Blue Screen Help - my .dmp file

  1. #1
    Adam G is offline Newbie

    Blue Screen Help - my .dmp file

    I need help. I'm getting the Blue Screen and the "kernel inpage" message.
    I Downloaded and install the Debugging Tools from Microsoft and Download and install the debugwiz. I pasted my .dmp file into the program and here are the results: Any ideas?

    ************************************************** *****************************
    *
    *
    * Bugcheck Analysis
    *
    *
    *
    ************************************************** *****************************

    Use !analyze -v to get detailed debugging information.

    BugCheck F4, {3, 85fa98d8, 85fa9a4c, 805c773e}

    Probably caused by : hardware_disk

    Followup: MachineOwner
    ---------

    kd> !analyze -v;r;kv;lmtn;.logclose;q
    ************************************************** *****************************
    *
    *
    * Bugcheck Analysis
    *
    *
    *
    ************************************************** *****************************

    CRITICAL_OBJECT_TERMINATION (f4)
    A process or thread crucial to system operation has unexpectedly exited
    or been
    terminated.
    Several processes and threads are necessary for the operation of the
    system; when they are terminated (for any reason), the system can no
    longer function.
    Arguments:
    Arg1: 00000003, Process
    Arg2: 85fa98d8, Terminating object
    Arg3: 85fa9a4c, Process image file name
    Arg4: 805c773e, Explanatory message (ascii)

    Debugging Details:
    ------------------


    PROCESS_OBJECT: 85fa98d8

    IMAGE_NAME: hardware_disk

    DEBUG_FLR_IMAGE_TIMESTAMP: 0

    FAULTING_MODULE: 00000000

    PROCESS_NAME: csrss.exe

    EXCEPTION_RECORD: a9c689d8 -- (.exr 0xffffffffa9c689d8)
    .exr 0xffffffffa9c689d8
    ExceptionAddress: 75b8ffb9
    ExceptionCode: c0000006 (In-page I/O error)
    ExceptionFlags: 00000000
    NumberParameters: 3
    Parameter[0]: 00000008
    Parameter[1]: 75b8ffb9
    Parameter[2]: c000000e
    Inpage operation failed at 75b8ffb9, due to I/O error c000000e

    EXCEPTION_CODE: (NTSTATUS) 0xc000000e - A device which does not exist
    was specified.

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    ERROR_CODE: (NTSTATUS) 0xc0000006 - The instruction at "0x%08lx"
    referenced memory at "0x%08lx". The required data was not placed into
    memory because of an I/O error status of "0x%08lx".

    IO_ERROR: (NTSTATUS) 0xc000000e - A device which does not exist was
    specified.

    EXCEPTION_STR: 0xc0000006_c000000e

    FAULTING_IP:
    +75b8ffb9
    75b8ffb9 ?? ???

    BUGCHECK_STR: 0xF4_IOERR_C000000E

    CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
    !chkimg -lo 50 -d !nt
    805c776c-805c7770 5 bytes - nt!NtTerminateProcess

    [ 8b ff 55 8b ec:e9 fa cd 31 29 ]
    5 errors : !nt (805c776c-805c7770)

    FOLLOWUP_IP:
    +75b8ffb9
    75b8ffb9 ?? ???

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: hardware_disk

    STACK_COMMAND: kb

    FAILURE_BUCKET_ID: 0xF4_IOERR_C000000E_IMAGE_hardware_disk

    BUCKET_ID: 0xF4_IOERR_C000000E_IMAGE_hardware_disk

    Followup: MachineOwner



    I


  2. #2
    jephree is offline ¨*·.¸ «.·°·..·°·.» ¸.·*¨
    Run the diagnostic from your hard drive manufacture and also run sfc /scannow



    Bugcheck Analysis:
    CRITICAL_OBJECT_TERMINATION (f4)

    The error 0x000000F4 CRITICAL_OBJECT_TERMINATION may occur if the hard drive with the operating system is installed is set as the slave or secondary drive.

