent damage to your computer.
IRQL_NOT_LESS_OR_EQUAL
If this is the first time you've seen this stop error screen, restart your computer. If this screen appears again follow these steps:
Check to make sure any new hardware or software is properly installed. If this is a new installation, ask your hardware or software manufacturer for any windows updates you might need.
If problems continue, disable or remove any newly installed hardware or software. Disable bios memory options such as caching or shadowing. If you need to use safemode to remove or disable components, restart your computer, press F8 to select advanced startup options, and then select Safe Mode.
Technical Information:
***STOP: OXOOOOOOOA (OXOOOOO2F4, OXOOOOOOO2, OXOOOOOOO1, OX806E6A16)
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I have already tried the sfc /scannow. I will try the driver verifier and if that doesn't do it, I will remove the antivirus software. Thanks guys I'll post again in a bit.
Look at this Post:
https://www.experts-exchange.com/questions/23853941/Blue-Screen-on-restart-or-shut-down.html
Very similar bugcheck:
This time when I restarted my machine I got the Blue Sreen message with the error statemant
"SQL_NOT_LESS_OR_EGUAL"
STOP 0X0000000A (0X000002F4,0X00000002,0X0
We might be solving 2 questions at the same time... :)
https://www.experts-exchange.com/questions/23853941/Blue-Screen-on-restart-or-shut-down.html
Very similar bugcheck:
This time when I restarted my machine I got the Blue Sreen message with the error statemant
"SQL_NOT_LESS_OR_EGUAL"
STOP 0X0000000A (0X000002F4,0X00000002,0X0
We might be solving 2 questions at the same time... :)
@asrdias -- I believe kansashunter is getting a bit better support that the member did on that question ;-)
ASKER
Okay. I checked the paging file, it was set to c:, at 2046 and 4096. I cleared it and custom set it to to 2046 and 3096, restarted and shut down, same error. Changed it to have the computer set it shut it down restarted shut down, same error. Ran the verifier program (which is a really neat program I didn't know existed) shut it down, same error without any file names, restarted shutdown, same exact error no driver/file name listed. Now, I'll try to uninstall av and see.
ASKER
Well, something has changed. Explorer hangs now trying to load the individual user/desktop. It started after changing the page file settings and the verifier. Will go into safemode and undo it and see what happens.
Do me a favor:
Get the Livekd:
http://technet.microsoft.com/en-us/sysinternals/bb897415.aspx
Extract it and put it on the sabe folder where windbg is ot the system that crashes.
Run the likekd -w (Ithink...) and acept the defaults which will be Microsoft public windows symbols and the local cache path.
When you have the KD prompt type:
lmt
followed by enter
Post the result list here...
The reason I ask this is because we know the code crashing the box is at the address 0X806E6A16 which looks like a kernel mode address. If the driver loads up into the same address everytime looking at the loaded module list (lmt) we might mach the address to the driver...
Get the Livekd:
http://technet.microsoft.com/en-us/sysinternals/bb897415.aspx
Extract it and put it on the sabe folder where windbg is ot the system that crashes.
Run the likekd -w (Ithink...) and acept the defaults which will be Microsoft public windows symbols and the local cache path.
When you have the KD prompt type:
lmt
followed by enter
Post the result list here...
The reason I ask this is because we know the code crashing the box is at the address 0X806E6A16 which looks like a kernel mode address. If the driver loads up into the same address everytime looking at the loaded module list (lmt) we might mach the address to the driver...
The hang is not at all unexpected because the driver verifier takes loads of resources while veryfing all the drivers. As no results were produced just delete the settings created in the driver verifier.
One other option, if needed, is a repair install of XP. Let's see what happens with driver identification first.
ASKER
Okay, I feel like I did last winter bird hunting and walked up on my dog pointing, only to flush a skunk. We didn't smell too good! It didn't help when the dog grabbed the skunk by the body and started shaking it like a hot can of beer.
I downloaded, extracted, and ran (or tried to) the livekd program. I might have made the mistake of trying to run it in safemode, cause when I ran it from the run command it couldn't find it so I ran it manually. I restarted the computer in regular mode and I will try it again.
I downloaded, extracted, and ran (or tried to) the livekd program. I might have made the mistake of trying to run it in safemode, cause when I ran it from the run command it couldn't find it so I ran it manually. I restarted the computer in regular mode and I will try it again.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\system32\livek
Kernel Complete Dump File: Full address space is available
Comment: 'LiveKD live system view'
Symbol search path is: srv*c:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_gdr.090206-1
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Sat Feb 12 21:34:57.897 17420 (GMT-5)
System Uptime: 0 days 0:17:04.710
WARNING: Process directory table base 0AE20A40 doesn't match CR3 0AE20A20
WARNING: Process directory table base 0AE20A40 doesn't match CR3 0AE20A20
Loading Kernel Symbols
..........................
..........................
..........................
Loading User Symbols
...........
Loading unloaded module list
.................
*** ERROR: Module load completed but symbols could not be loaded for LiveKdD.SYS
**************************
* *
* Bugcheck Analysis *
* *
**************************
Use !analyze -v to get detailed debugging information.
