Would like some to analyze a mini dmp

Posted on 2006-05-23
Last Modified: 2012-06-27
I need someone who's willing to have a mini dmp file emailed to them for analysis....

Much appreciated!!!
Question by:entronet
    LVL 74

    Expert Comment

    by:Jeffrey Kane - TechSoEasy
    How about having Microsoft do it... at  They see a bunch more of those than I do.

    LVL 20

    Expert Comment

    The crash may be caused by faulty ram or device driver error (ie video, sound card, modem and etc). The system event log and the minidump has the most useful diagnostic information. When Windows crashes with blue screen, it writes a system event 1001 or 1003 and a minidump to the folder \windows\minidump. Check system event 1001 and 1003 and it has the detail of the blue screen.

    Event ID: 1001
    Source: Save Dump
    The computer has rebooted from a bugcheck.The bugcheck was : 0xc000000a (0xe1270188, 0x00000002, 0x00000000, 0x804032100).
    Microsoft Windows..... A dump was saved in: .......

    Event Source: System Error
    Event Category: (102)
    Event ID: 1003
    Error code 1000007f, parameter1 0000000d, parameter2 00000000, parameter3 00000000, parameter4 00000000

    Control Panel -> Adminstrative Tools -> Event Viewer -> System -> Event 1001/1003. Copy the content and paste it back here

    Zip 5 to 6 minidumps to a zip file and attach it at any webspace. I will study the dump and find out the culprit. If you can't provide the minidumps, run memtest to stress test the ram. Make sure that your windows is not infected with spyware, adware adn chkdsk /r.

    Get public webspace
    Use a free service like rapidshare to attach the minidumps and post the url of the mimidumps at this thread.

    Author Comment

    here's the link to one file. I'll will be getting more today

    LVL 20

    Expert Comment

    One minidump is insufficient to confirm the culprit. Attach 5 to 6 minidumps at webspace. From the stack trace, the crash may be related the Norton AV or corrupted filesystem. Run chkdsk /r and un-unstall Norton AV. It is also worthwhile to run memtest to stress test the ram.

    f04f1240 f71b2930 849d9730 f04f1270 00001000 nt!CcMapData+0xed
    f04f1260 f71b2c36 84542e50 e24e3ba8 07730000 Ntfs!NtfsMapStream+0x44
    f04f1290 f71b2d4f 84542e50 0000000c 00007730 Ntfs!ReadIndexBuffer+0x88
    f04f12c0 f71b7bc2 84542e50 f04f1338 e29ec748 Ntfs!FindFirstIndexEntry+0x18f
    f04f13c8 f71c7c3a 84542e50 e24e3ba8 e29ec748 Ntfs!NtfsFindIndexEntry+0x48
    f04f1484 f71c7d0b 84542e50 e24e3ba8 e2b7f008 Ntfs!NtfsAddDosOnlyName+0x122
    f04f14c0 f71c3649 84542e50 00000001 e24e3ba8 Ntfs!NtfsAddLink+0xa7
    f04f1698 f71bc5cf 84542e50 84576a58 84576ba0 Ntfs!NtfsCreateNewFile+0x755
    f04f18bc f71b251f 84542e50 84576a58 f04f18fc Ntfs!NtfsCommonCreate+0x1200
    f04f19c0 804f0473 85f40020 84576a58 84576be8 Ntfs!NtfsFsdCreate+0x17d
    f04f19d0 f0eea741 84576bc4 84576be8 f04f1a30 nt!IofCallDriver+0x3f
    WARNING: Stack unwind information not available. Following frames may be wrong.
    f04f19f8 f0ef1890 85f40020 85f11980 f04f1a30 SYMEVENT+0x7741
    f04f1a14 f0eea7b9 f04f1a30 804f1d00 f0eea87a SYMEVENT+0xe890
    f04f1a50 804f0473 85cc6740 84576a58 84576a58 SYMEVENT+0x77b9
    f04f1a60 8058f828 86556c10 85d9d0ac f04f1c14 nt!IofCallDriver+0x3f
    f04f1b58 8058e412 86556c28 00000000 85d9d008 nt!IopParseDevice+0xab5
    f04f1bd4 8058db49 00000000 f04f1c14 00000040 nt!ObpLookupObjectName+0x545
    f04f1c28 8058fa39 00000000 00000000 00040001 nt!ObOpenObjectByName+0xe8
    f04f1ca4 8058fb0d 09b0f87c c0100080 09b0f818 nt!IopCreateFile+0x413
    f04f1cf0 8058e21e 09b0f87c c0100080 09b0f818 nt!IoCreateFile+0x3d
    f04f1d30 804dfd24 09b0f87c c0100080 09b0f818 nt!NtCreateFile+0x2e
    f04f1d30 7ffe0304 09b0f87c c0100080 09b0f818 nt!KiSystemService+0xd0
    09b0f874 00000000 00000000 00000000 00000000 SharedUserData!SystemCallStub+0x4

    Author Comment

    LVL 20

    Accepted Solution

    Probably the culprit is Norton AV. Maybe Nortin AV conflicts with other device driver. Uninstall Norton AV may fix the problem.

    Mini052206-02.dmp BugCheck A, {80000004, 2, 1, 807490dc}
    Probably caused by : SYMEVENT.SYS ( SYMEVENT+10c7d )

    Mini052306-01.dmp BugCheck A, {80000004, 2, 1, 807490dc}
    Probably caused by : exifs.sys ( exifs+11805 )

    Mini052306-02.dmp BugCheck A, {80000004, 2, 1, 807490dc}
    Probably caused by : SYMEVENT.SYS ( SYMEVENT+3d3a )

    Mini052306-03.dmp BugCheck 24, {190329, f04f112c, f04f0d7c, 805899eb}
    Probably caused by : Ntfs.sys ( Ntfs!NtfsMapStream+44 )

    Mini052306-04.dmp BugCheck 24, {190329, f09cf0e0, f09ced30, 805899eb}
    Probably caused by : Ntfs.sys ( Ntfs!NtfsMapStream+44 )
    LVL 32

    Assisted Solution

    by:Robberbaron (robr)
    there has been a bug in SYMEVENT.SYS   Symantec update service event manager.

    I had 3 blue screens in 2 weeks.  Looked at the minidumps myself (thanks mainly to various explanatory posts by cpc2004 in various part of the web!) and the dumps all pointed the finger at SYSMEVENT.SYS

    a google turned up several refernces on boith MS and Symantec sites noting poblems with new versions of SYMEVENT, mainly with latest PC Anywhere installation.  Recommendation was to remove PCAnywhere !

    I suspect that they fixed it and perhaps autoupdated as i havent had problem for about a month.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    In the event you manage a Small Business Server 2003, and you are audited for PCI compliance, there are several changes you must make in order to pass the audit. I can take no credit for discovering any of these fixes or workarounds, but there is no…
    The SBS 2011 release date (RTM) is supposed to be around Christmas, 2011.  This article is a compilation of my notes -- things I have learned first hand.  The items are in a rather random order, but I think this list covers most of what is new and d…
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now