asked on

Windows XP Crash Dump Analysis

Hello

I've just had about 10 Windows XP Pro systems crash at the same time. Does anyone know why this might have happened. I have included a copy of the crash dump below.

----- 32 bit Kernel Mini Dump Analysis

DUMP_HEADER32:
MajorVersion 0000000f
MinorVersion 00000a28
DirectoryTableBase 00039000
PfnDataBase 80c4a000
PsLoadedModuleList 8054be30
PsActiveProcessHead 8054de78
MachineImageType 0000014c
NumberProcessors 00000001
BugCheckCode 1000007f
BugCheckParameter1 00000008
BugCheckParameter2 80042000
BugCheckParameter3 00000000
BugCheckParameter4 00000000
PaeEnabled 00000000
KdDebuggerDataBlock 8053dde0
MiniDumpFields 00000dff

TRIAGE_DUMP32:
ServicePackBuild 00000100
SizeOfDump 00010000
ValidOffset 0000fffc
ContextOffset 00000320
ExceptionOffset 000007d0
MmOffset 00001068
UnloadedDriversOffset 000010a0
PrcbOffset 00001878
ProcessOffset 000024c8
ThreadOffset 00002720
CallStackOffset 00002978
SizeOfCallStack 00003fff
DriverListOffset 00006c08
DriverCount 00000075
StringPoolOffset 00008ec8
StringPoolSize 00001008
BrokenDriverOffset 00000000
TriageOptions 00000041
TopOfStack f0c2b000
DebuggerDataOffset 00006978
DebuggerDataSize 00000290
DataBlocksOffset 00009ed0
DataBlocksCount 00000003

Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
Kernel base = 0x804d4000 PsLoadedModuleList = 0x8054be30
Debug session time: Fri Oct 24 12:08:24 2003
System Uptime: 0 days 3:28:26
start end module name
804d4000 806c6980 nt Checksum: 0020230B Timestamp: Thu Aug 29 19:
03:24 2002 (3D6DE35C)

Unloaded modules:
f035f000 f0386000 kmixer.sys Timestamp: unavailable (00000000)
f035f000 f0386000 kmixer.sys Timestamp: unavailable (00000000)
f035f000 f0386000 kmixer.sys Timestamp: unavailable (00000000)
f035f000 f0386000 kmixer.sys Timestamp: unavailable (00000000)
f0426000 f044d000 kmixer.sys Timestamp: unavailable (00000000)
f0865000 f088c000 kmixer.sys Timestamp: unavailable (00000000)
fa050000 fa051000 drmkaud.sys Timestamp: unavailable (00000000)
f11d0000 f11dd000 DMusic.sys Timestamp: unavailable (00000000)
f088c000 f08af000 aec.sys Timestamp: unavailable (00000000)
f08c2000 f08d0000 swmidi.sys Timestamp: unavailable (00000000)
f9f6c000 f9f6e000 splitter.sys Timestamp: unavailable (00000000)
f10b3000 f10e8000 ghpcw2k.sys Timestamp: unavailable (00000000)
f9c92000 f9c9c000 imapi.sys Timestamp: unavailable (00000000)
f9d62000 f9d67000 Cdaudio.SYS Timestamp: unavailable (00000000)
f9ed2000 f9ed5000 Sfloppy.SYS Timestamp: unavailable (00000000)
f9859000 f988e000 ghpcw2k.sys Timestamp: unavailable (00000000)

Finished dump check

sunray_2003

Check dump files in windows xp

http://support.microsoft.com/?kbid=254649

Sunray

CrazyOne

I would double check for viruses.

Online Scanners

Norton Web Services
Go to this page and click on Scan for Viruses
http://security.symantec.com/ssc/vc_about.asp?j=1&langid=us&venid=sym&plfid=22&pkj=REODSKVYRMHCGVRVRMN

It needs to download a few file so as to activate the scan so you may see a message like this.

"The Scan for Viruses uses an ActiveX program to scan your computer. The download is approximately 1.5MB and can take about 10 minutes over a 28.8 modem.

The scan can take more than 20 minutes depending on the speed of your computer and the number of files that you have. Please do not browse away from this page unless you intend to abort the scan.

Downloading Scan for Viruses controls. Please wait...

During the download, you might see one or more messages asking if it is OK to download and run these programs. Click Yes when these messages appear.

Note: Scan for Viruses does not scan compressed files"
======================
Trend Micro HouseCall
www.housecall.antivirus.com
"Trend Micro's free online virus scanner
In order to better serve our customers, we ask HouseCall users to register before scanning their computer. By registering, you will receive virus alerts from our team of Virus Doctors. You will be able to unsubscribe when you receive your first email. You can also scan without registering"
http://housecall.antivirus.com/housecall/start_corp.asp
======================

PC Pitstop Virus Scan
Our free Web-based virus scan uses Panda Software's award-winning technology and virus list. We're checking against the "wildlist," the roughly 200 viruses that are most prevalent in the world in a given month
http://www.pcpitstop.com/antivirus/default.asp

CrazyOne

Stefan have you installed any software or hardware or updates on all these mahcines recently. If so look at that as the cause of this.

CrazyOne

How to Gather Information After a Memory Dump in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;314084

Download Pstat here
Pstat.exe: Process and Thread Status
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/pstat-o.asp

CrazyOne

http://www.eventid.net/display.asp?eventid=1003&eventno=1274

Error code 1000007f = "UNEXPECTED_KERNEL_MODE_TRAP_M" - The first parameter displayed on the blue screen specifies the trap number. Trap number 0x00000000, or Divide by Zero Error, may indicate memory corruption. Other hardware problems, or software failures can cause this error. See the the link to Bug Check codes for more explanations about various trap numbers.

ASKER CERTIFIED SOLUTION

CrazyOne

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

deuzige_wn4e

this is sooo lame! Damned can there be just one single site out there which does not want only money?