skippy997
asked on
Blue screen of death... RDR_FILE_SYSTEM
When I access a particular network drive N: and go into any folder to rename a file I get a blue screen of death. The following is from the screen.
RDR_FILE_SYSTEM
stop 0x00000027 (0xBAAD00A3,0XB76CF9EC,0XB 76CF6E8,0X EC621A09)
rdbss.sys -address EC621A09 base at EC61E000, Datestamp 445b1f4b
RDR_FILE_SYSTEM
stop 0x00000027 (0xBAAD00A3,0XB76CF9EC,0XB
rdbss.sys -address EC621A09 base at EC61E000, Datestamp 445b1f4b
Can you upload your dump so we can have a look?
ASKER
I tried to get to it but no luck. Any idea where to find it?
It looks like it is a problem with this service:
Redirected Drive Buffering SubSystem Driver
Try taking a look at the event viewer for any errors listed prior to the crash.
right click My Computer
select Manage
expand Event Viewer
select System and look for errors notices
select Application and look for error notices
Report anything you find.
also, try this:
Click start > run
type in "services.msc" without the quotes
look for the service for the driver I listed at the beginning. See if it says started or starting. If it is set for automatic, try disabling it and see what happens.
Redirected Drive Buffering SubSystem Driver
Try taking a look at the event viewer for any errors listed prior to the crash.
right click My Computer
select Manage
expand Event Viewer
select System and look for errors notices
select Application and look for error notices
Report anything you find.
also, try this:
Click start > run
type in "services.msc" without the quotes
look for the service for the driver I listed at the beginning. See if it says started or starting. If it is set for automatic, try disabling it and see what happens.
usually it sits in %systemroot%\memory.dmp
Or if its a MiniDump, it will be %SystemRoot%\Minidump
If you goto Sytem Properties (right click "my computer" -> properties). click on the Start and recovery Tab. at the bottom, you'll see your Dump Directory.
Or if its a MiniDump, it will be %SystemRoot%\Minidump
If you goto Sytem Properties (right click "my computer" -> properties). click on the Start and recovery Tab. at the bottom, you'll see your Dump Directory.
ASKER
I have included a doc from the Event Viewers and a complete memory dump.
Blue-scrn.doc
Blue-scrn.doc
ASKER
Here is the dump file
Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [E:\Mini041808-06.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image \WINDOWS\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Fri Apr 18 14:09:30.587 2008 (GMT-5)
System Uptime: 0 days 1:30:44.670
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image \WINDOWS\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Loading Kernel Symbols
............................................................................................................................................
Loading User Symbols
Loading unloaded module list
..............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 27, {baad00a3, b7da69ec, b7da66e8, ec621a09}
*** WARNING: Unable to verify timestamp for mssmbios.sys
*** ERROR: Module load completed but symbols could not be loaded for mssmbios.sys
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*** WARNING: Unable to verify timestamp for mrxsmb.sys
*** ERROR: Module load completed but symbols could not be loaded for mrxsmb.sys
*** WARNING: Unable to verify timestamp for fltMgr.sys
*** ERROR: Module load completed but symbols could not be loaded for fltMgr.sys
*** WARNING: Unable to verify timestamp for mfehidk.sys
*** ERROR: Module load completed but symbols could not be loaded for mfehidk.sys
*** WARNING: Unable to verify timestamp for Mup.sys
*** ERROR: Module load completed but symbols could not be loaded for Mup.sys
*** WARNING: Unable to verify timestamp for WavxDMgr.sys
*** ERROR: Module load completed but symbols could not be loaded for WavxDMgr.sys
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Probably caused by : rdbss.sys ( rdbss+3a09 )
Followup: MachineOwner
---------
----- 32 bit Kernel Mini Dump Analysis
DUMP_HEADER32:
MajorVersion 0000000f
MinorVersion 00000a28
KdSecondaryVersion 00000000
DirectoryTableBase 05148560
PfnDataBase 805610a8
PsLoadedModuleList 8055c700
PsActiveProcessHead 80562818
MachineImageType 0000014c
NumberProcessors 00000002
BugCheckCode 00000027
BugCheckParameter1 baad00a3
BugCheckParameter2 b7da69ec
BugCheckParameter3 b7da66e8
BugCheckParameter4 ec621a09
PaeEnabled 00000001
KdDebuggerDataBlock 8054c2e0
MiniDumpFields 000004ff
TRIAGE_DUMP32:
ServicePackBuild 00000200
SizeOfDump 00010000
ValidOffset 0000fffc
ContextOffset 00000320
ExceptionOffset 000007d0
MmOffset 00001068
UnloadedDriversOffset 000010a0
PrcbOffset 00001878
ProcessOffset 00002268
ThreadOffset 000024c0
CallStackOffset 00002720
SizeOfCallStack 00001664
DriverListOffset 00004018
DriverCount 0000008d
StringPoolOffset 000069f8
StringPoolSize 00002a78
BrokenDriverOffset 00000000
TriageOptions ffffffff
TopOfStack b7da64cc
DebuggerDataOffset 00003d88
DebuggerDataSize 00000290
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Fri Apr 18 14:09:30.587 2008 (GMT-5)
System Uptime: 0 days 1:30:44.670
start end module name
804d7000 806e2000 nt Wed Feb 28 03:15:54 2007 (45E5484A)
806e2000 80702c80 hal Wed Jun 22 19:05:52 2005 (42B9FCE0)
b6bcb000 b6be2480 dump_atapi Wed Aug 04 00:59:41 2004 (41107B4D)
b6be3000 b6c0d180 kmixer Wed Jun 14 03:47:45 2006 (448FCD31)
b7a77000 b7a8b400 wdmaud Wed Jun 14 04:00:44 2006 (448FD03C)
b7ab4000 b7ae5600 RMCast Thu Jul 13 03:48:58 2006 (44B608FA)
b7c26000 b7c362a0 mfeavfk Wed Jan 02 16:13:19 2008 (477C0C7F)
b7c5f000 b7c87340 mfehidk Wed Jan 02 16:11:32 2008 (477C0C14)
b7ce0000 b7ceed80 sysaudio Wed Aug 04 01:15:54 2004 (41107F1A)
b7de8000 b7df60a0 mfeapfk Wed Jan 02 16:12:32 2008 (477C0C50)
b7e40000 b7e51d00 mqac Fri Jul 06 05:05:46 2007 (468E13FA)
b7f42000 b7f93480 srv Mon Aug 14 05:34:39 2006 (44E051BF)
b7f94000 b8024000 CVPNDRVA Mon Jul 16 12:57:10 2007 (469BB176)
b80fc000 b8100000 mdmxsdk unavailable (00000000)
b813c000 b8167d80 mrxdav Tue Dec 18 03:51:33 2007 (47679825)
b83c0000 b83e8000 WavxDMgr unavailable (00000000)
b8404000 b8407280 ndisuio Wed Aug 04 01:03:10 2004 (41107C1E)
bf000000 bf011580 dxg Wed Aug 04 01:00:51 2004 (41107B93)
bf012000 bf056000 ati2dvag Wed Mar 28 21:02:35 2007 (460B1E3B)
bf056000 bf0ab000 ati2cqag Wed Mar 28 20:19:37 2007 (460B1429)
bf0ab000 bf0f7000 atikvmag Wed Mar 28 20:26:32 2007 (460B15C8)
bf0f7000 bf3a96c0 ati3duag Wed Mar 28 20:45:53 2007 (460B1A51)
bf3aa000 bf4e0c80 ativvaxx Wed Mar 28 20:39:44 2007 (460B18E0)
bf800000 bf9c2800 win32k Wed Mar 19 04:46:46 2008 (47E0E106)
ec5af000 ec61da80 mrxsmb Tue Jun 20 03:50:24 2006 (4497B6D0)
ec61e000 ec648a00 rdbss Fri May 05 04:47:55 2006 (445B1F4B)
ec649000 ec66ad00 afd Wed Aug 04 01:14:13 2004 (41107EB5)
ec66b000 ec692c00 netbt Wed Aug 04 01:14:36 2004 (41107ECC)
ec693000 ec6b3f00 ipnat Wed Sep 29 17:28:36 2004 (415B3714)
ec6b4000 ec6da000 FireTDI Tue Apr 12 17:29:56 2005 (425C4BE4)
ec6da000 ec731e80 tcpip Tue Oct 30 12:20:52 2007 (472767F4)
ec732000 ec744400 ipsec Wed Aug 04 01:14:27 2004 (41107EC3)
ec785000 ec787900 Dxapi Fri Aug 17 15:53:19 2001 (3B7D843F)
ec78d000 ec83f800 HSF_CNXT Thu Aug 02 19:34:21 2007 (46B2780D)
ec840000 ec931b00 HSF_DPV Thu Aug 02 19:35:09 2007 (46B2783D)
ec932000 ec965900 HSFHWAZL Thu Aug 02 19:34:27 2007 (46B27813)
ec966000 ec97dd00 dxec01 Thu Nov 02 13:32:30 2006 (454A39BE)
ec97e000 ec99f700 portcls Tue Mar 16 13:58:17 2004 (40574E49)
ec9a0000 ecabe740 sthda Mon Feb 19 10:43:15 2007 (45D9D3A3)
f6c69000 f6c78900 Cdfs Wed Aug 04 01:14:09 2004 (41107EB1)
f6cca000 f6cfd200 update Wed Aug 04 00:58:32 2004 (41107B08)
f6cfe000 f6d2e100 rdpdr Wed Aug 04 01:01:10 2004 (41107BA6)
f6d2f000 f6d3fe00 psched Wed Aug 04 01:04:16 2004 (41107C60)
f6d40000 f6d56680 ndiswan Wed Aug 04 01:14:30 2004 (41107EC6)
f6d67000 f6d6af00 APPDRV Wed Jun 30 10:39:34 2004 (40E2DEB6)
f6d6f000 f6d71f80 mouhid Fri Aug 17 15:47:57 2001 (3B7D82FD)
f6d73000 f6d75580 hidusb Fri Aug 17 16:02:16 2001 (3B7D8658)
f6d7f000 f6d9d000 dne2000 unavailable (00000000)
f6d9d000 f6dc1000 Apfiltr Sat Feb 17 06:00:40 2007 (45D6EE68)
f6dc1000 f6de7000 HDAudBus Thu Aug 12 19:45:52 2004 (411C0F40)
f6de7000 f6e09680 ks Wed Aug 04 01:15:20 2004 (41107EF8)
f6e0a000 f6e2cf00 USBPORT Tue Oct 25 18:39:41 2005 (435EC23D)
f6e2d000 f6e58000 b57xp32 Fri Feb 16 17:46:40 2007 (45D64260)
f6e58000 f6f6b000 bcmwl5 unavailable (00000000)
f6f6b000 f6f7ef00 VIDEOPRT Wed May 30 05:47:44 2007 (465D5650)
f6f7f000 f7193000 ati2mtag Wed Mar 28 21:02:17 2007 (460B1E29)
f71ec000 f7206580 Mup Wed Aug 04 01:15:20 2004 (41107EF8)
f7207000 f7233a80 NDIS Wed Aug 04 01:14:27 2004 (41107EC3)
f7234000 f72c0400 Ntfs Fri Feb 09 05:10:31 2007 (45CC56A7)
f72c1000 f72e0000 FirePM Tue Apr 12 17:37:30 2005 (425C4DAA)
f72e0000 f72f6780 KSecDD Wed Aug 04 00:59:45 2004 (41107B51)
f72f7000 f7316780 fltMgr Mon Aug 21 04:14:57 2006 (44E97991)
f7317000 f732e480 atapi Wed Aug 04 00:59:41 2004 (41107B4D)
f732f000 f7354700 dmio Wed Aug 04 01:07:13 2004 (41107D11)
f7355000 f7373880 ftdisk Fri Aug 17 15:52:41 2001 (3B7D8419)
f7374000 f7391480 pcmcia Wed Aug 04 01:07:45 2004 (41107D31)