    If you havent changed the hard drives, you may want to do some diagnostics on it. Also this from MS Bug Check codes page:

    Bug Check 0xF4: CRITICAL_OBJECT_TERMINATION
    The CRITICAL_OBJECT_TERMINATION bug check has a value of 0x000000F4. This indicates that a process or thread Crucial to system operation has unexpectedly exited or been terminated.

    Cause
    Several processes and threads are necessary for the operation of the system. When they are terminated for any reason, the system can no longer function.

    It sounds from this that you have some corrupted system files. If you can get to the desktop do a search for drwtsn32. open it up and look at the Application Exception entries. You just need to look at the first part. The most recent will be towards the bottom. See what program is causing it, or if there are different ones. Actually before doing that if you get to the desktop try to run the system file checker. Go to start/run and type in sfc /scannow and let it run. It will repair or replace any corrupted system files.

    so yeh.. give a system scancheck a go - sfc /scannow
    you may need your winxp cd to do this..


    ============================

    0x000000F4: CRITICAL_OBJECT_TERMINATION
    (Click to consult the online MSDN article.)
    One of the many processes or threads crucial to system operation has unexpectedly exited or been terminated. As a result, the system can no longer function. Specific causes are many, and often best resolved by a careful history of the problem and the circumstances of the error message. One user, who experienced this on return from Standby mode on Win XP SP2, found the cause was that Windows was installed on a slave drive; compare KB 330100.
    0x000000F5:
    0x000000F6: PCI_VERIFIER_DETECTED_VIOLATION
    0x000000F7: DRIVER_OVERRAN_STACK_BUFFER
    0x000000F8: RAMDISK_BOOT_INITIALIZATION_FAILED
    0x000000F9: DRIVER_RETURNED_STATUS_REPARSE_FOR_VOLUME_OPEN
    0x000000FA:
    0x000000FB:

    http://www.aumha.org/a/stop.htm


    ==============================

  3. #3
    Adam G is offline Newbie
    I ran the Dell diagnostic , which took about 2 hours, and everything passed. I also ran the sfc /scannow and it came back with nothing.

    I haven' t ever changed the harddrive so I don't think it could be the slave issue.

    I did a complete virus scan with Mcafee and even went online to do a second scan with Trend Micro. No problems there. I also ran Adaware and Search & Destroy for malware/spyware. No problems there either.

    I opened up the drwtsn32. but couldn't figure out how to use it. There wasn't an option for Application Exception...keep in mind I an no expert at Windows. I have a basic knowledge of the inner workings. I'll look for a tutorial on the drwtsn32 program online and try that again.

    Someone else recommended using the ShellExview to disable all the shell apps on my system. It looks like there are 249 shell apps running on windows. Should I try disabling all of them and then turning them on one at a time until I isolate the one that is crashing. Or am I way off base with this solution?

    I always have the option of wiping the hard drive and doing a reinstall...although you know how mush time and trouble that takes. I've also read that that might not fix the problem.

    Thanks for your help and if you have any other ideas please advise.

  4. #4
    jephree is offline ¨*·.¸ «.·°·..·°·.» ¸.·*¨
    Go to Start/Run and type in:

    regsvr32 /i shell32

    Click OK.

    Restart your computer.

  5. #5
    jephree is offline ¨*·.¸ «.·°·..·°·.» ¸.·*¨
    Also please post any further dumps.

    Did the Dell diagnostic specifically list tests on your hard drive?

  6. #6
    Adam G is offline Newbie
    Another .dmp file. This one is different.




