Link to home
Start Free TrialLog in
Avatar of wmsunder
wmsunder

asked on

XP system error and dump

Hi everyone,

I have an xp pro sp1 machine that does a system dump about once or twice a week. I have access to all of the .dmp files. I was curious if anyone knows how I could decipher these files and how I could find out what is going on with this machine?

Thanks,

wmsunder

Avatar of Drizzt420
Drizzt420

you can download the windows debugging tools for free at:

http://www.microsoft.com/whdc/devtools/debugging/installx86.mspx

Winternals administrators pack has a crash analyzer included that requires the windows debug tools be installed, but has a more "user friendly" output. I am sure there are others as well.

First, I suspect that it could have something to do with the RAM.
Try and change Ram,but before you do that,countercheck
to see if u have the correct drivers for your components if the are
the correct ones.

Also this link should help you out:
http://support.microsoft.com/default.aspx?scid=kb;en-us;307973&sd=tech
Debugging Tools from Microsoft
1) Create folder c:\symbols
2) Download and install the http://www.microsoft.com/whdc/devtools/debugging/installx86.mspx
3) Locate your latest memory.dmp file- C:\WINDOWS\ Minidump\Mini011005-01.dmp or whatever
4) open a CMD prompt and cd\program files\debugging tools for windows\
5) type the following stuff:

Code:
c:\program files\debugging tools>kd -z C:\WINDOWS\Minidump\Mini011005-01.dmp
(it will spew a bunch)
kd> .logopen c:\debuglog.txt
kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols
kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q

You now have a debuglog.txt in c:\  
open it in notepad and post to this thread.
This can be brought by either the machine overheating or you have faulty memory or go to the control panel -administrative tools-component services-double click system in the right pane/scroll down to workstation services/properties/look for start up type,select disable this should be able to do it.
My final option is for you to check if you installed any new drivers which are not compartible to the windows you are using.

Check to see if you have any scheduled tasks that are going off at around the same time as your dumps.  Something could be eating at your resources.

I had a similar problem with my W2K Server, but it was never at the same time of day and happened sometimes 2x a day - every 2 days - once a week, etc.  My problem was the power supply.  Upgraded that to 450W - up and running now 3 weeks.
Avatar of wmsunder

ASKER

I apologize for the length of this post. Here is the text of the debuglog as requested. Thanks for the great tips and for the nicely detailed instructions so far. I appreciate it very much.

Thanks,
wmsunder

<begin text of debuglog.txt>

Opened log file 'c:\debuglog.txt'
kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q
Loading Kernel Symbols
.........................................................................................................................
Loading unloaded module list
.......................
Loading User Symbols
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000028, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 804f9528, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS:  00000028

CURRENT_IRQL:  2

FAULTING_IP:
nt!MiReleaseConfirmedPageFileSpace+19
804f9528 8b7828           mov     edi,[eax+0x28]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0xA

LAST_CONTROL_TRANSFER:  from 804f957a to 804f9528

TRAP_FRAME:  f3438b58 -- (.trap fffffffff3438b58)
.trap fffffffff3438b58
ErrCode = 00000000
eax=00000000 ebx=00000001 ecx=00096a00 edx=81052000 esi=00000007 edi=00026f6d
eip=804f9528 esp=f3438bcc ebp=f3438bec iopl=0         nv up ei pl nz ac po cy
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010217
nt!MiReleaseConfirmedPageFileSpace+0x19:
804f9528 8b7828           mov     edi,[eax+0x28]    ds:0023:00000028=????????
.trap
Resetting default scope

STACK_TEXT:  
f3438bd0 804f957a 96a00c6e c017b058 813f9238 nt!MiReleaseConfirmedPageFileSpace+0x19
f3438bec 804fbe3e 82aa4668 000014ac c050894c nt!MiDecrementShareCount+0x130
f3438c0c 80575a8f 5ec16201 82aa4470 c0301c10 nt!MiDeleteValidAddress+0x140
f3438c28 804fbf19 82aa4470 82aa4470 818ba538 nt!MiDeleteAddressesInWorkingSet+0x5e
f3438c60 805757a5 00aa4470 818ba538 818ba780 nt!MmCleanProcessAddressSpace+0x191
f3438d08 80558bc4 00000000 818ba538 00000000 nt!PspExitThread+0x668
f3438d28 8057564b 818ba538 00000000 f3438d64 nt!PspTerminateThreadByPointer+0x4f
f3438d54 804dad01 00000000 00000000 00000000 nt!NtTerminateProcess+0x116
f3438d54 7ffe0304 00000000 00000000 00000000 nt!KiSystemService+0xc4
0013fef8 00000000 00000000 00000000 00000000 SharedUserData!SystemCallStub+0x4