f7392000 f73a2a80 pci Wed Aug 04 01:07:45 2004 (41107D31)
f73a3000 f73d0d80 ACPI Wed Aug 04 01:07:35 2004 (41107D27)
f74d2000 f74dac00 isapnp Fri Aug 17 15:58:01 2001 (3B7D8559)
f74e2000 f74ec500 MountMgr Wed Aug 04 00:58:29 2004 (41107B05)
f74f2000 f74fec80 VolSnap Wed Aug 04 01:00:14 2004 (41107B6E)
f7502000 f750ae00 disk Wed Aug 04 00:59:53 2004 (41107B59)
f7512000 f751e200 CLASSPNP Wed Aug 04 01:14:26 2004 (41107EC2)
f7522000 f752d000 PBADRV Mon Aug 28 16:00:43 2006 (44F3597B)
f7532000 f7540e80 ohci1394 Wed Aug 04 01:10:05 2004 (41107DBD)
f7542000 f754f000 1394BUS Wed Aug 04 01:10:03 2004 (41107DBB)
f7562000 f756b480 NDProxy Fri Aug 17 15:55:30 2001 (3B7D84C2)
f75a2000 f75b0480 usbhub Thu Jul 06 04:06:10 2006 (44ACD282)
f75c2000 f75d0b80 drmk Wed Aug 04 01:07:54 2004 (41107D3A)
f75e2000 f75ed140 mfetdik Wed Jan 02 16:12:22 2008 (477C0C46)
f75f2000 f7601180 nic1394 Wed Aug 04 00:58:28 2004 (41107B04)
f7602000 f760a700 wanarp Wed Aug 04 01:04:57 2004 (41107C89)
f7612000 f761a700 netbios Wed Aug 04 01:03:19 2004 (41107C27)
f7622000 f7630d80 arp1394 Wed Aug 04 00:58:28 2004 (41107B04)
f7642000 f764c000 Firehk5x Tue Apr 12 17:47:15 2005 (425C4FF3)
f7652000 f765a880 Fips Fri Aug 17 20:31:49 2001 (3B7DC585)
f7662000 f766ad80 HIDCLASS Wed Aug 04 01:08:18 2004 (41107D52)
f76a2000 f76aaa00 processr Wed Aug 04 00:59:14 2004 (41107B32)
f76b2000 f76be180 cdrom Wed Aug 04 00:59:52 2004 (41107B58)
f76c2000 f76d0080 redbook Wed Aug 04 00:59:34 2004 (41107B46)
f76d2000 f76dee00 i8042prt Wed Aug 04 01:14:36 2004 (41107ECC)
f76e2000 f76f1d80 serial Wed Aug 04 01:15:51 2004 (41107F17)
f76f2000 f76fe880 rasl2tp Wed Aug 04 01:14:21 2004 (41107EBD)
f7702000 f770c200 raspppoe Wed Aug 04 01:05:06 2004 (41107C92)
f7712000 f771dd00 raspptp Wed Aug 04 01:14:26 2004 (41107EC2)
f7722000 f772a900 msgpc Wed Aug 04 01:04:11 2004 (41107C5B)
f7732000 f773bf00 termdd Wed Aug 04 00:58:52 2004 (41107B1C)
f7752000 f7758200 PCIIDEX Wed Aug 04 00:59:40 2004 (41107B4C)
f775a000 f775e900 PartMgr Fri Aug 17 20:32:23 2001 (3B7DC5A7)
f779a000 f779e500 watchdog Wed Aug 04 01:07:32 2004 (41107D24)
f77a2000 f77a8a60 mfebopk Wed Jan 02 16:13:46 2008 (477C0C9A)
f781a000 f781e280 usbohci Wed Aug 04 01:08:34 2004 (41107D62)
f7822000 f7828a80 usbehci Tue Oct 25 18:39:41 2005 (435EC23D)
f782a000 f782fa00 mouclass Wed Aug 04 00:58:32 2004 (41107B08)
f7832000 f7838000 kbdclass Wed Aug 04 00:58:32 2004 (41107B08)
f783a000 f783e880 TDI Wed Aug 04 01:07:47 2004 (41107D33)
f7842000 f7846580 ptilink Fri Aug 17 15:49:53 2001 (3B7D8371)
f784a000 f784e080 raspti Fri Aug 17 15:55:32 2001 (3B7D84C4)
f7852000 f7857000 WaveFDE unavailable (00000000)
f785a000 f7861580 Modem Wed Aug 04 01:08:04 2004 (41107D44)
f786a000 f7870180 HIDPARSE Wed Aug 04 01:08:15 2004 (41107D4F)
f787a000 f787f200 vga Wed Aug 04 01:07:06 2004 (41107D0A)
f7882000 f7886a80 Msfs Wed Aug 04 01:00:37 2004 (41107B85)
f788a000 f7891880 Npfs Wed Aug 04 01:00:38 2004 (41107B86)
f7892000 f7898200 mferkdk Wed Jan 02 16:14:04 2008 (477C0CAC)
f78c2000 f78c6640 firelm01 Tue Apr 12 17:46:59 2005 (425C4FE3)
f78e2000 f78e5000 BOOTVID Fri Aug 17 15:49:09 2001 (3B7D8345)
f78e6000 f78e8480 compbatt Fri Aug 17 15:57:58 2001 (3B7D8556)
f78ea000 f78ed700 BATTC Fri Aug 17 15:57:52 2001 (3B7D8550)
f7972000 f7974280 rasacd Fri Aug 17 15:55:39 2001 (3B7D84CB)
f798a000 f798dc80 serenum Wed Aug 04 00:59:06 2004 (41107B2A)
f798e000 f7991700 CmBatt Wed Aug 04 01:07:39 2004 (41107D2B)
f7992000 f7994280 wmiacpi Wed Aug 04 01:07:39 2004 (41107D2B)
f799a000 f799c580 ndistapi Fri Aug 17 15:55:29 2001 (3B7D84C1)
f79b2000 f79b5c80 mssmbios Wed Aug 04 01:07:47 2004 (41107D33)
f79d2000 f79d3b80 kdcom Fri Aug 17 15:49:10 2001 (3B7D8346)
f79d4000 f79d5100 WMILIB Fri Aug 17 16:07:23 2001 (3B7D878B)
f79da000 f79db4c0 BASFND Thu Apr 24 18:16:49 2003 (3EA87061)
f79e6000 f79e7100 swenum Wed Aug 04 00:58:41 2004 (41107B11)
f79e8000 f79e9280 USBD Fri Aug 17 16:02:58 2001 (3B7D8682)
f79ec000 f79ee000 i2omgmt Wed Aug 04 01:00:50 2004 (41107B92)
f79ee000 f79eff00 Fs_Rec Fri Aug 17 15:49:37 2001 (3B7D8361)
f79f0000 f79f1080 Beep Fri Aug 17 15:47:33 2001 (3B7D82E5)
f79f4000 f79f5080 mnmdd Fri Aug 17 15:57:28 2001 (3B7D8538)
f79f6000 f79f7080 RDPCDD Fri Aug 17 15:46:56 2001 (3B7D82C0)
f7a06000 f7a07100 dump_WMILIB Fri Aug 17 16:07:23 2001 (3B7D878B)
f7a9a000 f7a9ad00 pciide Fri Aug 17 15:51:49 2001 (3B7D83E5)
f7a9b000 f7a9c000 atiide unavailable (00000000)
f7ac4000 f7ac4b80 Null Fri Aug 17 15:47:39 2001 (3B7D82EB)
f7ada000 f7adac00 audstub Fri Aug 17 15:59:40 2001 (3B7D85BC)
f7b7e000 f7b7ed00 dxgthk Fri Aug 17 15:53:12 2001 (3B7D8438)
Unloaded modules:
ec4cf000 ec4e7000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
b6be3000 b6c0e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b6be3000 b6c0e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b6cae000 b6cd9000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b7a01000 b7a2c000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7b25000 f7b26000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b7cc0000 b7ccd000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b7a54000 b7a77000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b7cd0000 b7cde000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7a4a000 f7a4c000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7632000 f763d000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f796e000 f7972000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7862000 f7867000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f71a8000 f71ab000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 27, {baad00a3, b7da69ec, b7da66e8, ec621a09}
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Probably caused by : rdbss.sys ( rdbss+3a09 )
Followup: MachineOwner
---------
Finished dump check
Can you upload the dump? the above output dosen't have symbols loaded
ASKER
It won't allow a .dmp file to be upload. So I used MS tool to view the minidump.dmp and paste it into a text file which I attached as an code snippet above.
ASKER
I change the file extension from .dmp to .txt so I could upload it.
Mini041808-06.txt
Mini041808-06.txt
You have Daemon Tools in your Faulting Stack:
STACK_TEXT:
b7da6ac4 ec62931d 831dac78 831a1a38 b7da6b68 rdbss!RxIsThisACscAgentOpe n+0x38
b7da6ae4 ec629ae1 00000000 b7da6b14 b7da6b24 rdbss!RxInitializeVNetRoot Parameters +0x282
b7da6b44 ec62c57f 832069c8 b7da6b68 00000004 rdbss!RxFindOrConstructVir tualNetRoo t+0xdc
b7da6b78 ec628d01 831dac78 8239c4f0 b7da6bc8 rdbss!RxCanonicalizeNameAn dObtainNet Root+0x197
b7da6bdc ec61ed51 831dac78 8239c4c0 ec6277a8 rdbss!RxCommonCreate+0x2c3
b7da6c74 ec628bb0 ec6277a8 823c0000 823c009c rdbss!RxFsdCommonDispatch+ 0x353
b7da6c9c ec5d3297 841a8030 823c0000 00000000 rdbss!RxFsdDispatch+0xda
b7da6cbc 804ef163 00000000 013c0008 823c0008 mrxsmb!MRxSmbFsdDispatch+0 x134
b7da6ccc f72fae9b 00000000 823c0008 823c00c0 nt!IopfCallDriver+0x31
b7da6cf0 f7307448 b7da6d10 848f2e60 00000000 fltMgr!FltpLegacyProcessin gAfterPreC allbacksCo mpleted+0x 20b
b7da6d2c 804ef163 848f2e60 823c0008 823c0108 fltMgr!FltpCreate+0x26a
b7da6d3c b7c74f08 823c0008 84a83428 823c00e4 nt!IopfCallDriver+0x31
WARNING: Stack unwind information not available. Following frames may be wrong.
b7da6d64 b7c66691 823c0008 b7da6de8 823c0108 mfehidk+0x15f08
b7da6df0 b7c74167 8239c4c0 823c0008 b7da6e28 mfehidk+0x7691
b7da6e00 b7c741b7 b7da6e10 8430e030 8270eda0 mfehidk+0x15167
b7da6e28 804ef163 8270eda0 823c0008 8239c4c0 mfehidk+0x151b7
b7da6e38 f71fbc39 823a6bec 823a6be8 00000000 nt!IopfCallDriver+0x31
b7da6e6c f71fd186 823a6be8 f71f0308 823a6be8 Mup!DnrRedirectFileOpen+0x 437
b7da6ef0 f71fe266 013a6be8 00380024 823c0108 Mup!DnrNameResolve+0x6d5
b7da6f20 f71f842c 848e3e98 823c0008 825804f8 Mup!DnrStartNameResolution +0x280
b7da6f90 f71f67ec 848e3e98 82580440 823c0008 Mup!DfsCommonCreate+0x237
b7da6fd8 f71f688c 82580440 823c0008 823c0018 Mup!DfsFsdCreate+0xe0
b7da7030 804ef163 82580440 823c0008 823c0008 Mup!MupCreate+0xbc
b7da7040 80581fe2 82580428 831c271c b7da71d8 nt!IopfCallDriver+0x31
b7da7120 805bdf06 82580440 00000000 831c2678 nt!IopParseDevice+0xa12
b7da7198 805ba58e 00000000 b7da71d8 00000240 nt!ObpLookupObjectName+0x5 3c
b7da71ec 80574f33 00000000 00000000 da726c00 nt!ObOpenObjectByName+0xea
b7da7268 80575920 84ad8d50 00100000 b7da7300 nt!IopCreateFile+0x407
b7da72b0 f730d913 84ad8d50 00100000 b7da7300 nt!IoCreateFileSpecifyDevi ceObjectHi nt+0x52
b7da7358 f730dc81 00000000 00000000 b7da73f0 fltMgr!FltpExpandFilePathW orker+0x11 7
b7da7370 f730e15d 84ad8d08 00000000 84ad8d08 fltMgr!FltpExpandFilePath+ 0x19
b7da73a4 f730e1a5 84ad8d08 84ad8d08 b7da74f4 fltMgr!FltpGetOpenedDestin ationFileN ame+0x2b9
