MiniDump file analysis

Discussion in 'Computer Support' started by Frank, Apr 27, 2004.

  1. Frank

    Frank Guest

    I recently posted a crashing problem under the subject thread
    "machine_check_exception". ICee & others kindly and patiently led me through
    various diagnosis and then and Will Dorman (on another group) asked me to
    post the results of running Dumpchk.exe on one of the minidump files which
    are saved to windows\minidump after each crash. I have pasted the results of
    the latest crash. Hopefully it provides clues to the unsolved problem of
    very frequent crashes where the screen is only on for a split second before
    the machine reboots (I have turned OFF the automatic reboot after a crash
    option). The only thing I have time to read on the screen is
    machine_check_exception and that it is blue but not the usual windows blue
    screen.
    MemTest86 shows ram modules are good, and MBM5 shows cpu temperature is
    good. No virus'.

    Microsoft Windows XP [Version 5.1.2600]
    (C) Copyright 1985-2001 Microsoft Corp.

    C:\Documents and Settings\Lara>cd\windows

    C:\WINDOWS>dumpchk minidump\mini042704-02.dmp
    Loading dump file minidump\mini042704-02.dmp
    ----- 32 bit Kernel Mini Dump Analysis

    DUMP_HEADER32:
    MajorVersion 0000000f
    MinorVersion 00000a28
    DirectoryTableBase 00039000
    PfnDataBase 81053000
    PsLoadedModuleList 8054be30
    PsActiveProcessHead 8054de78
    MachineImageType 0000014c
    NumberProcessors 00000001
    BugCheckCode 0000009c
    BugCheckParameter1 00000000
    BugCheckParameter2 8053f0f0
    BugCheckParameter3 cc0000ff
    BugCheckParameter4 20040189
    PaeEnabled 00000000
    KdDebuggerDataBlock 8053dde0
    MiniDumpFields 00000dff

    TRIAGE_DUMP32:
    ServicePackBuild 00000100
    SizeOfDump 00010000
    ValidOffset 0000fffc
    ContextOffset 00000320
    ExceptionOffset 000007d0
    MmOffset 00001068
    UnloadedDriversOffset 000010a0
    PrcbOffset 00001878
    ProcessOffset 000024c8
    ThreadOffset 00002720
    CallStackOffset 00002978
    SizeOfCallStack 00003000
    DriverListOffset 00005c08
    DriverCount 000000a3
    StringPoolOffset 00008c70
    StringPoolSize 00001680
    BrokenDriverOffset 00000000
    TriageOptions 00000041
    TopOfStack f2ebd000
    DebuggerDataOffset 00005978
    DebuggerDataSize 00000290
    DataBlocksOffset 0000a2f0
    DataBlocksCount 00000003


    Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
    Kernel base = 0x804d4000 PsLoadedModuleList = 0x8054be30
    Debug session time: Tue Apr 27 12:57:06 2004
    System Uptime: 0 days 0:05:41
    start end module name
    804d4000 806c6980 nt Checksum: 0020230B Timestamp: Thu Aug 29
    05:
    03:24 2002 (3D6DE35C)

    Unloaded modules:
    f309f000 f30af000 NAVENG.Sys Timestamp: unavailable (00000000)
    f2dff000 f2e90000 NavEx15.Sys Timestamp: unavailable (00000000)
    f2ea0000 f2eb0000 NAVENG.Sys Timestamp: unavailable (00000000)
    f2dff000 f2e90000 NavEx15.Sys Timestamp: unavailable (00000000)
    f78c8000 f78d8000 NAVENG.Sys Timestamp: unavailable (00000000)
    f4238000 f42c9000 NavEx15.Sys Timestamp: unavailable (00000000)
    f2f30000 f2f57000 kmixer.sys Timestamp: unavailable (00000000)
    f38c1000 f38e8000 kmixer.sys Timestamp: unavailable (00000000)
    f7de7000 f7de8000 drmkaud.sys Timestamp: unavailable (00000000)
    f3abe000 f3acb000 DMusic.sys Timestamp: unavailable (00000000)
    f7cb2000 f7cb4000 splitter.sys Timestamp: unavailable (00000000)
    f3ace000 f3adc000 swmidi.sys Timestamp: unavailable (00000000)
    f3923000 f3946000 aec.sys Timestamp: unavailable (00000000)
    f7b80000 f7b85000 Cdaudio.SYS Timestamp: unavailable (00000000)
    f757c000 f757f000 Sfloppy.SYS Timestamp: unavailable (00000000)