BugCheck 0, {0, 0, 0, 0}
**************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: kernel32!pNlsUserInfo ***
*** ***
**************************
**************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: kernel32!pNlsUserInfo ***
*** ***
**************************
Probably caused by : LiveKdD.SYS ( LiveKdD+12d1 )
Followup: MachineOwner
---------
0: kd> lmt
start end module name
01000000 01062000 kd Wed Feb 25 19:55:11 2009 (49A5F67F)
01d00000 01d48000 symsrv Wed Feb 25 19:55:50 2009 (49A5F6A6)
02000000 02386000 dbgeng Wed Feb 25 19:55:43 2009 (49A5F69F)
03000000 03121000 dbghelp Wed Feb 25 19:55:30 2009 (49A5F692)
77c00000 77c08000 VERSION Sun Apr 13 19:11:09 2008 (4802A11D)
77c10000 77c68000 msvcrt Sun Apr 13 19:12:56 2008 (4802A188)
77dd0000 77e6b000 ADVAPI32 Mon Feb 09 06:10:48 2009 (49901D48)
77e70000 77f02000 RPCRT4 Wed Apr 15 09:51:25 2009 (49E5F46D)
77fe0000 77ff1000 Secur32 Tue Feb 03 13:59:07 2009 (4988A20B)
7c800000 7c8f6000 kernel32 Sat Mar 21 09:06:58 2009 (49C4F482)
7c900000 7c9b2000 ntdll Mon Feb 09 06:10:48 2009 (49901D48)
804d7000 806e4000 nt Fri Feb 06 04:32:51 2009 (498C11D3)
806e4000 80704d00 hal Sun Apr 13 13:31:27 2008 (4802517F)
a2302000 a2316480 wdmaud Sun Apr 13 14:17:18 2008 (48025C3E)
a2557000 a2565d80 sysaudio Sun Apr 13 14:15:55 2008 (48025BEB)
a25e7000 a25ef420 mfesmfk Fri Mar 13 11:06:50 2009 (49BA849A)
a26ff000 a2710dc0 mfeavfk Fri Mar 13 11:05:12 2009 (49BA8438)
a2cd7000 a2ce1000 secdrv Wed Sep 13 08:18:32 2006 (45080528)
a2f07000 a2f58880 srv Thu Dec 11 04:57:07 2008 (4940F203)
a2fa9000 a2fe9a80 HTTP Sun Apr 13 13:53:48 2008 (480256BC)
a3092000 a30b5180 Fastfat Sun Apr 13 14:14:28 2008 (48025B94)
a30b6000 a315d400 hardlock Wed Jul 27 08:08:29 2005 (42E7874D)
a31ae000 a31c2c00 SENTINEL Tue Sep 19 02:22:33 2006 (450F9AB9)
a31c3000 a31ef180 mrxdav Sun Apr 13 13:32:42 2008 (480251CA)
a3240000 a32588c0 tfsnudfa Mon Dec 06 20:05:15 2004 (41B50FDB)
a3259000 a3271160 tfsnudf Mon Dec 06 20:04:33 2004 (41B50FB1)
a3272000 a3287200 tfsnifs Mon Dec 06 20:04:27 2004 (41B50FAB)
a3688000 a375ca80 dump_iastor Mon Apr 25 10:28:12 2005 (426D0C8C)
a3c24000 a3c2a4e0 tfsnboio Mon Dec 06 20:04:34 2004 (41B50FB2)
a449c000 a44ab900 Cdfs Sun Apr 13 14:14:21 2008 (48025B8D)
a4755000 a47568a0 tfsnpool Mon Dec 06 20:04:29 2004 (41B50FAD)
a478e000 a4790900 Dxapi Fri Aug 17 15:53:19 2001 (3B7D843F)
a482c000 a4830500 watchdog Sun Apr 13 13:44:59 2008 (480254AB)
a63c4000 a63c5fe0 LiveKdD Wed Jul 20 15:19:44 2005 (42DEB1E0)
ac297000 ac29ab40 tfsnopio Mon Dec 06 20:04:51 2004 (41B50FC3)
ac52a000 ac5327e0 tfsncofs Mon Dec 06 20:04:46 2004 (41B50FBE)
ac53a000 ac543560 drvnddm Tue Nov 23 23:47:25 2004 (41A4206D)
ac56a000 ac56afe0 tfsndrct Mon Dec 06 20:04:50 2004 (41B50FC2)
ac56b000 ac56b880 tfsndres Mon Dec 06 20:05:20 2004 (41B50FE0)
b4d62000 b4d65900 ndisuio Sun Apr 13 13:55:57 2008 (4802573D)
b55f4000 b56269c0 mfehidk Fri Mar 13 11:03:30 2009 (49BA83D2)
b5627000 b5696280 mrxsmb Fri Oct 24 06:21:07 2008 (4901AFA3)
b5697000 b56c1e80 rdbss Sun Apr 13 14:28:38 2008 (48025EE6)
b56c2000 b56e3d00 afd Thu Aug 14 05:04:35 2008 (48A40333)
b56e4000 b570bc00 netbt Sun Apr 13 14:20:59 2008 (48025D1B)
b570c000 b5733000 Mpfp Mon Jun 02 15:55:40 2008 (48445E4C)
b5733000 b5758500 ipnat Sun Apr 13 13:57:10 2008 (48025786)
b5759000 b57b1480 tcpip Fri Jun 20 06:51:09 2008 (485B99AD)
b57b2000 b57c4600 ipsec Sun Apr 13 14:19:42 2008 (48025CCE)
b57d7000 b58099c0 UdfReadr Mon Jan 29 17:57:02 2001 (3A76034E)
b5a2f000 b5a35f80 mfebopk Fri Mar 13 11:05:39 2009 (49BA8453)
b5cee000 b5cf9c00 fssfltr_tdi Fri Feb 06 19:41:45 2009 (498CE6D9)
b5eed000 b5f8a7e0 ctac32k Mon Jul 12 21:09:31 2004 (40F3445B)
b5f8b000 b5faabe0 ctsfm2k Mon Jul 12 21:12:34 2004 (40F34512)
b5fab000 b5fcc660 emupia2k Mon Jul 12 21:13:11 2004 (40F34537)
b5fcd000 b60a9d20 ha10kx2k Thu Aug 12 02:40:45 2004 (411B1EFD)
b60aa000 b60ce2c0 hap16v2k Mon Jul 12 21:15:47 2004 (40F345D3)
b60e3000 b60e5f00 ws2ifsl Fri Aug 17 15:55:58 2001 (3B7D84DE)
b6316000 b6391000 Wdf01000 Thu Nov 02 03:54:18 2006 (4549B23A)
b644f000 b64acf00 update Sun Apr 13 13:39:46 2008 (48025372)
b64c0000 b64efe80 rdpdr Sun Apr 13 13:32:50 2008 (480251D2)
