Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Computer Support > MiniDump file analysis

Reply
Thread Tools

MiniDump file analysis

 
 
Frank
Guest
Posts: n/a
 
      04-27-2004
I recently posted a crashing problem under the subject thread
"machine_check_exception". ICee & others kindly and patiently led me through
various diagnosis and then and Will Dorman (on another group) asked me to
post the results of running Dumpchk.exe on one of the minidump files which
are saved to windows\minidump after each crash. I have pasted the results of
the latest crash. Hopefully it provides clues to the unsolved problem of
very frequent crashes where the screen is only on for a split second before
the machine reboots (I have turned OFF the automatic reboot after a crash
option). The only thing I have time to read on the screen is
machine_check_exception and that it is blue but not the usual windows blue
screen.
MemTest86 shows ram modules are good, and MBM5 shows cpu temperature is
good. No virus'.

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Lara>cd\windows

C:\WINDOWS>dumpchk minidump\mini042704-02.dmp
Loading dump file minidump\mini042704-02.dmp
----- 32 bit Kernel Mini Dump Analysis

DUMP_HEADER32:
MajorVersion 0000000f
MinorVersion 00000a28
DirectoryTableBase 00039000
PfnDataBase 81053000
PsLoadedModuleList 8054be30
PsActiveProcessHead 8054de78
MachineImageType 0000014c
NumberProcessors 00000001
BugCheckCode 0000009c
BugCheckParameter1 00000000
BugCheckParameter2 8053f0f0
BugCheckParameter3 cc0000ff
BugCheckParameter4 20040189
PaeEnabled 00000000
KdDebuggerDataBlock 8053dde0
MiniDumpFields 00000dff

TRIAGE_DUMP32:
ServicePackBuild 00000100
SizeOfDump 00010000
ValidOffset 0000fffc
ContextOffset 00000320
ExceptionOffset 000007d0
MmOffset 00001068
UnloadedDriversOffset 000010a0
PrcbOffset 00001878
ProcessOffset 000024c8
ThreadOffset 00002720
CallStackOffset 00002978
SizeOfCallStack 00003000
DriverListOffset 00005c08
DriverCount 000000a3
StringPoolOffset 00008c70
StringPoolSize 00001680
BrokenDriverOffset 00000000
TriageOptions 00000041
TopOfStack f2ebd000
DebuggerDataOffset 00005978
DebuggerDataSize 00000290
DataBlocksOffset 0000a2f0
DataBlocksCount 00000003


Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
Kernel base = 0x804d4000 PsLoadedModuleList = 0x8054be30
Debug session time: Tue Apr 27 12:57:06 2004
System Uptime: 0 days 0:05:41
start end module name
804d4000 806c6980 nt Checksum: 0020230B Timestamp: Thu Aug 29
05:
03:24 2002 (3D6DE35C)

Unloaded modules:
f309f000 f30af000 NAVENG.Sys Timestamp: unavailable (00000000)
f2dff000 f2e90000 NavEx15.Sys Timestamp: unavailable (00000000)
f2ea0000 f2eb0000 NAVENG.Sys Timestamp: unavailable (00000000)
f2dff000 f2e90000 NavEx15.Sys Timestamp: unavailable (00000000)
f78c8000 f78d8000 NAVENG.Sys Timestamp: unavailable (00000000)
f4238000 f42c9000 NavEx15.Sys Timestamp: unavailable (00000000)
f2f30000 f2f57000 kmixer.sys Timestamp: unavailable (00000000)
f38c1000 f38e8000 kmixer.sys Timestamp: unavailable (00000000)
f7de7000 f7de8000 drmkaud.sys Timestamp: unavailable (00000000)
f3abe000 f3acb000 DMusic.sys Timestamp: unavailable (00000000)
f7cb2000 f7cb4000 splitter.sys Timestamp: unavailable (00000000)
f3ace000 f3adc000 swmidi.sys Timestamp: unavailable (00000000)
f3923000 f3946000 aec.sys Timestamp: unavailable (00000000)
f7b80000 f7b85000 Cdaudio.SYS Timestamp: unavailable (00000000)
f757c000 f757f000 Sfloppy.SYS Timestamp: unavailable (00000000)

Finished dump check

C:\WINDOWS>


--
xx


 
Reply With Quote
 
 
 
 
░Mike░
Guest
Posts: n/a
 
      04-27-2004
What the hell use is that? What does the human-readable
error message say in your event viewer?

Start / Run / eventvwr.msc

I still say you have bad RAM.


On Tue, 27 Apr 2004 17:33:33 -0400, in
<gjAjc.65065$(E-Mail Removed)>
Frank scrawled:

>I recently posted a crashing problem under the subject thread
>"machine_check_exception". ICee & others kindly and patiently led me through
>various diagnosis and then and Will Dorman (on another group) asked me to
>post the results of running Dumpchk.exe on one of the minidump files which
>are saved to windows\minidump after each crash. I have pasted the results of
>the latest crash. Hopefully it provides clues to the unsolved problem of
>very frequent crashes where the screen is only on for a split second before
>the machine reboots (I have turned OFF the automatic reboot after a crash
>option). The only thing I have time to read on the screen is
>machine_check_exception and that it is blue but not the usual windows blue
>screen.
>MemTest86 shows ram modules are good, and MBM5 shows cpu temperature is
>good. No virus'.
>
>Microsoft Windows XP [Version 5.1.2600]
>(C) Copyright 1985-2001 Microsoft Corp.
>
>C:\Documents and Settings\Lara>cd\windows
>
>C:\WINDOWS>dumpchk minidump\mini042704-02.dmp
>Loading dump file minidump\mini042704-02.dmp
>----- 32 bit Kernel Mini Dump Analysis
>

<snip dump>

--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html
 
Reply With Quote
 
 
 
 
Pool Champ
Guest
Posts: n/a
 
      04-27-2004

"Frank" <(E-Mail Removed)> wrote in message

> I recently posted a crashing problem under the subject thread
> "machine_check_exception".


-----<SNIP>-----

Frank, you are using a registered name in your mung, anywhere.com
I am assuming of course this isn't you

Registrant:
Realtime Anywhere
24 Willifield Way
London nw11 7xt
UK

PC


 
Reply With Quote
 
Frank
Guest
Posts: n/a
 
      04-27-2004

> What the hell use is that? What does the human-readable
> error message say in your event viewer?
>
> Start / Run / eventvwr.msc
>
> I still say you have bad RAM.
>

How do I copy/paste or save the info you refer to in the event viewer in
order to post it here ? Never done this before - sorry. I went to event
viewer> system and saw the 'error' logs but when i highlight it/them & go to
Action>properties there doesn't seem to be a way to save/print it


 
Reply With Quote
 
Frank
Guest
Posts: n/a
 
      04-27-2004
oops - changed my name

--
xx
"Pool Champ" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>
> "Frank" <(E-Mail Removed)> wrote in message
>
> > I recently posted a crashing problem under the subject thread
> > "machine_check_exception".

>
> -----<SNIP>-----
>
> Frank, you are using a registered name in your mung, anywhere.com
> I am assuming of course this isn't you
>
> Registrant:
> Realtime Anywhere
> 24 Willifield Way
> London nw11 7xt
> UK
>
> PC
>
>



 
Reply With Quote
 
░Mike░
Guest
Posts: n/a
 
      04-27-2004
Double click on an error. Below the two arrows is
an icon like two pages. Press this and it copies
the details to the clipboard. You'll get something
like:

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 28/04/2004
Time: 00:33:59
User: NT AUTHORITY\SYSTEM
Computer: COMPUTER-NAME

Description:
Faulting application xxxxxxx.exe, version x.x, faulting
module xxxxxxx.exe, version x.x, fault address 0x000c08bd.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 70 72 6f ure pro
0018: 67 6e 61 6d 65 2e 65 78 gname.ex
0020: 65 20 33 2e 39 2e 31 2e e 3.9.1.
0028: 30 20 69 6e 20 70 72 6f 0 in pro
0030: 67 6e 61 6d 65 2e 65 78 gname.ex
0038: 65 20 33 2e 39 2e 31 2e e 3.9.1.
0040: 30 20 61 74 20 6f 66 66 0 at off
0048: 73 65 74 20 30 30 30 63 set 000c
0050: 30 38 62 64 0d 0a 08bd..


