Link to home
Start Free TrialLog in
Avatar of skippy997
skippy997

asked on

Blue screen of death... RDR_FILE_SYSTEM

When I access a particular network drive N: and go into any folder to rename a file I get a blue screen of death.  The following is from the screen.
RDR_FILE_SYSTEM
stop 0x00000027 (0xBAAD00A3,0XB76CF9EC,0XB76CF6E8,0XEC621A09)

rdbss.sys -address EC621A09 base at EC61E000, Datestamp 445b1f4b
Avatar of xentelworker
xentelworker
Flag of Canada image

Can you upload your dump so we can have a look?
Avatar of skippy997
skippy997

ASKER

I tried to get to it but no luck.  Any idea where to find it?
It looks like it is a problem with this service:
Redirected Drive Buffering SubSystem Driver

Try taking a look at the event viewer for any errors listed prior to the crash.

right click My Computer
select Manage
expand Event Viewer
select System and look for errors notices
select Application and look for error notices

Report anything you find.

also, try this:

Click start > run
type in "services.msc"   without the quotes

look for the service for the driver I listed at the beginning. See if it says started or starting. If it is set for automatic, try disabling it and see what happens.
usually it sits in %systemroot%\memory.dmp

Or if its a MiniDump, it will be %SystemRoot%\Minidump

If you goto Sytem Properties (right click "my computer" -> properties). click on the Start and recovery Tab. at the bottom, you'll see your Dump Directory.
I have included a doc from the Event Viewers and a complete memory dump.
Blue-scrn.doc
Here is the dump file

Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.
 
 
Loading Dump File [E:\Mini041808-06.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
 
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path.           *
* Use .symfix to have the debugger choose a symbol path.                   *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is: 
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
*                                                                   *
* The Symbol Path can be set by:                                    *
*   using the _NT_SYMBOL_PATH environment variable.                 *
*   using the -y <symbol_path> argument when starting the debugger. *
*   using .sympath and .sympath+                                    *
*********************************************************************
Unable to load image \WINDOWS\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Fri Apr 18 14:09:30.587 2008 (GMT-5)
System Uptime: 0 days 1:30:44.670
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
*                                                                   *
* The Symbol Path can be set by:                                    *
*   using the _NT_SYMBOL_PATH environment variable.                 *
*   using the -y <symbol_path> argument when starting the debugger. *
*   using .sympath and .sympath+                                    *
*********************************************************************
Unable to load image \WINDOWS\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Loading Kernel Symbols
............................................................................................................................................
Loading User Symbols
Loading unloaded module list
..............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
 
Use !analyze -v to get detailed debugging information.
 
BugCheck 27, {baad00a3, b7da69ec, b7da66e8, ec621a09}
 
*** WARNING: Unable to verify timestamp for mssmbios.sys
*** ERROR: Module load completed but symbols could not be loaded for mssmbios.sys
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
 
*** WARNING: Unable to verify timestamp for mrxsmb.sys
*** ERROR: Module load completed but symbols could not be loaded for mrxsmb.sys
*** WARNING: Unable to verify timestamp for fltMgr.sys
*** ERROR: Module load completed but symbols could not be loaded for fltMgr.sys
*** WARNING: Unable to verify timestamp for mfehidk.sys
*** ERROR: Module load completed but symbols could not be loaded for mfehidk.sys
*** WARNING: Unable to verify timestamp for Mup.sys
*** ERROR: Module load completed but symbols could not be loaded for Mup.sys
*** WARNING: Unable to verify timestamp for WavxDMgr.sys
*** ERROR: Module load completed but symbols could not be loaded for WavxDMgr.sys
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
*                                                                   *
* The Symbol Path can be set by:                                    *
*   using the _NT_SYMBOL_PATH environment variable.                 *
*   using the -y <symbol_path> argument when starting the debugger. *
*   using .sympath and .sympath+                                    *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
*                                                                   *
* The Symbol Path can be set by:                                    *
*   using the _NT_SYMBOL_PATH environment variable.                 *
*   using the -y <symbol_path> argument when starting the debugger. *
*   using .sympath and .sympath+                                    *
*********************************************************************
Probably caused by : rdbss.sys ( rdbss+3a09 )
 
Followup: MachineOwner
---------
 
----- 32 bit Kernel Mini Dump Analysis
 
DUMP_HEADER32:
MajorVersion        0000000f
MinorVersion        00000a28
KdSecondaryVersion  00000000
DirectoryTableBase  05148560
PfnDataBase         805610a8
PsLoadedModuleList  8055c700
PsActiveProcessHead 80562818
MachineImageType    0000014c
NumberProcessors    00000002
BugCheckCode        00000027
BugCheckParameter1  baad00a3
BugCheckParameter2  b7da69ec
BugCheckParameter3  b7da66e8
BugCheckParameter4  ec621a09
PaeEnabled          00000001
KdDebuggerDataBlock 8054c2e0
MiniDumpFields      000004ff 
 
TRIAGE_DUMP32:
ServicePackBuild      00000200 
SizeOfDump            00010000 
ValidOffset           0000fffc 
ContextOffset         00000320 
ExceptionOffset       000007d0 
MmOffset              00001068 
UnloadedDriversOffset 000010a0 
PrcbOffset            00001878 
ProcessOffset         00002268 
ThreadOffset          000024c0 
CallStackOffset       00002720 
SizeOfCallStack       00001664 
DriverListOffset      00004018 
DriverCount           0000008d 
StringPoolOffset      000069f8 
StringPoolSize        00002a78 
BrokenDriverOffset    00000000 
TriageOptions         ffffffff 
TopOfStack            b7da64cc 
DebuggerDataOffset    00003d88 
DebuggerDataSize      00000290 
 
 
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Fri Apr 18 14:09:30.587 2008 (GMT-5)
System Uptime: 0 days 1:30:44.670
start    end        module name
804d7000 806e2000   nt        Wed Feb 28 03:15:54 2007 (45E5484A)
806e2000 80702c80   hal       Wed Jun 22 19:05:52 2005 (42B9FCE0)
b6bcb000 b6be2480   dump_atapi  Wed Aug 04 00:59:41 2004 (41107B4D)
b6be3000 b6c0d180   kmixer    Wed Jun 14 03:47:45 2006 (448FCD31)
b7a77000 b7a8b400   wdmaud    Wed Jun 14 04:00:44 2006 (448FD03C)
b7ab4000 b7ae5600   RMCast    Thu Jul 13 03:48:58 2006 (44B608FA)
b7c26000 b7c362a0   mfeavfk   Wed Jan 02 16:13:19 2008 (477C0C7F)
b7c5f000 b7c87340   mfehidk   Wed Jan 02 16:11:32 2008 (477C0C14)
b7ce0000 b7ceed80   sysaudio  Wed Aug 04 01:15:54 2004 (41107F1A)
b7de8000 b7df60a0   mfeapfk   Wed Jan 02 16:12:32 2008 (477C0C50)
b7e40000 b7e51d00   mqac      Fri Jul 06 05:05:46 2007 (468E13FA)
b7f42000 b7f93480   srv       Mon Aug 14 05:34:39 2006 (44E051BF)
b7f94000 b8024000   CVPNDRVA  Mon Jul 16 12:57:10 2007 (469BB176)
b80fc000 b8100000   mdmxsdk   unavailable (00000000)
b813c000 b8167d80   mrxdav    Tue Dec 18 03:51:33 2007 (47679825)
b83c0000 b83e8000   WavxDMgr  unavailable (00000000)
b8404000 b8407280   ndisuio   Wed Aug 04 01:03:10 2004 (41107C1E)
bf000000 bf011580   dxg       Wed Aug 04 01:00:51 2004 (41107B93)
bf012000 bf056000   ati2dvag  Wed Mar 28 21:02:35 2007 (460B1E3B)
bf056000 bf0ab000   ati2cqag  Wed Mar 28 20:19:37 2007 (460B1429)
bf0ab000 bf0f7000   atikvmag  Wed Mar 28 20:26:32 2007 (460B15C8)
bf0f7000 bf3a96c0   ati3duag  Wed Mar 28 20:45:53 2007 (460B1A51)
bf3aa000 bf4e0c80   ativvaxx  Wed Mar 28 20:39:44 2007 (460B18E0)
bf800000 bf9c2800   win32k    Wed Mar 19 04:46:46 2008 (47E0E106)
ec5af000 ec61da80   mrxsmb    Tue Jun 20 03:50:24 2006 (4497B6D0)
ec61e000 ec648a00   rdbss     Fri May 05 04:47:55 2006 (445B1F4B)
ec649000 ec66ad00   afd       Wed Aug 04 01:14:13 2004 (41107EB5)
ec66b000 ec692c00   netbt     Wed Aug 04 01:14:36 2004 (41107ECC)
ec693000 ec6b3f00   ipnat     Wed Sep 29 17:28:36 2004 (415B3714)
ec6b4000 ec6da000   FireTDI   Tue Apr 12 17:29:56 2005 (425C4BE4)
ec6da000 ec731e80   tcpip     Tue Oct 30 12:20:52 2007 (472767F4)
ec732000 ec744400   ipsec     Wed Aug 04 01:14:27 2004 (41107EC3)
ec785000 ec787900   Dxapi     Fri Aug 17 15:53:19 2001 (3B7D843F)
ec78d000 ec83f800   HSF_CNXT  Thu Aug 02 19:34:21 2007 (46B2780D)
ec840000 ec931b00   HSF_DPV   Thu Aug 02 19:35:09 2007 (46B2783D)
ec932000 ec965900   HSFHWAZL  Thu Aug 02 19:34:27 2007 (46B27813)
ec966000 ec97dd00   dxec01    Thu Nov 02 13:32:30 2006 (454A39BE)
ec97e000 ec99f700   portcls   Tue Mar 16 13:58:17 2004 (40574E49)
ec9a0000 ecabe740   sthda     Mon Feb 19 10:43:15 2007 (45D9D3A3)
f6c69000 f6c78900   Cdfs      Wed Aug 04 01:14:09 2004 (41107EB1)
f6cca000 f6cfd200   update    Wed Aug 04 00:58:32 2004 (41107B08)
f6cfe000 f6d2e100   rdpdr     Wed Aug 04 01:01:10 2004 (41107BA6)
f6d2f000 f6d3fe00   psched    Wed Aug 04 01:04:16 2004 (41107C60)
f6d40000 f6d56680   ndiswan   Wed Aug 04 01:14:30 2004 (41107EC6)
f6d67000 f6d6af00   APPDRV    Wed Jun 30 10:39:34 2004 (40E2DEB6)