b6552000 b6562e00 psched Sun Apr 13 13:56:36 2008 (48025764)
b663f000 b6655580 ndiswan Sun Apr 13 14:20:41 2008 (48025D09)
b6b8a000 b6b98880 usbhub Sun Apr 13 13:45:36 2008 (480254D0)
b6cbe000 b6cd1f00 VIDEOPRT Sun Apr 13 13:44:39 2008 (48025497)
b6cd2000 b6cf3d20 tgiulnt5 Fri Mar 23 06:03:15 2001 (3ABB2D73)
b6d13000 b6d3e8e0 ctoss2k Mon Jul 12 21:11:26 2004 (40F344CE)
b6d3f000 b6d62a80 portcls Sun Apr 13 14:19:40 2008 (48025CCC)
b6d75000 b6dce620 ctaud2k Thu Aug 05 21:43:23 2004 (4112F04B)
b6e49000 b6eddb60 IntelC52 Fri Mar 05 13:15:31 2004 (4048D1D3)
b6f54000 b707a6a0 IntelC51 Fri Mar 05 13:14:39 2004 (4048D19F)
b7419000 b743b700 ks Sun Apr 13 14:16:34 2008 (48025C12)
b750e000 b7531200 USBPORT Sun Apr 13 13:45:34 2008 (480254CE)
b758d000 b75ad600 b57xp32 Thu Mar 17 19:30:08 2005 (423A2110)
b75ae000 b75b6780 netbios Sun Apr 13 13:56:01 2008 (48025741)
b75be000 b75ccd80 arp1394 Sun Apr 13 13:51:22 2008 (4802562A)
b75de000 b75e6080 ipfltdrv Fri Aug 17 15:55:07 2001 (3B7D84AB)
b75ee000 b75f6700 wanarp Sun Apr 13 13:57:20 2008 (48025790)
b760e000 b761c2e0 IntelC53 Tue Jun 15 13:52:38 2004 (40CF4576)
b76e2000 b76e4780 ndistapi Sun Apr 13 13:57:27 2008 (48025797)
b7c56000 b7c58980 gameenum Sun Apr 13 13:45:29 2008 (480254C9)
b7cba000 b7cbc280 rasacd Fri Aug 17 15:55:39 2001 (3B7D84CB)
b7cc6000 b7cc8180 i2omgmt Sun Apr 13 13:41:22 2008 (480253D2)
b7d03000 b7d1cb80 Mup Sun Apr 13 14:17:05 2008 (48025C31)
b7d1d000 b7d49980 NDIS Sun Apr 13 14:20:35 2008 (48025D03)
b7d4a000 b7dd6600 Ntfs Sun Apr 13 14:15:49 2008 (48025BE5)
b7dd7000 b7de9f00 WudfPf Thu Sep 28 20:55:43 2006 (451C7D1F)
b7dea000 b7e00880 KSecDD Sun Apr 13 13:31:40 2008 (4802518C)
b7e01000 b7e15d60 drvmcdb Wed Dec 01 11:32:07 2004 (41AE0017)
b7e16000 b7e35b00 fltmgr Sun Apr 13 13:32:58 2008 (480251DA)
b7e36000 b7f0aa80 iastor Mon Apr 25 10:28:12 2005 (426D0C8C)
b7f0b000 b7f22900 atapi Sun Apr 13 13:40:29 2008 (4802539D)
b7f23000 b7f48700 dmio Sun Apr 13 13:44:45 2008 (4802549D)
b7f49000 b7f67880 ftdisk Fri Aug 17 15:52:41 2001 (3B7D8419)
b7f68000 b7f78a80 pci Sun Apr 13 13:36:43 2008 (480252BB)
b7f79000 b7fa6d80 ACPI Sun Apr 13 13:36:33 2008 (480252B1)
b80a8000 b80b1180 isapnp Sun Apr 13 13:36:40 2008 (480252B8)
b80b8000 b80c2580 MountMgr Sun Apr 13 13:39:45 2008 (48025371)
b80c8000 b80d4c80 VolSnap Sun Apr 13 13:41:00 2008 (480253BC)
b80d8000 b80e0e00 disk Sun Apr 13 13:40:46 2008 (480253AE)
b80e8000 b80f4180 CLASSPNP Sun Apr 13 14:16:21 2008 (48025C05)
b80f8000 b8100b80 PxHelp20 Wed Oct 18 12:33:53 2006 (45366581)
b8108000 b8117100 ohci1394 Sun Apr 13 13:46:18 2008 (480254FA)
b8118000 b8125080 1394BUS Sun Apr 13 13:46:18 2008 (480254FA)
b8138000 b8147180 nic1394 Sun Apr 13 13:51:22 2008 (4802562A)
b8148000 b8153a00 Haspnt Fri Nov 02 09:31:06 2001 (3BE2AE2A)
b8178000 b8180c00 AFS2K Thu Oct 07 20:16:03 2004 (4165EA53)
b8188000 b8197600 cdrom Sun Apr 13 13:40:45 2008 (480253AD)
b8198000 b81a6100 redbook Sun Apr 13 13:40:27 2008 (4802539B)
b81a8000 b81b2480 imapi Sun Apr 13 13:40:57 2008 (480253B9)
b81b8000 b81c4880 rasl2tp Sun Apr 13 14:19:43 2008 (48025CCF)
b81d8000 b81e2200 raspppoe Sun Apr 13 13:57:31 2008 (4802579B)
b81e8000 b81f3d00 raspptp Sun Apr 13 14:19:47 2008 (48025CD3)
b8208000 b8210900 msgpc Sun Apr 13 13:56:32 2008 (48025760)
b8218000 b8221f00 termdd Sun Apr 13 13:38:36 2008 (4802532C)
b8228000 b8231f80 zumbus Thu Nov 29 09:19:53 2007 (474ED899)
b8238000 b8245000 WDFLDR Thu Nov 02 03:54:05 2006 (4549B22D)
b8268000 b8271e80 NDProxy Sun Apr 13 13:57:28 2008 (48025798)
b82a8000 b82b0e00 intelppm Sun Apr 13 13:31:31 2008 (48025183)
b82c8000 b82d2e00 Fips Sun Apr 13 13:33:27 2008 (480251F7)
b82e8000 b82f6b00 drmk Sun Apr 13 13:45:12 2008 (480254B8)
b8318000 b8324d00 i8042prt Sun Apr 13 14:17:59 2008 (48025C67)
b8328000 b832e180 PCIIDEX Sun Apr 13 13:40:29 2008 (4802539D)
b8330000 b8334d00 PartMgr Sun Apr 13 13:40:48 2008 (480253B0)
b8350000 b8355020 wanatw4 Tue Jul 16 10:23:14 2002 (3D343A62)
b8368000 b836e000 kbdclass Sun Apr 13 13:39:46 2008 (48025372)
b8380000 b8385080 usbuhci Sun Apr 13 13:45:34 2008 (480254CE)
b8390000 b8394300 GEARAspiWDM Sun Jan 11 12:59:58 2009 (496A41AE)
