Fix BSOD Windows 7 Debug Results Included
Can anyone let me know what driver is causing this Windows 7 Ult. ASUS mb, AMD ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* KMODE_EXCEPTION_NOT_HANDLED (1e) This is a very common bugcheck. Usually the exception address pinpoints the driver/function that caused the problem. Always note this address as well as the link date of the driver/image that contains this address. Arguments: Arg1: ffffffffc0000005, The exception code that was not handled Arg2: fffff800027962ed, The address that the exception occurred at Arg3: 0000000000000000, Parameter 0 of the exception Arg4: 000000000000201a, Parameter 1 of the exception Debugging Details: ------------------ EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s. FAULTING_IP: nt!ObOpenObjectByName+69d fffff800`027962ed 410fb6451a movzx eax,byte ptr [r13+1Ah] EXCEPTION_PARAMETER1: 0000000000000000 EXCEPTION_PARAMETER2: 000000000000201a READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800026cb0e8 000000000000201a ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s. BUGCHECK_STR: 0x1E_c0000005 CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT PROCESS_NAME: svchost.exe CURRENT_IRQL: 0 TRAP_FRAME: fffff8800cd78ae0 -- (.trap 0xfffff8800cd78ae0) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=ffffffff80003cd0 rbx=0000000000000000 rcx=fffff8800cd78d90 rdx=00000000001000a1 rsi=0000000000000000 rdi=0000000000000000 rip=fffff800027962ed rsp=fffff8800cd78c70 rbp=0000000000000000 r8=fffff8a000ef0000 r9=0000000000000078 r10=fffffa80071e3bd0 r11=fffffa80071e3ba0 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei pl nz na po nc nt!ObOpenObjectByName+0x69d: fffff800`027962ed 410fb6451a movzx eax,byte ptr [r13+1Ah] ds:001e:00000000`0000001a=?? Resetting default scope LAST_CONTROL_TRANSFER: from fffff800024e6028 to fffff8000249a640 STACK_TEXT: fffff880`0cd78258 fffff800`024e6028 : 00000000`0000001e ffffffff`c0000005 fffff800`027962ed 00000000`00000000 : nt!KeBugCheckEx fffff880`0cd78260 fffff800`02499cc2 : fffff880`0cd78a38 fffffa80`07f80b10 fffff880`0cd78ae0 fffff800`0241a000 : nt! ?? ::FNODOBFM::`string'+0x4987d fffff880`0cd78900 fffff800`0249883a : 00000000`00000000 00000000`0000201a 00000000`00000000 fffffa80`07f80b10 : nt!KiExceptionDispatch+0xc2 fffff880`0cd78ae0 fffff800`027962ed : 00000000`00000000 fffffa80`071e3c00 fffffa80`00000000 fffffa80`06703800 : nt!KiPageFault+0x23a fffff880`0cd78c70 fffff800`0279785c : fffffa80`072cd660 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ObOpenObjectByName+0x69d fffff880`0cd78d40 fffff800`02783134 : fffff880`0cd79780 00000000`001000a1 fffff880`0cd79168 fffff880`0cd79198 : nt!IopCreateFile+0x2bc fffff880`0cd78de0 fffff800`024998d3 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtOpenFile+0x58 fffff880`0cd78e70 fffff800`02495e70 : fffff800`0274578c 00000000`00000001 fffff880`01135e01 fffffa80`00000000 : nt!KiSystemServiceCopyEnd+0x13 fffff880`0cd79078 fffff800`0274578c : 00000000`00000001 fffff880`01135e01 fffffa80`00000000 fffff880`00000000 : nt!KiServiceLinkage fffff880`0cd79080 fffff800`024998d3 : fffffa80`071d4b30 00000000`00000001 fffffa80`072cd660 fffff800`02791a34 : nt!NtCreateUserProcess+0x2eb fffff880`0cd79bb0 00000000`773a1dea : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 00000000`0078d608 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x773a1dea STACK_COMMAND: kb FOLLOWUP_IP: nt!ObOpenObjectByName+69d fffff800`027962ed 410fb6451a movzx eax,byte ptr [r13+1Ah] SYMBOL_STACK_INDEX: 4 SYMBOL_NAME: nt!ObOpenObjectByName+69d FOLLOWUP_NAME: MachineOwner MODULE_NAME: nt IMAGE_NAME: ntkrnlmp.exe DEBUG_FLR_IMAGE_TIMESTAMP: 4ce7951a FAILURE_BUCKET_ID: X64_0x1E_c0000005_nt!ObOpenObjectByName+69d BUCKET_ID: X64_0x1E_c0000005_nt!ObOpenObjectByName+69d Followup: MachineOwner Zach
April 21st, 2011 1:33am