    Finished dump check

    C:\WINDOWS>


    --
    xx
     
    Frank, Apr 27, 2004
    #1
    1. Advertising

  2. Frank

    °Mike° Guest

    What the hell use is that? What does the human-readable
    error message say in your event viewer?

    Start / Run / eventvwr.msc

    I still say you have bad RAM.


    On Tue, 27 Apr 2004 17:33:33 -0400, in
    <gjAjc.65065$>
    Frank scrawled:

    >I recently posted a crashing problem under the subject thread
    >"machine_check_exception". ICee & others kindly and patiently led me through
    >various diagnosis and then and Will Dorman (on another group) asked me to
    >post the results of running Dumpchk.exe on one of the minidump files which
    >are saved to windows\minidump after each crash. I have pasted the results of
    >the latest crash. Hopefully it provides clues to the unsolved problem of
    >very frequent crashes where the screen is only on for a split second before
    >the machine reboots (I have turned OFF the automatic reboot after a crash
    >option). The only thing I have time to read on the screen is
    >machine_check_exception and that it is blue but not the usual windows blue
    >screen.
    >MemTest86 shows ram modules are good, and MBM5 shows cpu temperature is
    >good. No virus'.
    >
    >Microsoft Windows XP [Version 5.1.2600]
    >(C) Copyright 1985-2001 Microsoft Corp.
    >
    >C:\Documents and Settings\Lara>cd\windows
    >
    >C:\WINDOWS>dumpchk minidump\mini042704-02.dmp
    >Loading dump file minidump\mini042704-02.dmp
    >----- 32 bit Kernel Mini Dump Analysis
    >

    <snip dump>

    --
    Basic computer maintenance
    http://uk.geocities.com/personel44/maintenance.html
     
    °Mike°, Apr 27, 2004
    #2
    1. Advertising

  3. Frank

    Pool Champ Guest

    "Frank" <> wrote in message

    > I recently posted a crashing problem under the subject thread
    > "machine_check_exception".


    -----<SNIP>-----

    Frank, you are using a registered name in your mung, anywhere.com
    I am assuming of course this isn't you

    Registrant:
    Realtime Anywhere
    24 Willifield Way
    London nw11 7xt
    UK

    PC
     
    Pool Champ, Apr 28, 2004
    #3
  4. Frank

    Frank Guest


    > What the hell use is that? What does the human-readable
    > error message say in your event viewer?
    >
    > Start / Run / eventvwr.msc
    >
    > I still say you have bad RAM.
    >

    How do I copy/paste or save the info you refer to in the event viewer in
    order to post it here ? Never done this before - sorry. I went to event
    viewer> system and saw the 'error' logs but when i highlight it/them & go to
    Action>properties there doesn't seem to be a way to save/print it
     
    Frank, Apr 28, 2004
    #4
  5. Frank

    Frank Guest

    oops - changed my name

    --
    xx
    "Pool Champ" <> wrote in message
    news:...
    >
    > "Frank" <> wrote in message
    >
    > > I recently posted a crashing problem under the subject thread
    > > "machine_check_exception".