b83a8000 b83ac080 raspti Fri Aug 17 15:55:32 2001 (3B7D84C4)
b83b0000 b83b4300 omci Mon Nov 04 17:05:02 2002 (3DC6FD1E)
b83b8000 b83bf600 usbehci Sun Apr 13 13:45:34 2008 (480254CE)
b83c0000 b83c7880 Npfs Sun Apr 13 13:32:38 2008 (480251C6)
b83d8000 b83dd000 flpydisk Sun Apr 13 13:40:24 2008 (48025398)
b83e8000 b83ed200 vga Sun Apr 13 13:44:40 2008 (48025498)
b8410000 b8416700 USBSTOR Sun Apr 13 13:45:37 2008 (480254D1)
b8418000 b841dbe0 mohfilt Fri Mar 05 13:13:37 2004 (4048D161)
b8420000 b8424a80 Msfs Sun Apr 13 13:32:38 2008 (480251C6)
b8438000 b843f580 Modem Sun Apr 13 14:00:18 2008 (48025842)
b8448000 b844ca80 TDI Sun Apr 13 14:00:04 2008 (48025834)
b8458000 b845eb00 fdc Sun Apr 13 13:40:25 2008 (48025399)
b8478000 b847c580 ptilink Fri Aug 17 15:49:53 2001 (3B7D8371)
b8480000 b8485a00 mouclass Sun Apr 13 13:39:47 2008 (48025373)
b84a0000 b84a5bc0 ssrtln Wed Jul 14 13:28:48 2004 (40F57B60)
b84b0000 b84b6180 HIDPARSE Sun Apr 13 13:45:22 2008 (480254C2)
b84b8000 b84bb000 BOOTVID Fri Aug 17 15:49:09 2001 (3B7D8345)
b8570000 b8573f00 MODEMCSA Fri Aug 17 15:57:37 2001 (3B7D8541)
b8574000 b8577c80 mssmbios Sun Apr 13 13:36:45 2008 (480252BD)
b85a8000 b85a9b80 kdcom Fri Aug 17 15:49:10 2001 (3B7D8346)
b85aa000 b85ab100 WMILIB Fri Aug 17 16:07:23 2001 (3B7D878B)
b85ac000 b85ad700 dmload Fri Aug 17 15:58:15 2001 (3B7D8567)
b85b8000 b85b9d40 ASCTRM Mon Feb 05 11:50:30 2001 (3A7EE7E6)
b85e2000 b85e36c0 ctprxy2k Mon Jul 12 21:11:55 2004 (40F344EB)
b85ec000 b85ed5c0 sscdbhk5 Wed Jul 14 13:29:02 2004 (40F57B6E)
b85f4000 b85f5100 swenum Sun Apr 13 13:39:52 2008 (48025378)
b860a000 b860b280 USBD Fri Aug 17 16:02:58 2001 (3B7D8682)
b864a000 b864bf00 Fs_Rec Fri Aug 17 15:49:37 2001 (3B7D8361)
b864c000 b864d080 Beep Fri Aug 17 15:47:33 2001 (3B7D82E5)
b864e000 b864f080 mnmdd Fri Aug 17 15:57:28 2001 (3B7D8538)
b8650000 b8651080 RDPCDD Fri Aug 17 15:46:56 2001 (3B7D82C0)
b8670000 b8670d00 pciide Fri Aug 17 15:51:49 2001 (3B7D83E5)
b86db000 b86dbc00 audstub Fri Aug 17 15:59:40 2001 (3B7D85BC)
b874f000 b874fb80 Null Fri Aug 17 15:47:39 2001 (3B7D82EB)
b8776000 b8776d00 dxgthk Fri Aug 17 15:53:12 2001 (3B7D8438)
bd000000 bd011600 dxg Sun Apr 13 13:38:27 2008 (48025323)
bf800000 bf9c2f80 win32k Fri Apr 17 07:26:26 2009 (49E87572)
bff40000 bff53e00 tgiul50 Fri Aug 17 16:56:03 2001 (3B7D92F3)
bffa0000 bffe5c00 ATMFD Sun Apr 13 19:09:55 2008 (4802A0D3)
Unloaded modules:
a22b4000 a22df000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b8684000 b8685000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a246f000 a247c000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a22df000 a2302000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a2327000 a2335000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b8648000 b864a000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac56d000 ac56e000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a2bb7000 a2bc6000 sysaudio.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a2711000 a273c000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a27cf000 a27dc000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a27ef000 a27fd000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a273c000 a275f000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b8610000 b8612000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b82b8000 b82c8000 serial.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b7cbe000 b7cc2000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b83f8000 b83fd000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b8590000 b8593000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
0: kd>
Loading Dump File [C:\WINDOWS\system32\livek
Kernel Complete Dump File: Full address space is available
Comment: 'LiveKD live system view'
Symbol search path is: srv*c:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_gdr.090206-1
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Sat Feb 12 21:34:57.897 17420 (GMT-5)
System Uptime: 0 days 0:17:04.710
WARNING: Process directory table base 0AE20A40 doesn't match CR3 0AE20A20
WARNING: Process directory table base 0AE20A40 doesn't match CR3 0AE20A20
Loading Kernel Symbols
..........................