f6d6f000 f6d71f80   mouhid    Fri Aug 17 15:47:57 2001 (3B7D82FD)
f6d73000 f6d75580   hidusb    Fri Aug 17 16:02:16 2001 (3B7D8658)
f6d7f000 f6d9d000   dne2000   unavailable (00000000)
f6d9d000 f6dc1000   Apfiltr   Sat Feb 17 06:00:40 2007 (45D6EE68)
f6dc1000 f6de7000   HDAudBus  Thu Aug 12 19:45:52 2004 (411C0F40)
f6de7000 f6e09680   ks        Wed Aug 04 01:15:20 2004 (41107EF8)
f6e0a000 f6e2cf00   USBPORT   Tue Oct 25 18:39:41 2005 (435EC23D)
f6e2d000 f6e58000   b57xp32   Fri Feb 16 17:46:40 2007 (45D64260)
f6e58000 f6f6b000   bcmwl5    unavailable (00000000)
f6f6b000 f6f7ef00   VIDEOPRT  Wed May 30 05:47:44 2007 (465D5650)
f6f7f000 f7193000   ati2mtag  Wed Mar 28 21:02:17 2007 (460B1E29)
f71ec000 f7206580   Mup       Wed Aug 04 01:15:20 2004 (41107EF8)
f7207000 f7233a80   NDIS      Wed Aug 04 01:14:27 2004 (41107EC3)
f7234000 f72c0400   Ntfs      Fri Feb 09 05:10:31 2007 (45CC56A7)
f72c1000 f72e0000   FirePM    Tue Apr 12 17:37:30 2005 (425C4DAA)
f72e0000 f72f6780   KSecDD    Wed Aug 04 00:59:45 2004 (41107B51)
f72f7000 f7316780   fltMgr    Mon Aug 21 04:14:57 2006 (44E97991)
f7317000 f732e480   atapi     Wed Aug 04 00:59:41 2004 (41107B4D)
f732f000 f7354700   dmio      Wed Aug 04 01:07:13 2004 (41107D11)
f7355000 f7373880   ftdisk    Fri Aug 17 15:52:41 2001 (3B7D8419)
f7374000 f7391480   pcmcia    Wed Aug 04 01:07:45 2004 (41107D31)
f7392000 f73a2a80   pci       Wed Aug 04 01:07:45 2004 (41107D31)
f73a3000 f73d0d80   ACPI      Wed Aug 04 01:07:35 2004 (41107D27)
f74d2000 f74dac00   isapnp    Fri Aug 17 15:58:01 2001 (3B7D8559)
f74e2000 f74ec500   MountMgr  Wed Aug 04 00:58:29 2004 (41107B05)
f74f2000 f74fec80   VolSnap   Wed Aug 04 01:00:14 2004 (41107B6E)
f7502000 f750ae00   disk      Wed Aug 04 00:59:53 2004 (41107B59)
f7512000 f751e200   CLASSPNP  Wed Aug 04 01:14:26 2004 (41107EC2)
f7522000 f752d000   PBADRV    Mon Aug 28 16:00:43 2006 (44F3597B)
f7532000 f7540e80   ohci1394  Wed Aug 04 01:10:05 2004 (41107DBD)
f7542000 f754f000   1394BUS   Wed Aug 04 01:10:03 2004 (41107DBB)
f7562000 f756b480   NDProxy   Fri Aug 17 15:55:30 2001 (3B7D84C2)
f75a2000 f75b0480   usbhub    Thu Jul 06 04:06:10 2006 (44ACD282)
f75c2000 f75d0b80   drmk      Wed Aug 04 01:07:54 2004 (41107D3A)
f75e2000 f75ed140   mfetdik   Wed Jan 02 16:12:22 2008 (477C0C46)
f75f2000 f7601180   nic1394   Wed Aug 04 00:58:28 2004 (41107B04)
f7602000 f760a700   wanarp    Wed Aug 04 01:04:57 2004 (41107C89)
f7612000 f761a700   netbios   Wed Aug 04 01:03:19 2004 (41107C27)
f7622000 f7630d80   arp1394   Wed Aug 04 00:58:28 2004 (41107B04)
f7642000 f764c000   Firehk5x  Tue Apr 12 17:47:15 2005 (425C4FF3)
f7652000 f765a880   Fips      Fri Aug 17 20:31:49 2001 (3B7DC585)
f7662000 f766ad80   HIDCLASS  Wed Aug 04 01:08:18 2004 (41107D52)
f76a2000 f76aaa00   processr  Wed Aug 04 00:59:14 2004 (41107B32)
f76b2000 f76be180   cdrom     Wed Aug 04 00:59:52 2004 (41107B58)
f76c2000 f76d0080   redbook   Wed Aug 04 00:59:34 2004 (41107B46)
f76d2000 f76dee00   i8042prt  Wed Aug 04 01:14:36 2004 (41107ECC)
f76e2000 f76f1d80   serial    Wed Aug 04 01:15:51 2004 (41107F17)
f76f2000 f76fe880   rasl2tp   Wed Aug 04 01:14:21 2004 (41107EBD)