    >
    > -----<SNIP>-----
    >
    > Frank, you are using a registered name in your mung, anywhere.com
    > I am assuming of course this isn't you
    >
    > Registrant:
    > Realtime Anywhere
    > 24 Willifield Way
    > London nw11 7xt
    > UK
    >
    > PC
    >
    >
     
    Frank, Apr 28, 2004
    #5
  6. Frank

    °Mike° Guest

    Double click on an error. Below the two arrows is
    an icon like two pages. Press this and it copies
    the details to the clipboard. You'll get something
    like:

    Event Type: Error
    Event Source: Application Error
    Event Category: None
    Event ID: 1000
    Date: 28/04/2004
    Time: 00:33:59
    User: NT AUTHORITY\SYSTEM
    Computer: COMPUTER-NAME

    Description:
    Faulting application xxxxxxx.exe, version x.x, faulting
    module xxxxxxx.exe, version x.x, fault address 0x000c08bd.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 41 70 70 6c 69 63 61 74 Applicat
    0008: 69 6f 6e 20 46 61 69 6c ion Fail
    0010: 75 72 65 20 20 70 72 6f ure pro
    0018: 67 6e 61 6d 65 2e 65 78 gname.ex
    0020: 65 20 33 2e 39 2e 31 2e e 3.9.1.
    0028: 30 20 69 6e 20 70 72 6f 0 in pro
    0030: 67 6e 61 6d 65 2e 65 78 gname.ex
    0038: 65 20 33 2e 39 2e 31 2e e 3.9.1.
    0040: 30 20 61 74 20 6f 66 66 0 at off
    0048: 73 65 74 20 30 30 30 63 set 000c
    0050: 30 38 62 64 0d 0a 08bd..


    On Tue, 27 Apr 2004 19:09:45 -0400, in
    <tJBjc.25017$>
    Frank scrawled:

    >
    >> What the hell use is that? What does the human-readable
    >> error message say in your event viewer?
    >>
    >> Start / Run / eventvwr.msc
    >>
    >> I still say you have bad RAM.
    >>

    >How do I copy/paste or save the info you refer to in the event viewer in
    >order to post it here ? Never done this before - sorry. I went to event
    >viewer> system and saw the 'error' logs but when i highlight it/them & go to
    >Action>properties there doesn't seem to be a way to save/print it
    >


    --
    Basic computer maintenance
    http://uk.geocities.com/personel44/maintenance.html
     
    °Mike°, Apr 28, 2004
    #6
  7. Frank

    Frank Guest

    Thanks- here is a sampling of errors for the past couple of days - hopefully
    it offers some clues
    --------------------------------------------------------------------
    Event Type: Error
    Event Source: System Error
    Event Category: (102)
    Event ID: 1003
    Date: 27/04/2004
    Time: 8:22:22 PM
    User: N/A
    Computer: COMPUTER-3
    Description:
    Error code 0000009c, parameter1 00000000, parameter2 8053f0f0, parameter3
    cc0000ff, parameter4 20040189.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 53 79 73 74 65 6d 20 45 System E
    0008: 72 72 6f 72 20 20 45 72 rror Er
    0010: 72 6f 72 20 63 6f 64 65 ror code
    0018: 20 30 30 30 30 30 30 39 0000009
    0020: 63 20 20 50 61 72 61 6d c Param
    0028: 65 74 65 72 73 20 30 30 eters 00
    0030: 30 30 30 30 30 30 2c 20 000000,
    0038: 38 30 35 33 66 30 66 30 8053f0f0
    0040: 2c 20 63 63 30 30 30 30 , cc0000
    0048: 66 66 2c 20 32 30 30 34 ff, 2004
    0050: 30 31 38 39 0189
    -------------------------------------------------------------------
    Event Type: Error
    Event Source: System Error
    Event Category: (102)
    Event ID: 1003
    Date: 27/04/2004
    Time: 8:22:13 PM
    User: N/A
    Computer: COMPUTER-3
    Description:
    Error code 0000009c, parameter1 00000000, parameter2 8053f0f0, parameter3
    cc0000ff, parameter4 20040189.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 53 79 73 74 65 6d 20 45 System E
    0008: 72 72 6f 72 20 20 45 72 rror Er
    0010: 72 6f 72 20 63 6f 64 65 ror code
    0018: 20 30 30 30 30 30 30 39 0000009
    0020: 63 20 20 50 61 72 61 6d c Param
    0028: 65 74 65 72 73 20 30 30 eters 00
    0030: 30 30 30 30 30 30 2c 20 000000,
    0038: 38 30 35 33 66 30 66 30 8053f0f0
    0040: 2c 20 63 63 30 30 30 30 , cc0000
    0048: 66 66 2c 20 32 30 30 34 ff, 2004
    0050: 30 31 38 39 0189
    -----------------------------------------------------------------------
    Event Type: Error
    Event Source: MRxSmb
    Event Category: None
    Event ID: 8003
    Date: 27/04/2004
    Time: 4:44:31 PM
    User: N/A
    Computer: COMPUTER-3
    Description:
    The master browser has received a server announcement from the computer
    COMPUTER-2 that believes that it is the master browser for the domain on
    transport NetBT_Tcpip_{F4E0DE10-7C18-46B. The master browser is stopping or
    an election is being forced.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 00 00 00 00 03 00 4e 00 ......N.
    0008: 00 00 00 00 43 1f 00 c0 ....C..À
    0010: 00 00 00 00 00 00 00 00 ........
    0018: 00 00 00 00 00 00 00 00 ........
    0020: 00 00 00 00 00 00 00 00 ........
    ---------------------------------------------------------------------
    Event Type: Error
    Event Source: System Error
    Event Category: (102)
    Event ID: 1003
    Date: 26/04/2004
    Time: 11:21:38 AM
    User: N/A
    Computer: COMPUTER-3
    Description:
    Error code 0000009c, parameter1 00000000, parameter2 8053f0f0, parameter3
    cc0000ff, parameter4 20040189.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 53 79 73 74 65 6d 20 45 System E
    0008: 72 72 6f 72 20 20 45 72 rror Er
    0010: 72 6f 72 20 63 6f 64 65 ror code
    0018: 20 30 30 30 30 30 30 39 0000009
    0020: 63 20 20 50 61 72 61 6d c Param
    0028: 65 74 65 72 73 20 30 30 eters 00
    0030: 30 30 30 30 30 30 2c 20 000000,
    0038: 38 30 35 33 66 30 66 30 8053f0f0
    0040: 2c 20 63 63 30 30 30 30 , cc0000
    0048: 66 66 2c 20 32 30 30 34 ff, 2004
    0050: 30 31 38 39 0189
    -----------------------------------------------------------------
    Event Type: Error
    Event Source: DCOM
    Event Category: None
    Event ID: 10010
    Date: 25/04/2004
    Time: 9:51:42 PM
    User: COMPUTER-3\Lara
    Computer: COMPUTER-3
    Description:
    The server {F3A614DC-ABE0-11D2-A441-00C04F795683} did not register with DCOM
    within the required timeout.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    ---------------------------------------------------------------------

    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 25/04/2004
    Time: 9:33:24 PM
    User: N/A
    Computer: COMPUTER-3
    Description:
    The Application Management service terminated with the following error:
    The system cannot find the file specified.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    =================================================
    > Double click on an error. Below the two arrows is
    > an icon like two pages. Press this and it copies
    > the details to the clipboard. You'll get something
    > like:
    >
    > Event Type: Error
    > Event Source: Application Error
    > Event Category: None
    > Event ID: 1000
    > Date: 28/04/2004
    > Time: 00:33:59
    > User: NT AUTHORITY\SYSTEM
    > Computer: COMPUTER-NAME
    >
    > Description:
    > Faulting application xxxxxxx.exe, version x.x, faulting
    > module xxxxxxx.exe, version x.x, fault address 0x000c08bd.
    >
    > For more information, see Help and Support Center at
    > http://go.microsoft.com/fwlink/events.asp.
    > Data:
    > 0000: 41 70 70 6c 69 63 61 74 Applicat
    > 0008: 69 6f 6e 20 46 61 69 6c ion Fail
    > 0010: 75 72 65 20 20 70 72 6f ure pro
    > 0018: 67 6e 61 6d 65 2e 65 78 gname.ex
    > 0020: 65 20 33 2e 39 2e 31 2e e 3.9.1.
    > 0028: 30 20 69 6e 20 70 72 6f 0 in pro
    > 0030: 67 6e 61 6d 65 2e 65 78 gname.ex
    > 0038: 65 20 33 2e 39 2e 31 2e e 3.9.1.
    > 0040: 30 20 61 74 20 6f 66 66 0 at off
    > 0048: 73 65 74 20 30 30 30 63 set 000c
    > 0050: 30 38 62 64 0d 0a 08bd..
    >
    >
    > On Tue, 27 Apr 2004 19:09:45 -0400, in
    > <tJBjc.25017$>
    > Frank scrawled:
    >
    > >
    > >> What the hell use is that? What does the human-readable
    > >> error message say in your event viewer?
    > >>
    > >> Start / Run / eventvwr.msc
    > >>
    > >> I still say you have bad RAM.
    > >>