On Tue, 27 Apr 2004 19:09:45 -0400, in
<tJBjc.25017$(E-Mail Removed)>
Frank scrawled:

>
>> What the hell use is that? What does the human-readable
>> error message say in your event viewer?
>>
>> Start / Run / eventvwr.msc
>>
>> I still say you have bad RAM.
>>

>How do I copy/paste or save the info you refer to in the event viewer in
>order to post it here ? Never done this before - sorry. I went to event
>viewer> system and saw the 'error' logs but when i highlight it/them & go to
>Action>properties there doesn't seem to be a way to save/print it
>


--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html
 
Reply With Quote
 
Frank
Guest
Posts: n/a
 
      04-28-2004
Thanks- here is a sampling of errors for the past couple of days - hopefully
it offers some clues
--------------------------------------------------------------------
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 27/04/2004
Time: 8:22:22 PM
User: N/A
Computer: COMPUTER-3
Description:
Error code 0000009c, parameter1 00000000, parameter2 8053f0f0, parameter3
cc0000ff, parameter4 20040189.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 30 30 30 30 30 30 39 0000009
0020: 63 20 20 50 61 72 61 6d c Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 30 30 2c 20 000000,
0038: 38 30 35 33 66 30 66 30 8053f0f0
0040: 2c 20 63 63 30 30 30 30 , cc0000
0048: 66 66 2c 20 32 30 30 34 ff, 2004
0050: 30 31 38 39 0189
-------------------------------------------------------------------
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 27/04/2004
Time: 8:22:13 PM
User: N/A
Computer: COMPUTER-3
Description:
Error code 0000009c, parameter1 00000000, parameter2 8053f0f0, parameter3
cc0000ff, parameter4 20040189.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 30 30 30 30 30 30 39 0000009
0020: 63 20 20 50 61 72 61 6d c Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 30 30 2c 20 000000,
0038: 38 30 35 33 66 30 66 30 8053f0f0
0040: 2c 20 63 63 30 30 30 30 , cc0000
0048: 66 66 2c 20 32 30 30 34 ff, 2004
0050: 30 31 38 39 0189
-----------------------------------------------------------------------
Event Type: Error
Event Source: MRxSmb
Event Category: None
Event ID: 8003
Date: 27/04/2004
Time: 4:44:31 PM
User: N/A
Computer: COMPUTER-3
Description:
The master browser has received a server announcement from the computer
COMPUTER-2 that believes that it is the master browser for the domain on
transport NetBT_Tcpip_{F4E0DE10-7C18-46B. The master browser is stopping or
an election is being forced.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 03 00 4e 00 ......N.
0008: 00 00 00 00 43 1f 00 c0 ....C..└
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
---------------------------------------------------------------------
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 26/04/2004
Time: 11:21:38 AM
User: N/A
Computer: COMPUTER-3
Description:
Error code 0000009c, parameter1 00000000, parameter2 8053f0f0, parameter3
cc0000ff, parameter4 20040189.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 30 30 30 30 30 30 39 0000009
0020: 63 20 20 50 61 72 61 6d c Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 30 30 2c 20 000000,
0038: 38 30 35 33 66 30 66 30 8053f0f0
0040: 2c 20 63 63 30 30 30 30 , cc0000
0048: 66 66 2c 20 32 30 30 34 ff, 2004
0050: 30 31 38 39 0189
-----------------------------------------------------------------
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 25/04/2004
Time: 9:51:42 PM
User: COMPUTER-3\Lara
Computer: COMPUTER-3
Description:
The server {F3A614DC-ABE0-11D2-A441-00C04F795683} did not register with DCOM
within the required timeout.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
---------------------------------------------------------------------