b7da73b4 f730e331 84ad8d08 b7da75e0 82372f5c fltMgr!FltpGetNormalizedDe stinationF ileName+0x 13
b7da74f4 b83d3eea 848c9b20 823e6a38 00000000 fltMgr!FltGetDestinationFi leNameInfo rmation+0x 12b
b7da7568 b83c0e1a 82372f5c b7da75e0 b7da7610 WavxDMgr+0x13eea
b7da75c0 f72f8888 82372f5c b7da75e0 b7da7610 WavxDMgr+0xe1a
b7da7620 f72fa2a0 00da7668 00000000 b7da7668 fltMgr!FltpPerformPreCallb acks+0x2d4
b7da7634 f72fac48 b7da7668 00000000 848f2e60 fltMgr!FltpPassThroughInte rnal+0x32
b7da7650 f72fb059 b7da7600 832b1f04 84b74470 fltMgr!FltpPassThrough+0x1 c2
b7da7680 804ef163 848f2e60 832b1e28 84a83428 fltMgr!FltpDispatch+0x10d
b7da7690 b7c666d5 832b1f28 b7da7734 00000000 nt!IopfCallDriver+0x31
b7da7714 b7c74167 823e6a38 832b1e28 b7da774c mfehidk+0x76d5
b7da7724 b7c741b7 b7da7734 8430e030 8270eda0 mfehidk+0x15167
b7da774c 804ef163 8270eda0 832b1e28 832b1f4c mfehidk+0x151b7
b7da775c f71fed5a 832b1f28 84b576d8 832b1e28 nt!IopfCallDriver+0x31
b7da77a0 f71fee55 82684a30 832b1e28 832b1f28 Mup!DfsCommonSetInformatio n+0xa3
b7da77e0 804ef163 82580440 832b1e28 00000000 Mup!DfsFsdSetInformation+0 x63
b7da77f0 8057a3cf b7da7894 00dfd59c 80579eac nt!IopfCallDriver+0x31
b7da7878 805409ac 000003e4 00dfd610 00143848 nt!NtSetInformationFile+0x 523
b7da7878 7c90eb94 000003e4 00dfd610 00143848 nt!KiFastCallEntry+0xfc
00dfd654 00000000 00000000 00000000 00000000 0x7c90eb94
Can you remove Dameon Tools and see if you still bluescreen?
i found some articles talking about Daemon Tools not playing nice with Mcafee Products.
https://knowledge.mcafee.com/article/529/KB47537_f.SAL_Public.html
STACK_TEXT:
b7da6ac4 ec62931d 831dac78 831a1a38 b7da6b68 rdbss!RxIsThisACscAgentOpe
b7da6ae4 ec629ae1 00000000 b7da6b14 b7da6b24 rdbss!RxInitializeVNetRoot
b7da6b44 ec62c57f 832069c8 b7da6b68 00000004 rdbss!RxFindOrConstructVir
b7da6b78 ec628d01 831dac78 8239c4f0 b7da6bc8 rdbss!RxCanonicalizeNameAn
b7da6bdc ec61ed51 831dac78 8239c4c0 ec6277a8 rdbss!RxCommonCreate+0x2c3
b7da6c74 ec628bb0 ec6277a8 823c0000 823c009c rdbss!RxFsdCommonDispatch+
b7da6c9c ec5d3297 841a8030 823c0000 00000000 rdbss!RxFsdDispatch+0xda
b7da6cbc 804ef163 00000000 013c0008 823c0008 mrxsmb!MRxSmbFsdDispatch+0
b7da6ccc f72fae9b 00000000 823c0008 823c00c0 nt!IopfCallDriver+0x31
b7da6cf0 f7307448 b7da6d10 848f2e60 00000000 fltMgr!FltpLegacyProcessin
b7da6d2c 804ef163 848f2e60 823c0008 823c0108 fltMgr!FltpCreate+0x26a
b7da6d3c b7c74f08 823c0008 84a83428 823c00e4 nt!IopfCallDriver+0x31
WARNING: Stack unwind information not available. Following frames may be wrong.
