Hello everyone,
It has been a rough 2 days for me, to make a very long story short, Thinking XP's SP2 was having an effect on the installation of a game I have. I reinstalled xp, and came into all sorts of blue screen "Memory Managment" errors, disk errors, ect.
Untill finally the 5th time installing xp everything went ok, with some few bumps.
But the main problem I have been having and have always have ever since I upgraded and rebuilt my pc was constint computer restarts.
I will be in a game, commin out of a game, installing a game ect... and the computer will just up and reboot on me.
I used Microsoft's debugging tool with the mini dmp file and have come up with this:
************************************************************
Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini051505-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
Debug session time: Sun May 15 04:50:02.140 2005 (GMT-4)
System Uptime: 0 days 3:57:29.712
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
..................................................................................................................
Loading unloaded module list
..............
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck DE, {2, e2df5820, e2dfd820, 1ccdd8c0}
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
Unable to load image Ntfs.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for Ntfs.sys
*** ERROR: Module load completed but symbols could not be loaded for Ntfs.sys
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
POOL_CORRUPTION_IN_FILE_AREA (de)
A driver corrupted pool memory used for holding pages destined for disk.
This was discovered by the memory manager when dereferencing the file.
Arguments:
Arg1: 00000002
Arg2: e2df5820
Arg3: e2dfd820
Arg4: 1ccdd8c0
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
MODULE_NAME: nt
FAULTING_MODULE: 804d7000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 42250f77
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xDE
LAST_CONTROL_TRANSFER: from 80524f98 to 805371aa
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
f7a9d058 80524f98 000000de 00000002 e2df5820 nt+0x601aa
f7a9d09c 804f7da5 86069300 01000000 8643a3b0 nt+0x4df98
f7a9d0c8 804f9491 860693cc f7a9d15c 00000000 nt+0x20da5
f7a9d128 804f93a6 85cca650 f7a9d15c ffffffff nt+0x22491
f7a9d168 f766dc0c 00000000 00139a98 f7681f60 nt+0x223a6
f7a9d190 f769b76e 85fd7850 e2139a98 e2139a88 Ntfs+0x3c0c
f7a9d1f4 f76a20e1 f7a9d5c8 85fd7850 00000001 Ntfs+0x3176e
f7a9d264 f76a2189 f7a9d5c8 e21399c0 f7a9d30c Ntfs+0x380e1
f7a9d390 f76a1373 f7a9d5c8 e21399c0 e17de918 Ntfs+0x38189
f7a9d5ac f768fd83 f7a9d5c8 85f892b0 85d056c8 Ntfs+0x37373
f7a9d724 804e13d9 86708020 85f892b0 85f892b0 Ntfs+0x25d83
f7a9d764 8056e943 860861d8 86708020 00010080 nt+0xa3d9
f7a9d794 8056ea96 860861d8 01d056b0 867e7e70 nt+0x97943
f7a9d7bc 8056e9bc e1ab9c48 85d056c8 000005d0 nt+0x97a96
f7a9d804 8056ea06 000005d0 00000001 00000000 nt+0x979bc
f7a9d818 804dd99f 000005d0 0007d878 7c90eb94 nt+0x97a06
f7a9d824 7c90eb94 badb0d00 0007d81c bf8142ad nt+0x699f
0007d878 00000000 00000000 00000000 00000000 0x7c90eb94
STACK_COMMAND: .bugcheck ; kb
FOLLOWUP_NAME: MachineOwner
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
---------
************************************************************
It looks like a driver problem to me, but to go from hear is beyond me?
If anyone has any instructions or ideas. I would greatly appreciate it.
Thanks
It has been a rough 2 days for me, to make a very long story short, Thinking XP's SP2 was having an effect on the installation of a game I have. I reinstalled xp, and came into all sorts of blue screen "Memory Managment" errors, disk errors, ect.
Untill finally the 5th time installing xp everything went ok, with some few bumps.
But the main problem I have been having and have always have ever since I upgraded and rebuilt my pc was constint computer restarts.
I will be in a game, commin out of a game, installing a game ect... and the computer will just up and reboot on me.
I used Microsoft's debugging tool with the mini dmp file and have come up with this:
************************************************************
Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini051505-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
Debug session time: Sun May 15 04:50:02.140 2005 (GMT-4)
System Uptime: 0 days 3:57:29.712
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
..................................................................................................................
Loading unloaded module list
..............
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck DE, {2, e2df5820, e2dfd820, 1ccdd8c0}
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
Unable to load image Ntfs.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for Ntfs.sys
*** ERROR: Module load completed but symbols could not be loaded for Ntfs.sys
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
POOL_CORRUPTION_IN_FILE_AREA (de)
A driver corrupted pool memory used for holding pages destined for disk.
This was discovered by the memory manager when dereferencing the file.
Arguments:
Arg1: 00000002
Arg2: e2df5820
Arg3: e2dfd820
Arg4: 1ccdd8c0
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
MODULE_NAME: nt
FAULTING_MODULE: 804d7000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 42250f77
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xDE
LAST_CONTROL_TRANSFER: from 80524f98 to 805371aa
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
f7a9d058 80524f98 000000de 00000002 e2df5820 nt+0x601aa
f7a9d09c 804f7da5 86069300 01000000 8643a3b0 nt+0x4df98
f7a9d0c8 804f9491 860693cc f7a9d15c 00000000 nt+0x20da5
f7a9d128 804f93a6 85cca650 f7a9d15c ffffffff nt+0x22491
f7a9d168 f766dc0c 00000000 00139a98 f7681f60 nt+0x223a6
f7a9d190 f769b76e 85fd7850 e2139a98 e2139a88 Ntfs+0x3c0c
f7a9d1f4 f76a20e1 f7a9d5c8 85fd7850 00000001 Ntfs+0x3176e
f7a9d264 f76a2189 f7a9d5c8 e21399c0 f7a9d30c Ntfs+0x380e1
f7a9d390 f76a1373 f7a9d5c8 e21399c0 e17de918 Ntfs+0x38189
f7a9d5ac f768fd83 f7a9d5c8 85f892b0 85d056c8 Ntfs+0x37373
f7a9d724 804e13d9 86708020 85f892b0 85f892b0 Ntfs+0x25d83
f7a9d764 8056e943 860861d8 86708020 00010080 nt+0xa3d9
f7a9d794 8056ea96 860861d8 01d056b0 867e7e70 nt+0x97943
f7a9d7bc 8056e9bc e1ab9c48 85d056c8 000005d0 nt+0x97a96
f7a9d804 8056ea06 000005d0 00000001 00000000 nt+0x979bc
f7a9d818 804dd99f 000005d0 0007d878 7c90eb94 nt+0x97a06
f7a9d824 7c90eb94 badb0d00 0007d81c bf8142ad nt+0x699f
0007d878 00000000 00000000 00000000 00000000 0x7c90eb94
STACK_COMMAND: .bugcheck ; kb
FOLLOWUP_NAME: MachineOwner
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
---------
************************************************************
It looks like a driver problem to me, but to go from hear is beyond me?
If anyone has any instructions or ideas. I would greatly appreciate it.
Thanks