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 25/04/2004
Time: 9:33:24 PM
User: N/A
Computer: COMPUTER-3
Description:
The Application Management service terminated with the following error:
The system cannot find the file specified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
=================================================
> Double click on an error. Below the two arrows is
> an icon like two pages. Press this and it copies
> the details to the clipboard. You'll get something
> like:
>
> Event Type: Error
> Event Source: Application Error
> Event Category: None
> Event ID: 1000
> Date: 28/04/2004
> Time: 00:33:59
> User: NT AUTHORITY\SYSTEM
> Computer: COMPUTER-NAME
>
> Description:
> Faulting application xxxxxxx.exe, version x.x, faulting
> module xxxxxxx.exe, version x.x, fault address 0x000c08bd.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 41 70 70 6c 69 63 61 74 Applicat
> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> 0010: 75 72 65 20 20 70 72 6f ure pro
> 0018: 67 6e 61 6d 65 2e 65 78 gname.ex
> 0020: 65 20 33 2e 39 2e 31 2e e 3.9.1.
> 0028: 30 20 69 6e 20 70 72 6f 0 in pro
> 0030: 67 6e 61 6d 65 2e 65 78 gname.ex
> 0038: 65 20 33 2e 39 2e 31 2e e 3.9.1.
> 0040: 30 20 61 74 20 6f 66 66 0 at off
> 0048: 73 65 74 20 30 30 30 63 set 000c
> 0050: 30 38 62 64 0d 0a 08bd..
>
>
> On Tue, 27 Apr 2004 19:09:45 -0400, in
> <tJBjc.25017$(E-Mail Removed)>
> Frank scrawled:
>
> >
> >> What the hell use is that? What does the human-readable
> >> error message say in your event viewer?
> >>
> >> Start / Run / eventvwr.msc
> >>
> >> I still say you have bad RAM.
> >>

> >How do I copy/paste or save the info you refer to in the event viewer in
> >order to post it here ? Never done this before - sorry. I went to event
> >viewer> system and saw the 'error' logs but when i highlight it/them & go

to
> >Action>properties there doesn't seem to be a way to save/print it
> >

>
> --
> Basic computer maintenance
> http://uk.geocities.com/personel44/maintenance.html



 
Reply With Quote
 
░Mike░
Guest
Posts: n/a
 
      04-28-2004
Ok, you are continually getting STOP 0x0000009c errors,
which point to hardware problems -- this may still be
memory related.

Understanding and Troubleshooting the Stop 0x0000009C Screen
http://support.microsoft.com/?kbid=162363

You have some serious hardware investigation to do.


On Tue, 27 Apr 2004 21:45:35 -0400, in
<y%Djc.25295$(E-Mail Removed)>
Frank scrawled:

>Thanks- here is a sampling of errors for the past couple of days - hopefully
>it offers some clues
>--------------------------------------------------------------------
>Event Type: Error
>Event Source: System Error


<snip>

>Error code 0000009c,


<snip>

--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html
 
Reply With Quote
 
Frank
Guest
Posts: n/a
 
      04-28-2004
Thanks. I'll look into the other errors (I only pasted a few) and see if the
others show 0x0000009c too.
I DID replace one stick of Ram which memetest86 showed as bad. Now it shows
it all as good. But still the crashes. I will use a multimeter to check the
PSU although MBM5 shows good temperatures and voltage on everything.

> Ok, you are continually getting STOP 0x0000009c errors,
> which point to hardware problems -- this may still be
> memory related.
>
> Understanding and Troubleshooting the Stop 0x0000009C Screen
> http://support.microsoft.com/?kbid=162363
>
> You have some serious hardware investigation to do.
>
>
> On Tue, 27 Apr 2004 21:45:35 -0400, in
> <y%Djc.25295$(E-Mail Removed)>
> Frank scrawled:
>
> >Thanks- here is a sampling of errors for the past couple of days -

hopefully
> >it offers some clues
> >--------------------------------------------------------------------
> >Event Type: Error
> >Event Source: System Error

>
> <snip>
>
> >Error code 0000009c,

>
> <snip>
>
> --
> Basic computer maintenance
> http://uk.geocities.com/personel44/maintenance.html



 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Minidump Files Redman Computer Support 1 06-19-2006 05:11 PM
minidump billy Computer Information 2 06-19-2005 07:38 AM
Minidump Brian Computer Support 2 06-18-2005 08:45 PM
Minidump File? Chuck Computer Information 1 08-18-2004 02:20 AM
MiniDump file analysis Frank A+ Certification 5 05-04-2004 12:36 AM



Advertisments