FOLLOWUP_IP:
nt!MiReleaseConfirmedPageFileSpace+19
804f9528 8b7828           mov     edi,[eax+0x28]

SYMBOL_STACK_INDEX:  0

FOLLOWUP_NAME:  MachineOwner

SYMBOL_NAME:  nt!MiReleaseConfirmedPageFileSpace+19

MODULE_NAME:  nt

DEBUG_FLR_IMAGE_TIMESTAMP:  422517e4

STACK_COMMAND:  .trap fffffffff3438b58 ; kb

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  0xA_nt!MiReleaseConfirmedPageFileSpace+19

BUCKET_ID:  0xA_nt!MiReleaseConfirmedPageFileSpace+19

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000000a ecx=00000000 edx=40000000 esi=804f9528 edi=00000028
eip=8052b591 esp=f3438b24 ebp=f3438b3c iopl=0         nv up ei ng nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00000286
nt!KeBugCheckEx+0x19:
8052b591 5d               pop     ebp
ChildEBP RetAddr  Args to Child              
f3438b3c 804ddb88 0000000a 00000028 00000002 nt!KeBugCheckEx+0x19 (FPO: [Non-Fpo])
f3438b3c 804f9528 0000000a 00000028 00000002 nt!KiTrap0E+0x219 (FPO: [0,0] TrapFrame @ f3438b58)
f3438bd0 804f957a 96a00c6e c017b058 813f9238 nt!MiReleaseConfirmedPageFileSpace+0x19 (FPO: [1,0,2])
f3438bec 804fbe3e 82aa4668 000014ac c050894c nt!MiDecrementShareCount+0x130 (FPO: [Non-Fpo])
f3438c0c 80575a8f 5ec16201 82aa4470 c0301c10 nt!MiDeleteValidAddress+0x140 (FPO: [Non-Fpo])
f3438c28 804fbf19 82aa4470 82aa4470 818ba538 nt!MiDeleteAddressesInWorkingSet+0x5e (FPO: [Uses EBP] [1,0,4])
f3438c60 805757a5 00aa4470 818ba538 818ba780 nt!MmCleanProcessAddressSpace+0x191 (FPO: [Non-Fpo])
f3438d08 80558bc4 00000000 818ba538 00000000 nt!PspExitThread+0x668 (FPO: [Non-Fpo])
f3438d28 8057564b 818ba538 00000000 f3438d64 nt!PspTerminateThreadByPointer+0x4f (FPO: [Non-Fpo])
f3438d54 804dad01 00000000 00000000 00000000 nt!NtTerminateProcess+0x116 (FPO: [Non-Fpo])
f3438d54 7ffe0304 00000000 00000000 00000000 nt!KiSystemService+0xc4 (FPO: [0,0] TrapFrame @ f3438d64)
0013fef8 00000000 00000000 00000000 00000000 SharedUserData!SystemCallStub+0x4 (FPO: [0,0,0])
start    end        module name
804d4000 806c6400   nt       ntoskrnl.exe Tue Mar 01 17:33:24 2005 (422517E4)
806c7000 806e6380   hal      halaacpi.dll Thu Aug 29 01:05:02 2002 (3D6DD5AE)
bf800000 bf9b6c00   win32k   win32k.sys   Tue Mar 01 17:34:22 2005 (4225181E)
bf9b7000 bf9e8700   ati2dvag ati2dvag.dll Wed Aug 07 17:27:49 2002 (3D51BB05)
bf9e9000 bfab7320   ati3d1ag ati3d1ag.dll Wed Aug 07 16:19:02 2002 (3D51AAE6)
bff80000 bff90d80   dxg      dxg.sys      Thu Aug 29 03:40:42 2002 (3D6DFA2A)
bffa0000 bffe2980   ATMFD    ATMFD.DLL    Fri Aug 17 14:55:56 2001 (3B7D92EC)
f31aa000 f31c6500   RDPWD    RDPWD.SYS    Thu Jun 09 16:45:20 2005 (42A8D490)
f33af000 f33c1e80   wdmaud   wdmaud.sys   Thu Aug 29 02:00:46 2002 (3D6DE2BE)
f35b4000 f35c1e00   sysaudio sysaudio.sys Thu Aug 29 02:01:17 2002 (3D6DE2DD)
f363c000 f3666500   mrxdav   mrxdav.sys   Mon Apr 25 18:58:01 2005 (426DA029)
f386f000 f388f380   afd      afd.sys      Thu Aug 29 02:01:13 2002 (3D6DE2D9)
f39d0000 f39e5380   dump_atapi dump_atapi.sys Thu Aug 29 01:27:48 2002 (3D6DDB04)
f4048000 f40b3700   mrxsmb   mrxsmb.sys   Tue Jan 18 19:51:35 2005 (41EDD947)
f40b4000 f40dd880   rdbss    rdbss.sys    Tue Oct 12 09:22:19 2004 (416C04BB)
f40de000 f4102700   netbt    netbt.sys    Tue Jul 08 16:48:51 2003 (3F0B5863)
f4103000 f4156000   tcpip    tcpip.sys    Wed May 25 12:41:07 2005 (4294D4D3)
f4156000 f4171000   RCFOX    RCFOX.sys    Fri Oct 15 10:46:09 2004 (41700CE1)
f81cb000 f8270020   ha10kx2k ha10kx2k.sys Tue Jul 23 22:52:25 2002 (3D3E4099)
f82da000 f82e2e50   atintuxx atintuxx.sys Tue Jul 23 18:02:30 2002 (3D3DFCA6)
f82ea000 f82f9890   atinrvxx atinrvxx.sys Tue Jul 23 18:02:51 2002 (3D3DFCBB)
f82fa000 f8302790   atinxsxx atinxsxx.sys Tue Jul 23 18:03:28 2002 (3D3DFCE0)
f830a000 f8314d80   STREAM   STREAM.SYS   Thu Aug 29 01:32:32 2002 (3D6DDC20)
f834e000 f8352000   watchdog watchdog.sys Thu Aug 29 01:32:20 2002 (3D6DDC14)
f8352000 f8354900   Dxapi    Dxapi.sys    Fri Aug 17 13:53:19 2001 (3B7D843F)
f836e000 f8371000   ndisuio  ndisuio.sys  Thu Aug 29 01:35:40 2002 (3D6DDCDC)
f8372000 f8393780   update   update.sys   Fri Aug 17 20:53:56 2001 (3B7DE6D4)
f83b0000 f83b2f80   mouhid   mouhid.sys   Fri Aug 17 13:47:57 2001 (3B7D82FD)
f83b4000 f83b7680   kbdhid   kbdhid.sys   Fri Aug 17 13:48:01 2001 (3B7D8301)
f83bc000 f83e8880   rdpdr    rdpdr.sys    Thu Aug 29 01:06:34 2002 (3D6DD60A)
f83e9000 f83f9200   psched   psched.sys   Thu Aug 29 01:35:54 2002 (3D6DDCEA)
f83fa000 f840f600   ndiswan  ndiswan.sys  Thu Aug 29 01:58:38 2002 (3D6DE23E)
f8410000 f842b9e0   dne2000  dne2000.sys  Fri May 14 17:13:12 2004 (40A56098)
f842c000 f843e900   parport  parport.sys  Thu Aug 29 01:27:29 2002 (3D6DDAF1)
f843f000 f8450500   VIDEOPRT VIDEOPRT.SYS Thu Aug 29 01:32:03 2002 (3D6DDC03)
f8451000 f84bee80   ati2mtag ati2mtag.sys Thu Aug 08 13:46:38 2002 (3D52D8AE)
f84d0000 f84e8da0   ctoss2k  ctoss2k.sys  Thu Jul 18 19:48:03 2002 (3D377DE3)
f84e9000 f8509280   ks       ks.sys       Thu Aug 29 02:13:40 2002 (3D6DE5C4)
f850a000 f852ac80   portcls  portcls.sys  Thu Aug 29 02:00:58 2002 (3D6DE2CA)
f852b000 f85a2460   ctaud2k  ctaud2k.sys  Thu Jul 18 19:47:51 2002 (3D377DD7)
f85a3000 f85c4e00   USBPORT  USBPORT.SYS  Thu Jul 03 17:49:27 2003 (3F04CF17)
f85cd000 f85cfd40   atinmdxx atinmdxx.sys Tue Jul 23 18:03:17 2002 (3D3DFCD5)
f85d1000 f85d3ef0   atinpdxx atinpdxx.sys Tue Jul 23 18:03:20 2002 (3D3DFCD8)
f8a18000 f8a31680   Mup      Mup.sys      Thu Aug 29 02:12:53 2002 (3D6DE595)
f8a32000 f8a5ae80   NDIS     NDIS.sys     Thu Aug 29 02:09:23 2002 (3D6DE4C3)
f8a5b000 f8ae4300   Ntfs     Ntfs.sys     Thu Aug 29 02:13:37 2002 (3D6DE5C1)
f8ae5000 f8af8780   KSecDD   KSecDD.sys   Fri Aug 17 13:50:01 2001 (3B7D8379)
f8af9000 f8b09e80   sr       sr.sys       Thu Aug 29 01:17:56 2002 (3D6DD8B4)