b7da6d64 b7c66691 823c0008 b7da6de8 823c0108 mfehidk+0x15f08
b7da6df0 b7c74167 8239c4c0 823c0008 b7da6e28 mfehidk+0x7691
b7da6e00 b7c741b7 b7da6e10 8430e030 8270eda0 mfehidk+0x15167
b7da6e28 804ef163 8270eda0 823c0008 8239c4c0 mfehidk+0x151b7
b7da6e38 f71fbc39 823a6bec 823a6be8 00000000 nt!IopfCallDriver+0x31
b7da6e6c f71fd186 823a6be8 f71f0308 823a6be8 Mup!DnrRedirectFileOpen+0x
b7da6ef0 f71fe266 013a6be8 00380024 823c0108 Mup!DnrNameResolve+0x6d5
b7da6f20 f71f842c 848e3e98 823c0008 825804f8 Mup!DnrStartNameResolution
b7da6f90 f71f67ec 848e3e98 82580440 823c0008 Mup!DfsCommonCreate+0x237
b7da6fd8 f71f688c 82580440 823c0008 823c0018 Mup!DfsFsdCreate+0xe0
b7da7030 804ef163 82580440 823c0008 823c0008 Mup!MupCreate+0xbc
b7da7040 80581fe2 82580428 831c271c b7da71d8 nt!IopfCallDriver+0x31
b7da7120 805bdf06 82580440 00000000 831c2678 nt!IopParseDevice+0xa12
b7da7198 805ba58e 00000000 b7da71d8 00000240 nt!ObpLookupObjectName+0x5
b7da71ec 80574f33 00000000 00000000 da726c00 nt!ObOpenObjectByName+0xea
b7da7268 80575920 84ad8d50 00100000 b7da7300 nt!IopCreateFile+0x407
b7da72b0 f730d913 84ad8d50 00100000 b7da7300 nt!IoCreateFileSpecifyDevi
b7da7358 f730dc81 00000000 00000000 b7da73f0 fltMgr!FltpExpandFilePathW
b7da7370 f730e15d 84ad8d08 00000000 84ad8d08 fltMgr!FltpExpandFilePath+
b7da73a4 f730e1a5 84ad8d08 84ad8d08 b7da74f4 fltMgr!FltpGetOpenedDestin
b7da73b4 f730e331 84ad8d08 b7da75e0 82372f5c fltMgr!FltpGetNormalizedDe
b7da74f4 b83d3eea 848c9b20 823e6a38 00000000 fltMgr!FltGetDestinationFi
b7da7568 b83c0e1a 82372f5c b7da75e0 b7da7610 WavxDMgr+0x13eea
b7da75c0 f72f8888 82372f5c b7da75e0 b7da7610 WavxDMgr+0xe1a
b7da7620 f72fa2a0 00da7668 00000000 b7da7668 fltMgr!FltpPerformPreCallb
b7da7634 f72fac48 b7da7668 00000000 848f2e60 fltMgr!FltpPassThroughInte
b7da7650 f72fb059 b7da7600 832b1f04 84b74470 fltMgr!FltpPassThrough+0x1
b7da7680 804ef163 848f2e60 832b1e28 84a83428 fltMgr!FltpDispatch+0x10d
b7da7690 b7c666d5 832b1f28 b7da7734 00000000 nt!IopfCallDriver+0x31
b7da7714 b7c74167 823e6a38 832b1e28 b7da774c mfehidk+0x76d5
b7da7724 b7c741b7 b7da7734 8430e030 8270eda0 mfehidk+0x15167
b7da774c 804ef163 8270eda0 832b1e28 832b1f4c mfehidk+0x151b7
b7da775c f71fed5a 832b1f28 84b576d8 832b1e28 nt!IopfCallDriver+0x31
b7da77a0 f71fee55 82684a30 832b1e28 832b1f28 Mup!DfsCommonSetInformatio
b7da77e0 804ef163 82580440 832b1e28 00000000 Mup!DfsFsdSetInformation+0
b7da77f0 8057a3cf b7da7894 00dfd59c 80579eac nt!IopfCallDriver+0x31
b7da7878 805409ac 000003e4 00dfd610 00143848 nt!NtSetInformationFile+0x
b7da7878 7c90eb94 000003e4 00dfd610 00143848 nt!KiFastCallEntry+0xfc
00dfd654 00000000 00000000 00000000 00000000 0x7c90eb94
Can you remove Dameon Tools and see if you still bluescreen?
i found some articles talking about Daemon Tools not playing nice with Mcafee Products.
https://knowledge.mcafee.com/article/529/KB47537_f.SAL_Public.html
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
By any chance was this a Dell workstation?