f7702000 f770c200   raspppoe  Wed Aug 04 01:05:06 2004 (41107C92)
f7712000 f771dd00   raspptp   Wed Aug 04 01:14:26 2004 (41107EC2)
f7722000 f772a900   msgpc     Wed Aug 04 01:04:11 2004 (41107C5B)
f7732000 f773bf00   termdd    Wed Aug 04 00:58:52 2004 (41107B1C)
f7752000 f7758200   PCIIDEX   Wed Aug 04 00:59:40 2004 (41107B4C)
f775a000 f775e900   PartMgr   Fri Aug 17 20:32:23 2001 (3B7DC5A7)
f779a000 f779e500   watchdog  Wed Aug 04 01:07:32 2004 (41107D24)
f77a2000 f77a8a60   mfebopk   Wed Jan 02 16:13:46 2008 (477C0C9A)
f781a000 f781e280   usbohci   Wed Aug 04 01:08:34 2004 (41107D62)
f7822000 f7828a80   usbehci   Tue Oct 25 18:39:41 2005 (435EC23D)
f782a000 f782fa00   mouclass  Wed Aug 04 00:58:32 2004 (41107B08)
f7832000 f7838000   kbdclass  Wed Aug 04 00:58:32 2004 (41107B08)
f783a000 f783e880   TDI       Wed Aug 04 01:07:47 2004 (41107D33)
f7842000 f7846580   ptilink   Fri Aug 17 15:49:53 2001 (3B7D8371)
f784a000 f784e080   raspti    Fri Aug 17 15:55:32 2001 (3B7D84C4)
f7852000 f7857000   WaveFDE   unavailable (00000000)
f785a000 f7861580   Modem     Wed Aug 04 01:08:04 2004 (41107D44)
f786a000 f7870180   HIDPARSE  Wed Aug 04 01:08:15 2004 (41107D4F)
f787a000 f787f200   vga       Wed Aug 04 01:07:06 2004 (41107D0A)
f7882000 f7886a80   Msfs      Wed Aug 04 01:00:37 2004 (41107B85)
f788a000 f7891880   Npfs      Wed Aug 04 01:00:38 2004 (41107B86)
f7892000 f7898200   mferkdk   Wed Jan 02 16:14:04 2008 (477C0CAC)
f78c2000 f78c6640   firelm01  Tue Apr 12 17:46:59 2005 (425C4FE3)
f78e2000 f78e5000   BOOTVID   Fri Aug 17 15:49:09 2001 (3B7D8345)
f78e6000 f78e8480   compbatt  Fri Aug 17 15:57:58 2001 (3B7D8556)
f78ea000 f78ed700   BATTC     Fri Aug 17 15:57:52 2001 (3B7D8550)
f7972000 f7974280   rasacd    Fri Aug 17 15:55:39 2001 (3B7D84CB)
f798a000 f798dc80   serenum   Wed Aug 04 00:59:06 2004 (41107B2A)
f798e000 f7991700   CmBatt    Wed Aug 04 01:07:39 2004 (41107D2B)
f7992000 f7994280   wmiacpi   Wed Aug 04 01:07:39 2004 (41107D2B)
f799a000 f799c580   ndistapi  Fri Aug 17 15:55:29 2001 (3B7D84C1)
f79b2000 f79b5c80   mssmbios  Wed Aug 04 01:07:47 2004 (41107D33)
f79d2000 f79d3b80   kdcom     Fri Aug 17 15:49:10 2001 (3B7D8346)
f79d4000 f79d5100   WMILIB    Fri Aug 17 16:07:23 2001 (3B7D878B)
f79da000 f79db4c0   BASFND    Thu Apr 24 18:16:49 2003 (3EA87061)
f79e6000 f79e7100   swenum    Wed Aug 04 00:58:41 2004 (41107B11)
f79e8000 f79e9280   USBD      Fri Aug 17 16:02:58 2001 (3B7D8682)
f79ec000 f79ee000   i2omgmt   Wed Aug 04 01:00:50 2004 (41107B92)
f79ee000 f79eff00   Fs_Rec    Fri Aug 17 15:49:37 2001 (3B7D8361)
f79f0000 f79f1080   Beep      Fri Aug 17 15:47:33 2001 (3B7D82E5)
f79f4000 f79f5080   mnmdd     Fri Aug 17 15:57:28 2001 (3B7D8538)
f79f6000 f79f7080   RDPCDD    Fri Aug 17 15:46:56 2001 (3B7D82C0)
f7a06000 f7a07100   dump_WMILIB  Fri Aug 17 16:07:23 2001 (3B7D878B)
f7a9a000 f7a9ad00   pciide    Fri Aug 17 15:51:49 2001 (3B7D83E5)
f7a9b000 f7a9c000   atiide    unavailable (00000000)
f7ac4000 f7ac4b80   Null      Fri Aug 17 15:47:39 2001 (3B7D82EB)
f7ada000 f7adac00   audstub   Fri Aug 17 15:59:40 2001 (3B7D85BC)
f7b7e000 f7b7ed00   dxgthk    Fri Aug 17 15:53:12 2001 (3B7D8438)
 