f8b0a000 f8b1f380   atapi    atapi.sys    Thu Aug 29 01:27:48 2002 (3D6DDB04)
f8b20000 f8b43b80   dmio     dmio.sys     Fri Aug 17 13:58:27 2001 (3B7D8573)
f8b44000 f8b62880   ftdisk   ftdisk.sys   Fri Aug 17 13:52:41 2001 (3B7D8419)
f8b63000 f8b8ec80   ACPI     ACPI.sys     Thu Aug 29 01:09:03 2002 (3D6DD69F)
f8bb0000 f8bbf600   pci      pci.sys      Thu Aug 29 01:09:10 2002 (3D6DD6A6)
f8bc0000 f8bc8c00   isapnp   isapnp.sys   Fri Aug 17 13:58:01 2001 (3B7D8559)
f8bd0000 f8bd9280   MountMgr MountMgr.sys Fri Aug 17 13:47:36 2001 (3B7D82E8)
f8be0000 f8bec000   VolSnap  VolSnap.sys  Fri Aug 17 13:53:19 2001 (3B7D843F)
f8bf0000 f8bf8400   disk     disk.sys     Thu Aug 29 01:27:56 2002 (3D6DDB0C)
f8c00000 f8c0b500   CLASSPNP CLASSPNP.SYS Thu Aug 29 02:08:42 2002 (3D6DE49A)
f8c60000 f8c6e280   ipsec    ipsec.sys    Thu Aug 29 02:07:19 2002 (3D6DE447)
f8c70000 f8c78180   netbios  netbios.sys  Thu Aug 29 01:35:45 2002 (3D6DDCE1)
f8c90000 f8c98880   Fips     Fips.SYS     Fri Aug 17 18:31:49 2001 (3B7DC585)
f8ca0000 f8ca8200   wanarp   wanarp.sys   Fri Aug 17 13:55:23 2001 (3B7D84BB)
f8cc0000 f8cc8700   HIDCLASS HIDCLASS.SYS Thu Aug 29 01:32:40 2002 (3D6DDC28)
f8d00000 f8d0e900   Cdfs     Cdfs.SYS     Thu Aug 29 01:58:50 2002 (3D6DE24A)
f8d20000 f8d2b280   Usr79n51 Usr79n51.sys Sun Jun 23 23:10:58 2002 (3D16B7F2)
f8d30000 f8d3e200   drmk     drmk.sys     Thu Aug 29 01:32:30 2002 (3D6DDC1E)
f8d40000 f8d4b980   cdrom    cdrom.sys    Thu Aug 29 01:27:55 2002 (3D6DDB0B)
f8d50000 f8d5dd00   redbook  redbook.sys  Thu Aug 29 01:27:45 2002 (3D6DDB01)
f8d60000 f8d6f400   serial   serial.sys   Thu Aug 29 02:08:27 2002 (3D6DE48B)
f8d70000 f8d7bd00   rasl2tp  rasl2tp.sys  Thu Aug 29 02:06:36 2002 (3D6DE41C)
f8d80000 f8d89800   raspppoe raspppoe.sys Fri Aug 17 13:55:33 2001 (3B7D84C5)
f8d90000 f8d9b480   raspptp  raspptp.sys  Tue Oct 01 17:52:28 2002 (3D9A434C)
f8da0000 f8da8400   msgpc    msgpc.sys    Fri Aug 17 13:54:19 2001 (3B7D847B)
f8db0000 f8db9400   termdd   termdd.sys   Thu Aug 29 01:40:32 2002 (3D6DDE00)
f8dc0000 f8dccf80   usbhub   usbhub.sys   Thu Jul 03 17:52:56 2003 (3F04CFE8)
f8dd0000 f8dd9480   NDProxy  NDProxy.SYS  Fri Aug 17 13:55:30 2001 (3B7D84C2)
f8e30000 f8e35c80   PCIIDEX  PCIIDEX.SYS  Thu Aug 29 01:27:47 2002 (3D6DDB03)
f8e38000 f8e3c900   PartMgr  PartMgr.sys  Fri Aug 17 18:32:23 2001 (3B7DC5A7)
f8ea8000 f8eaff00   amdk7    amdk7.sys    Thu Aug 29 01:05:05 2002 (3D6DD5B1)
f8eb0000 f8eb6280   usbehci  usbehci.sys  Thu Jul 03 17:50:45 2003 (3F04CF65)
f8eb8000 f8eb9000   fdc      fdc.sys      unavailable (00000000)
f8ec0000 f8ec4580   ptilink  ptilink.sys  Fri Aug 17 13:49:53 2001 (3B7D8371)
f8ec8000 f8ecc080   raspti   raspti.sys   Fri Aug 17 13:55:32 2001 (3B7D84C4)
f8ed0000 f8ed5b80   kbdclass kbdclass.sys Thu Aug 29 01:26:59 2002 (3D6DDAD3)
f8ed8000 f8edd600   mouclass mouclass.sys Thu Aug 29 01:27:00 2002 (3D6DDAD4)