..........................
..........................
Loading User Symbols
...........
Loading unloaded module list
.................
*** ERROR: Module load completed but symbols could not be loaded for LiveKdD.SYS
**************************
* *
* Bugcheck Analysis *
* *
**************************
Use !analyze -v to get detailed debugging information.
BugCheck 0, {0, 0, 0, 0}
**************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: kernel32!pNlsUserInfo ***
*** ***
**************************
**************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: kernel32!pNlsUserInfo ***
*** ***
**************************
Probably caused by : LiveKdD.SYS ( LiveKdD+12d1 )
Followup: MachineOwner
---------
0: kd> lmt
start end module name
01000000 01062000 kd Wed Feb 25 19:55:11 2009 (49A5F67F)
01d00000 01d48000 symsrv Wed Feb 25 19:55:50 2009 (49A5F6A6)
02000000 02386000 dbgeng Wed Feb 25 19:55:43 2009 (49A5F69F)
03000000 03121000 dbghelp Wed Feb 25 19:55:30 2009 (49A5F692)
77c00000 77c08000 VERSION Sun Apr 13 19:11:09 2008 (4802A11D)
77c10000 77c68000 msvcrt Sun Apr 13 19:12:56 2008 (4802A188)
77dd0000 77e6b000 ADVAPI32 Mon Feb 09 06:10:48 2009 (49901D48)
77e70000 77f02000 RPCRT4 Wed Apr 15 09:51:25 2009 (49E5F46D)
77fe0000 77ff1000 Secur32 Tue Feb 03 13:59:07 2009 (4988A20B)
7c800000 7c8f6000 kernel32 Sat Mar 21 09:06:58 2009 (49C4F482)
7c900000 7c9b2000 ntdll Mon Feb 09 06:10:48 2009 (49901D48)
804d7000 806e4000 nt Fri Feb 06 04:32:51 2009 (498C11D3)
806e4000 80704d00 hal Sun Apr 13 13:31:27 2008 (4802517F)
a2302000 a2316480 wdmaud Sun Apr 13 14:17:18 2008 (48025C3E)
a2557000 a2565d80 sysaudio Sun Apr 13 14:15:55 2008 (48025BEB)
a25e7000 a25ef420 mfesmfk Fri Mar 13 11:06:50 2009 (49BA849A)
a26ff000 a2710dc0 mfeavfk Fri Mar 13 11:05:12 2009 (49BA8438)
a2cd7000 a2ce1000 secdrv Wed Sep 13 08:18:32 2006 (45080528)
a2f07000 a2f58880 srv Thu Dec 11 04:57:07 2008 (4940F203)
a2fa9000 a2fe9a80 HTTP Sun Apr 13 13:53:48 2008 (480256BC)
a3092000 a30b5180 Fastfat Sun Apr 13 14:14:28 2008 (48025B94)
a30b6000 a315d400 hardlock Wed Jul 27 08:08:29 2005 (42E7874D)
a31ae000 a31c2c00 SENTINEL Tue Sep 19 02:22:33 2006 (450F9AB9)
a31c3000 a31ef180 mrxdav Sun Apr 13 13:32:42 2008 (480251CA)
a3240000 a32588c0 tfsnudfa Mon Dec 06 20:05:15 2004 (41B50FDB)
a3259000 a3271160 tfsnudf Mon Dec 06 20:04:33 2004 (41B50FB1)
a3272000 a3287200 tfsnifs Mon Dec 06 20:04:27 2004 (41B50FAB)
a3688000 a375ca80 dump_iastor Mon Apr 25 10:28:12 2005 (426D0C8C)
a3c24000 a3c2a4e0 tfsnboio Mon Dec 06 20:04:34 2004 (41B50FB2)
a449c000 a44ab900 Cdfs Sun Apr 13 14:14:21 2008 (48025B8D)
a4755000 a47568a0 tfsnpool Mon Dec 06 20:04:29 2004 (41B50FAD)
a478e000 a4790900 Dxapi Fri Aug 17 15:53:19 2001 (3B7D843F)
a482c000 a4830500 watchdog Sun Apr 13 13:44:59 2008 (480254AB)
a63c4000 a63c5fe0 LiveKdD Wed Jul 20 15:19:44 2005 (42DEB1E0)
ac297000 ac29ab40 tfsnopio Mon Dec 06 20:04:51 2004 (41B50FC3)
ac52a000 ac5327e0 tfsncofs Mon Dec 06 20:04:46 2004 (41B50FBE)
ac53a000 ac543560 drvnddm Tue Nov 23 23:47:25 2004 (41A4206D)
ac56a000 ac56afe0 tfsndrct Mon Dec 06 20:04:50 2004 (41B50FC2)
ac56b000 ac56b880 tfsndres Mon Dec 06 20:05:20 2004 (41B50FE0)
b4d62000 b4d65900 ndisuio Sun Apr 13 13:55:57 2008 (4802573D)
b55f4000 b56269c0 mfehidk Fri Mar 13 11:03:30 2009 (49BA83D2)
b5627000 b5696280 mrxsmb Fri Oct 24 06:21:07 2008 (4901AFA3)
b5697000 b56c1e80 rdbss Sun Apr 13 14:28:38 2008 (48025EE6)
b56c2000 b56e3d00 afd Thu Aug 14 05:04:35 2008 (48A40333)
b56e4000 b570bc00 netbt Sun Apr 13 14:20:59 2008 (48025D1B)
b570c000 b5733000 Mpfp Mon Jun 02 15:55:40 2008 (48445E4C)
b5733000 b5758500 ipnat Sun Apr 13 13:57:10 2008 (48025786)
b5759000 b57b1480 tcpip Fri Jun 20 06:51:09 2008 (485B99AD)
b57b2000 b57c4600 ipsec Sun Apr 13 14:19:42 2008 (48025CCE)
b57d7000 b58099c0 UdfReadr Mon Jan 29 17:57:02 2001 (3A76034E)
b5a2f000 b5a35f80 mfebopk Fri Mar 13 11:05:39 2009 (49BA8453)
b5cee000 b5cf9c00 fssfltr_tdi Fri Feb 06 19:41:45 2009 (498CE6D9)
b5eed000 b5f8a7e0 ctac32k Mon Jul 12 21:09:31 2004 (40F3445B)
b5f8b000 b5faabe0 ctsfm2k Mon Jul 12 21:12:34 2004 (40F34512)