Unloaded modules:
ec4cf000 ec4e7000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
b6be3000 b6c0e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
b6be3000 b6c0e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
b6cae000 b6cd9000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
b7a01000 b7a2c000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f7b25000 f7b26000   drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
b7cc0000 b7ccd000   DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
b7a54000 b7a77000   aec.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
b7cd0000 b7cde000   swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f7a4a000 f7a4c000   splitter.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f7632000 f763d000   imapi.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f796e000 f7972000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f7862000 f7867000   Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f71a8000 f71ab000   Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
 
Use !analyze -v to get detailed debugging information.
 
BugCheck 27, {baad00a3, b7da69ec, b7da66e8, ec621a09}
 
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
 
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
*                                                                   *
* The Symbol Path can be set by:                                    *
*   using the _NT_SYMBOL_PATH environment variable.                 *
*   using the -y <symbol_path> argument when starting the debugger. *
*   using .sympath and .sympath+                                    *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
*                                                                   *
* The Symbol Path can be set by:                                    *
*   using the _NT_SYMBOL_PATH environment variable.                 *
*   using the -y <symbol_path> argument when starting the debugger. *
*   using .sympath and .sympath+                                    *
*********************************************************************
Probably caused by : rdbss.sys ( rdbss+3a09 )
 
Followup: MachineOwner
---------
 
Finished dump check

Open in new window

Can you upload the dump? the above output dosen't have symbols loaded
It won't allow a .dmp file to be upload.  So I used MS tool to view the minidump.dmp and paste it into a text file which I attached as an code snippet above.
I change the file extension from .dmp to .txt so I could upload it.
Mini041808-06.txt
You have Daemon Tools in your Faulting Stack:

STACK_TEXT:  
b7da6ac4 ec62931d 831dac78 831a1a38 b7da6b68 rdbss!RxIsThisACscAgentOpen+0x38
b7da6ae4 ec629ae1 00000000 b7da6b14 b7da6b24 rdbss!RxInitializeVNetRootParameters+0x282
b7da6b44 ec62c57f 832069c8 b7da6b68 00000004 rdbss!RxFindOrConstructVirtualNetRoot+0xdc
b7da6b78 ec628d01 831dac78 8239c4f0 b7da6bc8 rdbss!RxCanonicalizeNameAndObtainNetRoot+0x197
b7da6bdc ec61ed51 831dac78 8239c4c0 ec6277a8 rdbss!RxCommonCreate+0x2c3
b7da6c74 ec628bb0 ec6277a8 823c0000 823c009c rdbss!RxFsdCommonDispatch+0x353
b7da6c9c ec5d3297 841a8030 823c0000 00000000 rdbss!RxFsdDispatch+0xda
b7da6cbc 804ef163 00000000 013c0008 823c0008 mrxsmb!MRxSmbFsdDispatch+0x134
b7da6ccc f72fae9b 00000000 823c0008 823c00c0 nt!IopfCallDriver+0x31
b7da6cf0 f7307448 b7da6d10 848f2e60 00000000 fltMgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b
b7da6d2c 804ef163 848f2e60 823c0008 823c0108 fltMgr!FltpCreate+0x26a
b7da6d3c b7c74f08 823c0008 84a83428 823c00e4 nt!IopfCallDriver+0x31
WARNING: Stack unwind information not available. Following frames may be wrong.
b7da6d64 b7c66691 823c0008 b7da6de8 823c0108 mfehidk+0x15f08
b7da6df0 b7c74167 8239c4c0 823c0008 b7da6e28 mfehidk+0x7691
b7da6e00 b7c741b7 b7da6e10 8430e030 8270eda0 mfehidk+0x15167
b7da6e28 804ef163 8270eda0 823c0008 8239c4c0 mfehidk+0x151b7
b7da6e38 f71fbc39 823a6bec 823a6be8 00000000 nt!IopfCallDriver+0x31
b7da6e6c f71fd186 823a6be8 f71f0308 823a6be8 Mup!DnrRedirectFileOpen+0x437
b7da6ef0 f71fe266 013a6be8 00380024 823c0108 Mup!DnrNameResolve+0x6d5
b7da6f20 f71f842c 848e3e98 823c0008 825804f8 Mup!DnrStartNameResolution+0x280
b7da6f90 f71f67ec 848e3e98 82580440 823c0008 Mup!DfsCommonCreate+0x237
b7da6fd8 f71f688c 82580440 823c0008 823c0018 Mup!DfsFsdCreate+0xe0
b7da7030 804ef163 82580440 823c0008 823c0008 Mup!MupCreate+0xbc
b7da7040 80581fe2 82580428 831c271c b7da71d8 nt!IopfCallDriver+0x31
b7da7120 805bdf06 82580440 00000000 831c2678 nt!IopParseDevice+0xa12
b7da7198 805ba58e 00000000 b7da71d8 00000240 nt!ObpLookupObjectName+0x53c
b7da71ec 80574f33 00000000 00000000 da726c00 nt!ObOpenObjectByName+0xea
b7da7268 80575920 84ad8d50 00100000 b7da7300 nt!IopCreateFile+0x407
b7da72b0 f730d913 84ad8d50 00100000 b7da7300 nt!IoCreateFileSpecifyDeviceObjectHint+0x52
b7da7358 f730dc81 00000000 00000000 b7da73f0 fltMgr!FltpExpandFilePathWorker+0x117
b7da7370 f730e15d 84ad8d08 00000000 84ad8d08 fltMgr!FltpExpandFilePath+0x19
b7da73a4 f730e1a5 84ad8d08 84ad8d08 b7da74f4 fltMgr!FltpGetOpenedDestinationFileName+0x2b9
b7da73b4 f730e331 84ad8d08 b7da75e0 82372f5c fltMgr!FltpGetNormalizedDestinationFileName+0x13
b7da74f4 b83d3eea 848c9b20 823e6a38 00000000 fltMgr!FltGetDestinationFileNameInformation+0x12b
b7da7568 b83c0e1a 82372f5c b7da75e0 b7da7610 WavxDMgr+0x13eea
b7da75c0 f72f8888 82372f5c b7da75e0 b7da7610 WavxDMgr+0xe1a
b7da7620 f72fa2a0 00da7668 00000000 b7da7668 fltMgr!FltpPerformPreCallbacks+0x2d4
b7da7634 f72fac48 b7da7668 00000000 848f2e60 fltMgr!FltpPassThroughInternal+0x32
b7da7650 f72fb059 b7da7600 832b1f04 84b74470 fltMgr!FltpPassThrough+0x1c2
b7da7680 804ef163 848f2e60 832b1e28 84a83428 fltMgr!FltpDispatch+0x10d
b7da7690 b7c666d5 832b1f28 b7da7734 00000000 nt!IopfCallDriver+0x31
b7da7714 b7c74167 823e6a38 832b1e28 b7da774c mfehidk+0x76d5
b7da7724 b7c741b7 b7da7734 8430e030 8270eda0 mfehidk+0x15167
b7da774c 804ef163 8270eda0 832b1e28 832b1f4c mfehidk+0x151b7
b7da775c f71fed5a 832b1f28 84b576d8 832b1e28 nt!IopfCallDriver+0x31
b7da77a0 f71fee55 82684a30 832b1e28 832b1f28 Mup!DfsCommonSetInformation+0xa3
b7da77e0 804ef163 82580440 832b1e28 00000000 Mup!DfsFsdSetInformation+0x63
b7da77f0 8057a3cf b7da7894 00dfd59c 80579eac nt!IopfCallDriver+0x31
b7da7878 805409ac 000003e4 00dfd610 00143848 nt!NtSetInformationFile+0x523
b7da7878 7c90eb94 000003e4 00dfd610 00143848 nt!KiFastCallEntry+0xfc
00dfd654 00000000 00000000 00000000 00000000 0x7c90eb94

Can you remove Dameon Tools and see if you still bluescreen?

i found some articles talking about Daemon Tools not playing nice with Mcafee Products.

https://knowledge.mcafee.com/article/529/KB47537_f.SAL_Public.html
ASKER CERTIFIED SOLUTION
Avatar of skippy997
skippy997

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
By any chance was this a Dell workstation?