f8ef8000 f8efcd00   flpydisk flpydisk.sys Thu Aug 29 01:27:43 2002 (3D6DDAFF)
f8f08000 f8f0dc80   HIDPARSE HIDPARSE.SYS Fri Aug 17 14:02:04 2001 (3B7D864C)
f8f10000 f8f14d00   vga      vga.sys      Thu Aug 29 01:32:03 2002 (3D6DDC03)
f8f18000 f8f1c680   Msfs     Msfs.SYS     Fri Aug 17 13:50:02 2001 (3B7D837A)
f8f20000 f8f27380   Npfs     Npfs.SYS     Fri Aug 17 13:50:03 2001 (3B7D837B)
f8f30000 f8f36180   usbprint usbprint.sys Thu Aug 29 01:50:01 2002 (3D6DE039)
f8f40000 f8f46e00   usbccgp  usbccgp.sys  Thu Jul 03 17:53:24 2003 (3F04D004)
f8f68000 f8f69000   atinraxx atinraxx.sys unavailable (00000000)
f8f98000 f8f9ce80   TDTCP    TDTCP.SYS    Fri Aug 17 13:46:43 2001 (3B7D82B3)
f8fc0000 f8fc3000   BOOTVID  BOOTVID.dll  Fri Aug 17 13:49:09 2001 (3B7D8345)
f903c000 f903e280   rasacd   rasacd.sys   Fri Aug 17 13:55:39 2001 (3B7D84CB)
f9068000 f906a580   hidusb   hidusb.sys   Fri Aug 17 14:02:16 2001 (3B7D8658)
f906c000 f906fe80   usbohci  usbohci.sys  Thu Jul 03 17:51:14 2003 (3F04CF82)
f9074000 f9076680   gameenum gameenum.sys Thu Aug 29 01:32:42 2002 (3D6DDC2A)
f907c000 f907fa80   serenum  serenum.sys  Fri Aug 17 13:50:13 2001 (3B7D8385)
f9080000 f9082580   ndistapi ndistapi.sys Fri Aug 17 13:55:29 2001 (3B7D84C1)
f9084000 f9087f80   TDI      TDI.SYS      Fri Aug 17 13:57:25 2001 (3B7D8535)
f9088000 f908af40   rcvpn    rcvpn.sys    Tue Nov 05 16:39:49 2002 (3DC864D5)
f90b0000 f90b1b80   kdcom    kdcom.dll    Fri Aug 17 13:49:10 2001 (3B7D8346)
f90b2000 f90b3100   WMILIB   WMILIB.SYS   Fri Aug 17 14:07:23 2001 (3B7D878B)
f90b4000 f90b5700   dmload   dmload.sys   Fri Aug 17 13:58:15 2001 (3B7D8567)
f90d2000 f90d3280   USBD     USBD.SYS     Fri Aug 17 14:02:58 2001 (3B7D8682)
f90da000 f90dbf00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 13:49:37 2001 (3B7D8361)
f90dc000 f90dd080   Beep     Beep.SYS     Fri Aug 17 13:47:33 2001 (3B7D82E5)
f90de000 f90df080   mnmdd    mnmdd.SYS    Fri Aug 17 13:57:28 2001 (3B7D8538)
f90e0000 f90e1080   RDPCDD   RDPCDD.sys   Fri Aug 17 13:46:56 2001 (3B7D82C0)
f9104000 f9105100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 14:07:23 2001 (3B7D878B)
f9174000 f9175a80   ParVdm   ParVdm.SYS   Fri Aug 17 13:49:49 2001 (3B7D836D)
f9178000 f9178d00   pciide   pciide.sys   Fri Aug 17 13:51:49 2001 (3B7D83E5)
f9198000 f9198b80   Null     Null.SYS     Fri Aug 17 13:47:39 2001 (3B7D82EB)
f9199000 f9199fe0   ATMhelpr ATMhelpr.SYS Tue Apr 15 18:45:23 1997 (33542F33)
f9290000 f9290d00   dxgthk   dxgthk.sys   Fri Aug 17 13:53:12 2001 (3B7D8438)
f92e2000 f92e2e80   ctljystk ctljystk.sys Thu Jul 19 15:28:02 2001 (3B575EF2)
f92e3000 f92e3b80   msmpu401 msmpu401.sys Fri Aug 17 13:59:59 2001 (3B7D85CF)
f92e4000 f92e4c00   audstub  audstub.sys  Fri Aug 17 13:59:40 2001 (3B7D85BC)
f92e5000 f92e5f00   swenum   swenum.sys   Fri Aug 17 13:48:47 2001 (3B7D832F)
f9303000 f9303a00   mc22     mc22.tmp     Sun Apr 25 03:31:33 2004 (408B9385)

Unloaded modules:
f2d9b000 f2dc2000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f90f6000 f90f8000   MSPQM.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f2e63000 f2e8a000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f910a000 f910c000   MSPQM.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f2e63000 f2e8a000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f2e63000 f2e8a000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f9140000 f9142000   MSPQM.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f2e63000 f2e8a000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f2e63000 f2e8a000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f2e63000 f2e8a000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f2e63000 f2e8a000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f33c2000 f33e9000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f90ee000 f90f0000   MSPQM.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f9208000 f9209000   drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f3584000 f3591000   DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f3489000 f34ac000   aec.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f3594000 f35a2000   swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f9146000 f9148000   splitter.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f8c80000 f8c8a000   imapi.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f8c50000 f8c5d000   i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f85c5000 f85c9000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f8f00000 f8f05000   Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f85c9000 f85cc000   Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Closing open log file c:\debuglog.txt
ASKER CERTIFIED SOLUTION
Avatar of cpc2004
cpc2004
Flag of Hong Kong image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Just a follow up question...and please excuse my ignorance, but how do we determine faulty ram from that information? Just curious.

Thankss cpc2004

wmsunder
These three modules belong to real storage manager and they are stable routine. It crashes most probably is related to faulty ram.
nt!MiReleaseConfirmedPageFileSpace+0x19
nt!MiDecrementShareCount+0x130
nt!MiDeleteValidAddress+0x140


Suggestion
1. Reseat the memory stick to another memory slot
2. Downclock the ram
3. Clean the inside the computer case
4. Make sure that the ram is compatible to the motherboard
If it still crashes, diagnostic which memory stick is faulty
1. Take out one memory stick. If windows does not crash, the removed memory stick is faulty.
2. If you have only one memory stick, replace the ram
Thanks cpc2004.

A textbook case of how great this site/service can be.

I appreciate the detailed walk-through and the additional clarification on the results.

I will do as suggested and report back if there are additional problems.

Thanks again,

wmsunder