I occasionally get Stop errors after the XP machine has been running for several hours. I have information to work with but am having trouble figuring out what is important and how it relates to the rest.
From the system log:
Error code 000000f4, parameter1 00000003, parameter2 896a3da0, parameter3 896a3f14, parameter4 805d297c.
This is preceded by several of the following warnings in sys log:
"An error was detected on device \Device\Harddisk3\D during a paging operation."
However, this is a bit confusing, since HD3 is an external USB drive I use for backups but D: is the optical drive.
To make things more interesting, WinDB gives this result from the minidump (including the full text to show the version of analyzer etc.:
"Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini0
92709-01.d
mp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: C:\websymbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_gdr.090206-1
234
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Sun Sep 27 08:44:26.109 2009 (GMT-5)
System Uptime: 2 days 1:24:58.685
Loading Kernel Symbols
..........................
..........
..........
..........
.......
..........................
..........
..........
..........
........
..........................
...
Loading User Symbols
Loading unloaded module list
........................
**************************
**********
**********
**********
**********
**********
***
* *
* Bugcheck Analysis *
* *
**************************
**********
**********
**********
**********
**********
***
Use !analyze -v to get detailed debugging information.
BugCheck F4, {3, 896a3da0, 896a3f14, 805d297c}
Unable to load image TfSysMon.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for TfSysMon.sys
*** ERROR: Module load completed but symbols could not be loaded for TfSysMon.sys
*** WARNING: Unable to verify timestamp for cmdguard.sys
*** ERROR: Module load completed but symbols could not be loaded for cmdguard.sys
unable to get nt!KiCurrentEtwBufferOffse
t
unable to get nt!KiCurrentEtwBufferBase
Probably caused by : hardware_disk
Followup: MachineOwner"
TfSysMon.sys (C:\WINDOWS\system32\drive
rs) is part of ThreatFire, the AV program I use. But if that's the cause then why the conclusion of WinDB "Probably caused by : hardware_disk"?
Side note: how do I get WinXP to give me a full dump?