b5fab000 b5fcc660 emupia2k Mon Jul 12 21:13:11 2004 (40F34537)
b5fcd000 b60a9d20 ha10kx2k Thu Aug 12 02:40:45 2004 (411B1EFD)
b60aa000 b60ce2c0 hap16v2k Mon Jul 12 21:15:47 2004 (40F345D3)
b60e3000 b60e5f00 ws2ifsl Fri Aug 17 15:55:58 2001 (3B7D84DE)
b6316000 b6391000 Wdf01000 Thu Nov 02 03:54:18 2006 (4549B23A)
b644f000 b64acf00 update Sun Apr 13 13:39:46 2008 (48025372)
b64c0000 b64efe80 rdpdr Sun Apr 13 13:32:50 2008 (480251D2)
b6552000 b6562e00 psched Sun Apr 13 13:56:36 2008 (48025764)
b663f000 b6655580 ndiswan Sun Apr 13 14:20:41 2008 (48025D09)
b6b8a000 b6b98880 usbhub Sun Apr 13 13:45:36 2008 (480254D0)
b6cbe000 b6cd1f00 VIDEOPRT Sun Apr 13 13:44:39 2008 (48025497)
b6cd2000 b6cf3d20 tgiulnt5 Fri Mar 23 06:03:15 2001 (3ABB2D73)
b6d13000 b6d3e8e0 ctoss2k Mon Jul 12 21:11:26 2004 (40F344CE)
b6d3f000 b6d62a80 portcls Sun Apr 13 14:19:40 2008 (48025CCC)
b6d75000 b6dce620 ctaud2k Thu Aug 05 21:43:23 2004 (4112F04B)
b6e49000 b6eddb60 IntelC52 Fri Mar 05 13:15:31 2004 (4048D1D3)
b6f54000 b707a6a0 IntelC51 Fri Mar 05 13:14:39 2004 (4048D19F)
b7419000 b743b700 ks Sun Apr 13 14:16:34 2008 (48025C12)
b750e000 b7531200 USBPORT Sun Apr 13 13:45:34 2008 (480254CE)
b758d000 b75ad600 b57xp32 Thu Mar 17 19:30:08 2005 (423A2110)
b75ae000 b75b6780 netbios Sun Apr 13 13:56:01 2008 (48025741)
b75be000 b75ccd80 arp1394 Sun Apr 13 13:51:22 2008 (4802562A)
b75de000 b75e6080 ipfltdrv Fri Aug 17 15:55:07 2001 (3B7D84AB)
b75ee000 b75f6700 wanarp Sun Apr 13 13:57:20 2008 (48025790)
b760e000 b761c2e0 IntelC53 Tue Jun 15 13:52:38 2004 (40CF4576)
b76e2000 b76e4780 ndistapi Sun Apr 13 13:57:27 2008 (48025797)
b7c56000 b7c58980 gameenum Sun Apr 13 13:45:29 2008 (480254C9)
b7cba000 b7cbc280 rasacd Fri Aug 17 15:55:39 2001 (3B7D84CB)
b7cc6000 b7cc8180 i2omgmt Sun Apr 13 13:41:22 2008 (480253D2)
b7d03000 b7d1cb80 Mup Sun Apr 13 14:17:05 2008 (48025C31)
b7d1d000 b7d49980 NDIS Sun Apr 13 14:20:35 2008 (48025D03)
b7d4a000 b7dd6600 Ntfs Sun Apr 13 14:15:49 2008 (48025BE5)
b7dd7000 b7de9f00 WudfPf Thu Sep 28 20:55:43 2006 (451C7D1F)
b7dea000 b7e00880 KSecDD Sun Apr 13 13:31:40 2008 (4802518C)
b7e01000 b7e15d60 drvmcdb Wed Dec 01 11:32:07 2004 (41AE0017)
b7e16000 b7e35b00 fltmgr Sun Apr 13 13:32:58 2008 (480251DA)
b7e36000 b7f0aa80 iastor Mon Apr 25 10:28:12 2005 (426D0C8C)
b7f0b000 b7f22900 atapi Sun Apr 13 13:40:29 2008 (4802539D)
b7f23000 b7f48700 dmio Sun Apr 13 13:44:45 2008 (4802549D)
b7f49000 b7f67880 ftdisk Fri Aug 17 15:52:41 2001 (3B7D8419)
b7f68000 b7f78a80 pci Sun Apr 13 13:36:43 2008 (480252BB)
b7f79000 b7fa6d80 ACPI Sun Apr 13 13:36:33 2008 (480252B1)
b80a8000 b80b1180 isapnp Sun Apr 13 13:36:40 2008 (480252B8)
b80b8000 b80c2580 MountMgr Sun Apr 13 13:39:45 2008 (48025371)
b80c8000 b80d4c80 VolSnap Sun Apr 13 13:41:00 2008 (480253BC)
b80d8000 b80e0e00 disk Sun Apr 13 13:40:46 2008 (480253AE)
b80e8000 b80f4180 CLASSPNP Sun Apr 13 14:16:21 2008 (48025C05)
b80f8000 b8100b80 PxHelp20 Wed Oct 18 12:33:53 2006 (45366581)
b8108000 b8117100 ohci1394 Sun Apr 13 13:46:18 2008 (480254FA)
b8118000 b8125080 1394BUS Sun Apr 13 13:46:18 2008 (480254FA)
b8138000 b8147180 nic1394 Sun Apr 13 13:51:22 2008 (4802562A)
b8148000 b8153a00 Haspnt Fri Nov 02 09:31:06 2001 (3BE2AE2A)
b8178000 b8180c00 AFS2K Thu Oct 07 20:16:03 2004 (4165EA53)
b8188000 b8197600 cdrom Sun Apr 13 13:40:45 2008 (480253AD)
b8198000 b81a6100 redbook Sun Apr 13 13:40:27 2008 (4802539B)
b81a8000 b81b2480 imapi Sun Apr 13 13:40:57 2008 (480253B9)
b81b8000 b81c4880 rasl2tp Sun Apr 13 14:19:43 2008 (48025CCF)
b81d8000 b81e2200 raspppoe Sun Apr 13 13:57:31 2008 (4802579B)
b81e8000 b81f3d00 raspptp Sun Apr 13 14:19:47 2008 (48025CD3)
b8208000 b8210900 msgpc Sun Apr 13 13:56:32 2008 (48025760)
b8218000 b8221f00 termdd Sun Apr 13 13:38:36 2008 (4802532C)
b8228000 b8231f80 zumbus Thu Nov 29 09:19:53 2007 (474ED899)
b8238000 b8245000 WDFLDR Thu Nov 02 03:54:05 2006 (4549B22D)
b8268000 b8271e80 NDProxy Sun Apr 13 13:57:28 2008 (48025798)
b82a8000 b82b0e00 intelppm Sun Apr 13 13:31:31 2008 (48025183)
b82c8000 b82d2e00 Fips Sun Apr 13 13:33:27 2008 (480251F7)
b82e8000 b82f6b00 drmk Sun Apr 13 13:45:12 2008 (480254B8)