    Microsoft (R) Windows Debugger Version 6.7.0005.1
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini090407-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is:
    SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is:
    C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32 \drivers
    Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 2600.xpsp_sp2_gdr.070227-2254
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x805533a0
    Debug session time: Tue Sep 4 14:42:56.796 2007 (GMT-7)
    System Uptime: 6 days 22:50:53.359
    Loading Kernel Symbols
    .................................................. .................................................. ..........................................
    Loading User Symbols
    Loading unloaded module list
    ..................................................
    ************************************************** *****************************
    *
    *
    * Bugcheck Analysis
    *
    *
    *
    ************************************************** *****************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 7A, {c07ba190, c000000e, f7432642, 3caa9860}

    Probably caused by : ftdisk.sys ( ftdisk!FtDiskInternalDeviceControl+51
    )

    Followup: MachineOwner
    ---------

    kd> !analyze -v;r;kv;lmtn;.logclose;q
    ************************************************** *****************************
    *
    *
    * Bugcheck Analysis
    *
    *
    *
    ************************************************** *****************************

    KERNEL_DATA_INPAGE_ERROR (7a)
    The requested page of kernel data could not be read in. Typically
    caused by
    a bad block in the paging file or disk controller error. Also see
    KERNEL_STACK_INPAGE_ERROR.
    If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
    it means the disk subsystem has experienced a failure.
    If the error status is 0xC000009A, then it means the request failed
    because
    a filesystem failed to make forward progress.
    Arguments:
    Arg1: c07ba190, lock type that was held (value 1,2,3, or PTE address)
    Arg2: c000000e, error status (normally i/o status code)
    Arg3: f7432642, current process (virtual address for lock type 3, or
    PTE)
    Arg4: 3caa9860, virtual address that could not be in-paged (or PTE
    contents if arg1 is a PTE address)

    Debugging Details:
    ------------------


    ERROR_CODE: (NTSTATUS) 0xc000000e - A device which does not exist was
    specified.

    DISK_HARDWARE_ERROR: There was error with disk hardware

    BUGCHECK_STR: 0x7a_c000000e

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    PROCESS_NAME: System

    TRAP_FRAME: a69eda5c -- (.trap 0xffffffffa69eda5c)
    .trap 0xffffffffa69eda5c
    ErrCode = 00000010
    eax=00760018 ebx=86539008 ecx=00000000 edx=0000000c esi=865c9cd8
    edi=00000000
    eip=f7432642 esp=a69edad0 ebp=a69edb24 iopl=0 nv up ei pl zr na
    pe nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
    efl=00010246
    ftdisk!FtpReferenceDependantVolume:
    f7432642 53 push ebx
    .trap
    Resetting default scope

    LOCK_ADDRESS: 80551360 -- (!locks 80551360)
    !locks ffffffff80551360

    Resource @ nt!PiEngineLock (0x80551360) Available

    WARNING: SystemResourcesList->Flink chain invalid. Resource may be
    corrupted, or already deleted.


    WARNING: SystemResourcesList->Blink chain invalid. Resource may be
    corrupted, or already deleted.

    1 total locks

    PNP_TRIAGE:
    Lock address : 0x80551360
    Thread Count : 0
    Thread address: 0x00000000
    Thread wait : 0x0

    LAST_CONTROL_TRANSFER: from 80511f39 to 804f8aef

    STACK_TEXT:
    a69ed930 80511f39 0000007a c07ba190 c000000e nt!KeBugCheckEx+0x1b
    a69ed960 80512a5f 81748a7c c07ba190 f7432642
    nt!MiWaitForInPageComplete+0x1c7
    a69ed9e0 8051bfa0 c07ba190 f7432642 c07ba190 nt!MiDispatchFault+0x2b5
    a69eda44 8053f90c 00000008 f7432642 00000000 nt!MmAccessFault+0x7b4
    a69eda44 f7432642 00000008 f7432642 00000000 nt!KiTrap0E+0xcc
    a69edacc f742951f 865c9cd8 86539008 00000000
    ftdisk!FtpReferenceDependantVolume
    a69edae4 804edfe3 865c9c20 86539008 00000000
    ftdisk!FtDiskInternalDeviceControl+0x51
    a69edaf4 f7810bd3 86594b38 8604bc00 00000000 nt!IopfCallDriver+0x31
    a69edb24 f781197e 865c9c20 8655dc68 86574940
    PartMgr!PmQueryDependantVolumeList+0x83
    a69edb6c f7811e8a 8656bc28 8588fb94 8588fc30
    PartMgr!PmBuildDependantVolumeRelations+0xd5
    a69edb98 f781200d 8656bc28 c00000bb 8588fc54
    PartMgr!PmQueryRemovalRelations+0x7f
    a69edbd4 804edfe3 8656bb70 8588fb78 a69edc54 PartMgr!PmPnp+0x17c
    a69edbe4 80587021 00000003 865c9128 a69edc7c nt!IopfCallDriver+0x31
    a69edc10 804f5b89 8656bb70 a69edc30 a69edc7c nt!IopSynchronousCall+0xb7
    a69edc58 80587ff2 00000003 86574940 00000001
    nt!IopQueryDeviceRelations+0x45
    a69edc80 80588bb1 00000000 00000003 00000001 nt!IopProcessRelation+0xfa
    a69edca8 8058e424 86574940 00000003 a69edd18
    nt!IopBuildRemovalRelationList+0x41
    a69edd34 8058ebf0 a69edd70 806d0778 e11badd8
    nt!PiProcessQueryRemoveAndEject+0x262
    a69edd50 8058ed49 a69edd70 86384310 8055a3fc
    nt!PiProcessTargetDeviceEvent+0x2a
    a69edd74 80533fe6 86384310 00000000 8644da70 nt!PiWalkDeviceList+0xfd
    a69eddac 805c4cce 86384310 00000000 00000000 nt!ExpWorkerThread+0x100
    a69edddc 805411c2 80533ee6 80000001 00000000
    nt!PspSystemThreadStartup+0x34
    00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    ftdisk!FtDiskInternalDeviceControl+51
    f742951f eb31 jmp ftdisk!FtDiskInternalDeviceControl+0x84
    (f7429552)

    SYMBOL_STACK_INDEX: 6

    SYMBOL_NAME: ftdisk!FtDiskInternalDeviceControl+51

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: ftdisk

    IMAGE_NAME: ftdisk.sys

    DEBUG_FLR_IMAGE_TIMESTAMP: 3b7d8419

    FAILURE_BUCKET_ID: 0x7a_c000000e_ftdisk!FtDiskInternalDeviceControl+5 1

    BUCKET_ID: 0x7a_c000000e_ftdisk!FtDiskInternalDeviceControl+5 1

    Followup: MachineOwner

  7. #7
    jephree is offline ¨*·.¸ «.·°·..·°·.» ¸.·*¨
    Both dumps are pointing to your hard drive.

    If you have not backed up your important data I would ASAP.

    Did you note if the Dell Diagnostic specifically addressed your hard drive?

    See if you can ID the manufacturer in the Device Manager:

    right click My Computer then click Manage then Device Manager:

    here click the + before Disk drives: what is listed?

    You might as well run Check Disk as well as seen in my next post.

  8. #8
    jephree is offline ¨*·.¸ «.·°·..·°·.» ¸.·*¨
    Try running Check Disk:

    Go to start Run... and type: cmd

    Then type: chkdsk /f

    You will be told the volume is in use do you want to run chkdsk on next boot? Type: Y and reboot.

  9. #9
    Adam G is offline Newbie
    I did the regsvr32 /i shell32 thing also. Then I rebooted. Just letting you know...I ran the chkdsk /f yesterday and it came back fine. I'll try it again today and get back to you. Also, I'm running the HD diagnostic again. I did it yesterday as well and everything passed.
    Last edited by Adam G; 08-09-2007 at 01:21 AM.

  10. #10
    Adam G is offline Newbie
    Okay... the device manager says that my hard drive is a Samsung MP0402H. By the way, the Computer in question is a Dell Inspiron B120 Notebook.

    I ran the chkdsk again and it passed. I ran just the hard drive diagnostics and all tests passed.

    Although... it hasn't crashed today at all and I've backed everything up.

    Any more ideas?

+ Reply to Thread
Page 1 of 2 1 2 LastLast