okamon
asked on
Windows 7 blue screen
Got bluescreen in the middle. Didn't install any new software recently...
Here is the result I got from debug...
1: kd> !analyze -v
************************** ********** ********** ********** ********** ********** ***
* *
* Bugcheck Analysis *
* *
************************** ********** ********** ********** ********** ********** ***
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff960000db950, Address of the instruction which caused the bugcheck
Arg3: fffff8800e093bd0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
win32k!xxxProcessEventMess age+1c0
fffff960`000db950 017308 add dword ptr [rbx+8],esi
CONTEXT: fffff8800e093bd0 -- (.cxr 0xfffff8800e093bd0)
rax=fffff8800e094600 rbx=0000000000000000 rcx=fffff8800e094558
rdx=fffff900c07140c0 rsi=0000000000000001 rdi=0000000000000000
rip=fffff960000db950 rsp=fffff8800e0945b0 rbp=fffff8800e094750
r8=0000000000000000 r9=0000000000000000 r10=0000000000000000
r11=fffff8800e0944d0 r12=fffff900c1edf650 r13=fffff8800e094b28
r14=fffff900c1edf650 r15=0000000000000001
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
win32k!xxxProcessEventMess age+0x1c0:
fffff960`000db950 017308 add dword ptr [rbx+8],esi ds:002b:00000000`00000008= ????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: RemoteDesktopM
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff960000db950
STACK_TEXT:
fffff880`0e0945b0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!xxxProcessEventMess age+0x1c0
FOLLOWUP_IP:
win32k!xxxProcessEventMess age+1c0
fffff960`000db950 017308 add dword ptr [rbx+8],esi
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32k!xxxProcessEventMess age+1c0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4df2dbd1
STACK_COMMAND: .cxr 0xfffff8800e093bd0 ; kb
FAILURE_BUCKET_ID: X64_0x3B_win32k!xxxProcess EventMessa ge+1c0
BUCKET_ID: X64_0x3B_win32k!xxxProcess EventMessa ge+1c0
Followup: MachineOwner
Here is the result I got from debug...
1: kd> !analyze -v
**************************
* *
* Bugcheck Analysis *
* *
**************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff960000db950, Address of the instruction which caused the bugcheck
Arg3: fffff8800e093bd0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
win32k!xxxProcessEventMess
fffff960`000db950 017308 add dword ptr [rbx+8],esi
CONTEXT: fffff8800e093bd0 -- (.cxr 0xfffff8800e093bd0)
rax=fffff8800e094600 rbx=0000000000000000 rcx=fffff8800e094558
rdx=fffff900c07140c0 rsi=0000000000000001 rdi=0000000000000000
rip=fffff960000db950 rsp=fffff8800e0945b0 rbp=fffff8800e094750
r8=0000000000000000 r9=0000000000000000 r10=0000000000000000
r11=fffff8800e0944d0 r12=fffff900c1edf650 r13=fffff8800e094b28
r14=fffff900c1edf650 r15=0000000000000001
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
win32k!xxxProcessEventMess
fffff960`000db950 017308 add dword ptr [rbx+8],esi ds:002b:00000000`00000008=
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: RemoteDesktopM
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff960000db950
STACK_TEXT:
fffff880`0e0945b0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!xxxProcessEventMess
FOLLOWUP_IP:
win32k!xxxProcessEventMess
fffff960`000db950 017308 add dword ptr [rbx+8],esi
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32k!xxxProcessEventMess
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP:
STACK_COMMAND: .cxr 0xfffff8800e093bd0 ; kb
FAILURE_BUCKET_ID: X64_0x3B_win32k!xxxProcess
BUCKET_ID: X64_0x3B_win32k!xxxProcess
Followup: MachineOwner
I would remove the Video Driver from the Device Manager, and uninstall any related software in the Control Panel/Programs and Features. Reboot and download FRESH drivers from the MFGR website.....
Go to windows\minidump...zip minidump folder and upload it.
Ded9
Ded9
were you using remote desktop ? looks like it is the the process causing it
if you don't need it, disable it
if you don't need it, disable it
ASKER
yes, I am usign a program called remote desktop manager. It seems all the crash happned during the rdp session...... here is the dump file in attachment
102411-56222-01.dmp
102411-56222-01.dmp
Zip minidump folder and upload it.
Ded9
Ded9
i would try first updating, or uninstall/reinstall RDP
ASKER
hi ded9, my attachment is right above your last comment
reinstall RDP?? how? are you talking about the one from microsoft or the remote desktop manager?
reinstall RDP?? how? are you talking about the one from microsoft or the remote desktop manager?
There is not much info in that dmp file...request you to zip minidump folder and upload it.
Ded9
Ded9
well - if you use a 3rd party like teamviewer i meant...
"remote desktop manager"
Have you tried removing/reinstalling this?
And does a standard RDP to one of these machines also fail? Using MSTSC.EXE?
Have you tried removing/reinstalling this?
And does a standard RDP to one of these machines also fail? Using MSTSC.EXE?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you for your reply. I was aways for few days. I think I deleted my dmp files by accident... I will upload it next time it happens again. thank you for your time and help
ASKER
actually it just happened again now when I am doing remote access within the remote desktop manager
Here is the attachment
110811-51277-01.zip
Here is the attachment
110811-51277-01.zip
Did u enable the verifier ..did u try the above steps.
Uninstall security software...reboot and then try remote access.
Ded9
Uninstall security software...reboot and then try remote access.
Ded9
ASKER
My machine hasn't crashed so far. I will upload it when it happens again! thank you for your help