b8318000 b8324d00 i8042prt Sun Apr 13 14:17:59 2008 (48025C67)
b8328000 b832e180 PCIIDEX Sun Apr 13 13:40:29 2008 (4802539D)
b8330000 b8334d00 PartMgr Sun Apr 13 13:40:48 2008 (480253B0)
b8350000 b8355020 wanatw4 Tue Jul 16 10:23:14 2002 (3D343A62)
b8368000 b836e000 kbdclass Sun Apr 13 13:39:46 2008 (48025372)
b8380000 b8385080 usbuhci Sun Apr 13 13:45:34 2008 (480254CE)
b8390000 b8394300 GEARAspiWDM Sun Jan 11 12:59:58 2009 (496A41AE)
b83a8000 b83ac080 raspti Fri Aug 17 15:55:32 2001 (3B7D84C4)
b83b0000 b83b4300 omci Mon Nov 04 17:05:02 2002 (3DC6FD1E)
b83b8000 b83bf600 usbehci Sun Apr 13 13:45:34 2008 (480254CE)
b83c0000 b83c7880 Npfs Sun Apr 13 13:32:38 2008 (480251C6)
b83d8000 b83dd000 flpydisk Sun Apr 13 13:40:24 2008 (48025398)
b83e8000 b83ed200 vga Sun Apr 13 13:44:40 2008 (48025498)
b8410000 b8416700 USBSTOR Sun Apr 13 13:45:37 2008 (480254D1)
b8418000 b841dbe0 mohfilt Fri Mar 05 13:13:37 2004 (4048D161)
b8420000 b8424a80 Msfs Sun Apr 13 13:32:38 2008 (480251C6)
b8438000 b843f580 Modem Sun Apr 13 14:00:18 2008 (48025842)
b8448000 b844ca80 TDI Sun Apr 13 14:00:04 2008 (48025834)
b8458000 b845eb00 fdc Sun Apr 13 13:40:25 2008 (48025399)
b8478000 b847c580 ptilink Fri Aug 17 15:49:53 2001 (3B7D8371)
b8480000 b8485a00 mouclass Sun Apr 13 13:39:47 2008 (48025373)
b84a0000 b84a5bc0 ssrtln Wed Jul 14 13:28:48 2004 (40F57B60)
b84b0000 b84b6180 HIDPARSE Sun Apr 13 13:45:22 2008 (480254C2)
b84b8000 b84bb000 BOOTVID Fri Aug 17 15:49:09 2001 (3B7D8345)
b8570000 b8573f00 MODEMCSA Fri Aug 17 15:57:37 2001 (3B7D8541)
b8574000 b8577c80 mssmbios Sun Apr 13 13:36:45 2008 (480252BD)
b85a8000 b85a9b80 kdcom Fri Aug 17 15:49:10 2001 (3B7D8346)
b85aa000 b85ab100 WMILIB Fri Aug 17 16:07:23 2001 (3B7D878B)
b85ac000 b85ad700 dmload Fri Aug 17 15:58:15 2001 (3B7D8567)
b85b8000 b85b9d40 ASCTRM Mon Feb 05 11:50:30 2001 (3A7EE7E6)
b85e2000 b85e36c0 ctprxy2k Mon Jul 12 21:11:55 2004 (40F344EB)
b85ec000 b85ed5c0 sscdbhk5 Wed Jul 14 13:29:02 2004 (40F57B6E)
b85f4000 b85f5100 swenum Sun Apr 13 13:39:52 2008 (48025378)
b860a000 b860b280 USBD Fri Aug 17 16:02:58 2001 (3B7D8682)
b864a000 b864bf00 Fs_Rec Fri Aug 17 15:49:37 2001 (3B7D8361)
b864c000 b864d080 Beep Fri Aug 17 15:47:33 2001 (3B7D82E5)
b864e000 b864f080 mnmdd Fri Aug 17 15:57:28 2001 (3B7D8538)
b8650000 b8651080 RDPCDD Fri Aug 17 15:46:56 2001 (3B7D82C0)
b8670000 b8670d00 pciide Fri Aug 17 15:51:49 2001 (3B7D83E5)
b86db000 b86dbc00 audstub Fri Aug 17 15:59:40 2001 (3B7D85BC)
b874f000 b874fb80 Null Fri Aug 17 15:47:39 2001 (3B7D82EB)
b8776000 b8776d00 dxgthk Fri Aug 17 15:53:12 2001 (3B7D8438)
bd000000 bd011600 dxg Sun Apr 13 13:38:27 2008 (48025323)
bf800000 bf9c2f80 win32k Fri Apr 17 07:26:26 2009 (49E87572)
bff40000 bff53e00 tgiul50 Fri Aug 17 16:56:03 2001 (3B7D92F3)
bffa0000 bffe5c00 ATMFD Sun Apr 13 19:09:55 2008 (4802A0D3)
Unloaded modules:
a22b4000 a22df000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b8684000 b8685000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a246f000 a247c000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a22df000 a2302000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a2327000 a2335000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b8648000 b864a000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac56d000 ac56e000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a2bb7000 a2bc6000 sysaudio.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a2711000 a273c000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a27cf000 a27dc000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a27ef000 a27fd000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a273c000 a275f000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b8610000 b8612000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b82b8000 b82c8000 serial.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b7cbe000 b7cc2000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b83f8000 b83fd000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b8590000 b8593000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
0: kd>
ASKER
That is a lot of verbage, but is it what you wanted?
ASKER
@gheist - Thanks for your input. I have uninstalled all nvidea drivers and am using an old trident pci card. I have tested the ram sticks each individuall and all together with seatools and memtest86. Didn't run it overnight here due to kansas thunderstorms and rural power problems but did for about 4 hours. I did swap out the ram with known good sticks.
I would recommend to reboot in networked safe mode and run full spyware check in there (Spybot from security.kolla.de is major tool).
Also while at it - run autoruns from www.sysinternals.com (microsoft's yard entrance) and have a good look at non-microsoft drivers - like checking with intel website for new wireless kit.
Also while in safe mode - update your antivirus (what is that exactly? - some extra actiona apply for major ones) and run full system scan.
There are some spyware components that hide quite well behind namespace filter driver, and conflict with other drivers and are completely hidden from normal mode AV and antispyware programs.
Also while at it - run autoruns from www.sysinternals.com (microsoft's yard entrance) and have a good look at non-microsoft drivers - like checking with intel website for new wireless kit.
Also while in safe mode - update your antivirus (what is that exactly? - some extra actiona apply for major ones) and run full system scan.
There are some spyware components that hide quite well behind namespace filter driver, and conflict with other drivers and are completely hidden from normal mode AV and antispyware programs.
Also - please post report of this from safe mode (somebody will take time comparing to their XP and note down malware):
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download
Debug info is relevant to current session, quite useless unless somebody with deep experience debugs the system.
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download
Debug info is relevant to current session, quite useless unless somebody with deep experience debugs the system.
ok. See those drivers dated 2001 and 2004, remove them, update them... but do something to them... I dont even use a computer that old. 2001 XP drivers are RTM version... we are in SP3 and a lot has changed in power managment, memory managment, kernel functions etc...
As a last troubleshooting step lets give a try with Process Explorer
Get on:
http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx
Run it.
Go to the view menu and select "view lower pane" and Lower pane view DLLs
Go to the view menu - Select colums, DLL tab and tick image address and image base address
Now on the upper pane, select one process at the time and in the lower pane on the right check for a DLL address closer as possible to your bugcheck parameter 4: 0X806E6A16
If you find one that means that that DLL might be the cause
As a last troubleshooting step lets give a try with Process Explorer
Get on:
http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx
Run it.
Go to the view menu and select "view lower pane" and Lower pane view DLLs
Go to the view menu - Select colums, DLL tab and tick image address and image base address
Now on the upper pane, select one process at the time and in the lower pane on the right check for a DLL address closer as possible to your bugcheck parameter 4: 0X806E6A16
If you find one that means that that DLL might be the cause
Address is a bit past 2GB
It might be BIOS problem - update and resest it also.
It might be BIOS problem - update and resest it also.
Those drivers dated 2001 and 2004 may be current. MS does not replace all drivers in a SP release. For example, pciide.sys has not changed since the release of XP.
ASKER
I am going to have to go to my 2nd job in a hot woodshop for the next 6 hours or so. I might be able to do something later something tonight.
Do not hurry - people of europe and asia answering currently....
ASKER
I ran virus and spyware scans last night after I got back and left it running at 11:00 when I went to bed. Came out this morning and it was off. Now she doesn't want to power on or show any signs of life. Maybe it new there was something wrong with the motherboard? I will try to take out the power supply after lunch to test.
Cooling issue?
In worst case: Disk is very likely to be fine even after CPU has melted.
If you manage to get it back running try to check component temperatures in BIOS, and install some app to look after fans and thermometers.
In worst case: Disk is very likely to be fine even after CPU has melted.
If you manage to get it back running try to check component temperatures in BIOS, and install some app to look after fans and thermometers.
ASKER
I tested the power supply and it is dead. Nothing hot at all. Looking online at about $100 and up for a replacement. Then what if it is the motherboard and the power supply was a coincidence?
Buy full case at $50
Nobody buys power suppleies alone but overclockers.
Nobody buys power suppleies alone but overclockers.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
At $99 you can buy two ATX cases with silent power suppleis for home computer...
I agree with garycase. I usually don't OC my desktops but I still buy them separately because I assemble my own computers. The best cases and power supplies are usually purchased separately, and cases with PSUs are usually low to mid-quality with the PSU as a generic one that will power low to medium end systems, but ones that require more power (if you are a gamer running the latest GPUs), you will need to make sure your PSU can handle the load of the power draws.
For home computer best would be silent case which at the moment of purchase contains all ventilators adjustable and silent and power supply of sufficient power (it is written on old unit btw)
ASKER
Thanks for everyone's Help! You have all been great. How should one award/distribute the points?
Up to you. You simply click on "Accept Multiple Solutions" & then you can assign points to those comments you found helpful.
Did you replace the PSU? (or at least test the system with another externally-connected PSU)
Did you replace the PSU? (or at least test the system with another externally-connected PSU)
Just split the points among those who helped or provided useful information.
ASKER
I replaced the power supply with a new generic one and the led would light on the motherboard but that was it. No fans spinning or trying to post. The gal I was trying to help decided she would buy a new box (emachine). I absolutely don't like those machines. Again, Thanks for all your help.
Then CPU has melted. No cheap or easy fix. Recover data from disk and that is best you can do for help. Good luck.
Also, exactly how did you test the RAM?