    > >How do I copy/paste or save the info you refer to in the event viewer in
    > >order to post it here ? Never done this before - sorry. I went to event
    > >viewer> system and saw the 'error' logs but when i highlight it/them & go

    to
    > >Action>properties there doesn't seem to be a way to save/print it
    > >

    >
    > --
    > Basic computer maintenance
    > http://uk.geocities.com/personel44/maintenance.html
     
    Frank, Apr 28, 2004
    #7
  8. Frank

    °Mike° Guest

    Ok, you are continually getting STOP 0x0000009c errors,
    which point to hardware problems -- this may still be
    memory related.

    Understanding and Troubleshooting the Stop 0x0000009C Screen
    http://support.microsoft.com/?kbid=162363

    You have some serious hardware investigation to do.


    On Tue, 27 Apr 2004 21:45:35 -0400, in
    <y%Djc.25295$>
    Frank scrawled:

    >Thanks- here is a sampling of errors for the past couple of days - hopefully
    >it offers some clues
    >--------------------------------------------------------------------
    >Event Type: Error
    >Event Source: System Error


    <snip>

    >Error code 0000009c,


    <snip>

    --
    Basic computer maintenance
    http://uk.geocities.com/personel44/maintenance.html
     
    °Mike°, Apr 28, 2004
    #8
  9. Frank

    Frank Guest

    Thanks. I'll look into the other errors (I only pasted a few) and see if the
    others show 0x0000009c too.
    I DID replace one stick of Ram which memetest86 showed as bad. Now it shows
    it all as good. But still the crashes. I will use a multimeter to check the
    PSU although MBM5 shows good temperatures and voltage on everything.

    > Ok, you are continually getting STOP 0x0000009c errors,
    > which point to hardware problems -- this may still be
    > memory related.
    >
    > Understanding and Troubleshooting the Stop 0x0000009C Screen
    > http://support.microsoft.com/?kbid=162363
    >
    > You have some serious hardware investigation to do.
    >
    >
    > On Tue, 27 Apr 2004 21:45:35 -0400, in
    > <y%Djc.25295$>
    > Frank scrawled:
    >
    > >Thanks- here is a sampling of errors for the past couple of days -

    hopefully
    > >it offers some clues
    > >--------------------------------------------------------------------
    > >Event Type: Error
    > >Event Source: System Error

    >
    > <snip>
    >
    > >Error code 0000009c,

    >
    > <snip>
    >
    > --
    > Basic computer maintenance
    > http://uk.geocities.com/personel44/maintenance.html
     
    Frank, Apr 28, 2004
    #9
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Brian

    Minidump

    Brian, Jun 18, 2005, in forum: Computer Support
    Replies:
    2
    Views:
    655
    Toolman Tim
    Jun 18, 2005
  2. Chuck

    Minidump File?

    Chuck, Aug 17, 2004, in forum: Computer Information
    Replies:
    1
    Views:
    484
  3. billy

    minidump

    billy, Jun 18, 2005, in forum: Computer Information
    Replies:
    2
    Views:
    528
    Duane Arnold
    Jun 19, 2005
  4. Redman

    Minidump Files

    Redman, Jun 19, 2006, in forum: Computer Support
    Replies:
    1
    Views:
    577
  5. Frank

    MiniDump file analysis

    Frank, Apr 27, 2004, in forum: A+ Certification
    Replies:
    5
    Views:
    1,455
    Frank
    May 4, 2004
Loading...

Share This Page