Bug Check Code 0x1E: http://msdn.microsoft.com/en-us/library/ff557408(v=VS.85).aspx Please use Microsoft Skydrive to upload the dump files. Once done post a link here. You can also try to update all possible drivers because as I see, the problem is caused by a driver. Upload dump files so that I try to determine it. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
Free Windows Admin Tool Kit Click here and download it now
April 21st, 2011 8:44pm

I am unable to determine the faulty driver from the minidump. Please configure the computer to generate full dumps and upload MEMORY.dmp file. You can also try to: Run chkdsk /r /f Run sfc /scannow Update all possible drivers and check if this solve your problem. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
April 21st, 2011 9:25pm

http://cid-31b6a38266c845da.office.live.com/self.aspx/Public/042011-10186-01.dmpZach
Free Windows Admin Tool Kit Click here and download it now
April 21st, 2011 9:34pm

http://cid-31b6a38266c845da.office.live.com/embedicon.aspx/Public/042111-10701-01.dmp http://cid-31b6a38266c845da.office.live.com/embedicon.aspx/Public/042111-10561-01.dmp http://cid-31b6a38266c845da.office.live.com/embedicon.aspx/Public/042111-10498-01.dmp http://cid-31b6a38266c845da.office.live.com/embedicon.aspx/Public/042111-10124-01.dmp 4 more Zach
April 22nd, 2011 9:54am

http://cid-31b6a38266c845da.office.live.com/embedicon.aspx/Public/042111-10701-01.dmp http://cid-31b6a38266c845da.office.live.com/embedicon.aspx/Public/042111-10561-01.dmp http://cid-31b6a38266c845da.office.live.com/embedicon.aspx/Public/042111-10498-01.dmp http://cid-31b6a38266c845da.office.live.com/embedicon.aspx/Public/042111-10124-01.dmp 4 more Zach Please upload the full dump and not minidumps means upload MEMORY.DMP. To configure Windows to generate a full dump: http://support.microsoft.com/kb/972110 Once done, a full dump will be generated at the next crash. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2011 8:35am

Hi, Microsoft (R) Windows Debugger Version 6.12.0002.633 X86 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Users\v-lihuan\Desktop\042111-10701-01.dmp] Mini Kernel Dump File: Only registers and stack trace are available WARNING: Whitespace at end of path element Symbol search path is: SRV*F:\Windows\symbols*http://msdl.microsoft.com/download/symbols Executable search path is: Windows 7 Kernel Version 7601 (Service Pack 1) MP (6 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850 Machine Name: Kernel base = 0xfffff800`02408000 PsLoadedModuleList = 0xfffff800`0264de90 Debug session time: Fri Apr 22 11:46:21.482 2011 (UTC + 8:00) System Uptime: 0 days 0:00:38.982 Loading Kernel Symbols ............................................................... ..........WARNING: nsiproxy overlaps rdbss ...................................................... .................................WARNING: tcpipreg overlaps srvnet ....... Loading User Symbols Loading unloaded module list ..... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 1E, {0, 0, 0, 0} For error 1E, please refer: http://msdn.microsoft.com/en-us/library/ff557408(v=VS.85).aspx Regards, Leo Huang Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
April 28th, 2011 9:22am

Thank you every one for your help but it seemed to be the motherboard went bad. After i was getting these errors the machine would not post. So hopefully when i get my replacement board and rebuild i will not run into these problems. Zach
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2011 9:27am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics