BSOD event 1001, bug check
<can someone help me what is the cause of it? it just happened a while ago and i got feared it will damage my pc..
n
System
Provider
[ Name]
Microsoft-Windows-WER-SystemErrorReporting
[ Guid]
{ABCE23E7-DE45-4366-8631-84FA6C525952}
[ EventSourceName]
BugCheck
EventID
1001
[ Qualifiers]
16384
Version
0
Level
2
Task
0
Opcode
0
Keywords
0x80000000000000
TimeCreated
[ SystemTime]
2014-04-20T23:40:42.000000000Z
EventRecordID
10197
Correlation
Execution
[ ProcessID]
0
[ ThreadID]
0
Channel
System
Computer
rustyevangelista
Security
EventData
param1
0x0000007e (0xffffffffc0000005, 0x0000000000000000, 0xfffff880031fbb08, 0xfffff880031fb370)
param2
C:\Windows\MEMORY.DMP
param3
042114-53539-01
Hi,
In order to assist you, we will need the .DMP files to analyze what exactly occurred at the time of the crash, etc.
If you don't know where .DMP files are located, here's how to get to them:
1. Navigate to the %systemroot%\Minidump folder.
2. Copy any and all DMP files in the Minidump folder to your Desktop and then zip up these files.
3. Upload the zip containing the .DMP files to Onedrive or a hosting site of your choice and paste in your reply. Prefered sites: Onedrive, Mediafire, Dropbox, etc. Nothing with wait-timers.
4 (optional): The type of .DMP files located in the Minidump folder are known as Small Memory Dumps. In %systemroot% there will be what is known as a Kernel-Dump (if your system is set to generate). It is labeled MEMORY.DMP. The difference
between Small Memory Dumps and Kernel-Dumps in the simplest definition is a Kernel-Dump contains
much more information at the time of the crash, therefore allowing further debugging of your issue. If your upload speed permits it, and you aren't going against any strict bandwidth and/or usage caps, etc, the Kernel-Dump is the best
choice. Do note that Kernel-Dumps are much larger in size due to containing much more info, which is why I mentioned upload speed, etc.
If you are going to use Onedrive but don't know how to upload to it, please visit the following:
Upload photos and files to Onedrive.
Please note that any "cleaner" programs such as TuneUp Utilities, CCleaner, etc, by default will delete .DMP files upon use.
If your computer is not generating .DMP files, please do the following:
1. Start > type %systemroot% which should show the Windows folder, click on it. Once inside that folder, ensure there is a Minidump folder created. If not, CTRL-SHIFT-N to make a New Folder and name it Minidump.
2. Windows key + Pause key. This should bring up System. Click Advanced System Settings on the left > Advanced > Performance > Settings > Advanced > Ensure there's a check-mark for 'Automatically manage paging file size for all
drives'.
3. Windows key + Pause key. This should bring up System. Click Advanced System Settings on the left > Advanced > Startup and Recovery > Settings > System Failure > ensure there is a check mark next to 'Write an event to the system
log'.
Ensure Small Memory Dump is selected and ensure the path is %systemroot%\Minidump.
4. Double check that the WERS is ENABLED:
Start > Search > type services.msc > Under the name tab, find Windows Error Reporting Service > If the status of the service is not Started then right click it and select Start. Also ensure that under Startup Type it is set to Automatic rather than
Manual. You can do this by right clicking it, selecting properties, and under General selecting startup type to 'Automatic', and then click Apply.
If you cannot get into normal mode to do any of this, please do this via Safe Mode.
Regards,
Patrick
“Be kind whenever possible. It is always possible.” - Dalai Lama
Similar Messages
-
Event 1001 Bug Check Windows 7 Ultimate 64-bit
Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 1/17/2014 6:56:51 PM
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: KT-PC
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x00000019 (0x0000000000000003, 0xfffff8a0245c2580, 0xfffff8a0245c2580, 0x73634946030c030c). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 011714-30997-01.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2014-01-17T23:56:51.000000000Z" />
<EventRecordID>389585</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>KT-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x00000019 (0x0000000000000003, 0xfffff8a0245c2580, 0xfffff8a0245c2580, 0x73634946030c030c)</Data>
<Data Name="param2">C:\Windows\MEMORY.DMP</Data>
<Data Name="param3">011714-30997-01</Data>
</EventData>
</Event>We do need the actual DMP file as it contains the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible.
We prefer at least 2 DMP files to spot trends and confirm the cause.
Please follow our instructions for finding and uploading the files we need to help you fix your computer. They can be found here
If you have any questions about the procedure please ask
Please provide us with your Event Viewer administrative logs by following these steps:
Click Start Menu
Type eventvwr into Search programs and files (do not hit enter)
Right click eventvwr.exe and click Run as administrator
Expand Custom Views
Click Administrative Events
Right click Administrative Events
Save all Events in Custom View As...
Save them in a folder where you will remember which folder and save as Errors.evtx
Go to where you saved Errors.evtx
Right click Errors.evtx -> send to -> compressed (zipped) folder
Upload the .zip file to skydrive or a file sharing service and put a link to it in your next post
If you have updated to win 8.1 and you get the error message "the system cannot find the file specified" it is a known problem. The
work around is to edit the registry. If you are not comfortable doing this DONT. If you are, backup the key before you do
Press Win+"R" and input regedit
Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels. Delete "Microsoft-Windows-DxpTaskRingtone/Analytic"
Wanikiya and Dyami--Team Zigzag -
Event ID 1001 Bug check Occurred, After updation of Kaspersky Windows 7
Hi,
Recently I have updated my Anti Virus Kaspersky 10 on my Windows 7 Ultimate System 32 bit. After that it restart automatically again and again. Then i restore it on Last known good configuration. It resolve the issue. In event viewr i found out the
Error 1001 Bug check ..
I exactly want to know that what happened to my system . For this How can i send my dmp files to support team .
I have face the problem non my multiple systems but not all .. .
Please guide me asap .The following log occurred
The computer has rebooted from a bugcheck. The bugcheck was: 0x000000c9 (0x0000024d, 0x9047b25a, 0x8d5ed0b8, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 041714-22230-01.
when i run verifier.exe
and select " Create standard Setting" then select "Automatically select drivers build for older version of windows" and press Next
it display the Kl1.sys driver
what does it means .. is there any problem with this file? -
Odd Bug Check Event ID 18 - BCCode 124; Can anyone help?
Hello,
I understand that each bug check is different even if the codes are the same due to different real world problems but I'm stumped, granted I don't know too much. Hence I am here. I'm getting a BSOD every time I let my computer idle for 10 and half minutes.
Like clockwork it will blue screen. However, whenever I am using it, it won't blue screen at all. I have even used my computer nonstop for 13 hours and no BSOD, leave it for 10 minutes and you guessed it, blue screen.
So here's the info...
Problem signature:
Problem Event Name: BlueScreen
OS Version:
6.1.7601.2.1.0.768.3
Locale ID:
1033
Additional information about the problem:
BCCode:
124
BCP1:
0000000000000000
BCP2:
FFFFFA800CDCC028
BCP3:
00000000BF800000
BCP4:
0000000000200401
OS Version:
6_1_7601
Service Pack:
1_0
Product:
768_1
Not too helpful right? Alright, so I have updated the BIOS to latest version, all drivers are up to date, everything is as up to date as I can get it as (as far as I can perceive). I am still getting bug checks when it idles for 10 minutes. So I do a bug
check analysis...
WHEA_UNCORRECTABLE_ERROR (124)
A fatal hardware error has occurred. Parameter 1 identifies the type of error
source that reported the error. Parameter 2 holds the address of the
WHEA_ERROR_RECORD structure that describes the error conditon.
Arguments:
Arg1: 0000000000000000, Machine Check Exception
Arg2: fffffa800ccf7028, Address of the WHEA_ERROR_RECORD structure.
Arg3: 00000000bf800000, High order 32-bits of the MCi_STATUS value.
Arg4: 0000000000200401, Low order 32-bits of the MCi_STATUS value.
Debugging Details:
BUGCHECK_STR: 0x124_GenuineIntel
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
PROCESS_NAME: ubssrv_oc_only
CURRENT_IRQL: f
ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) amd64fre
STACK_TEXT:
fffff880`033dfa58 fffff800`0302da3b : 00000000`00000124 00000000`00000000 fffffa80`0ccf7028 00000000`bf800000 : nt!KeBugCheckEx
fffff880`033dfa60 fffff800`031f0463 : 00000000`00000001 fffffa80`0c484ea0 00000000`00000000 fffffa80`0c484ef0 : hal!HalBugCheckSystem+0x1e3
fffff880`033dfaa0 fffff800`0302d700 : 00000000`00000728 fffffa80`0c484ea0 fffff880`033dfe30 fffff880`033dfe00 : nt!WheaReportHwError+0x263
fffff880`033dfb00 fffff800`0302d052 : fffffa80`0c484ea0 fffff880`033dfe30 fffffa80`0c484ea0 00000000`00000000 : hal!HalpMcaReportError+0x4c
fffff880`033dfc50 fffff800`0302cf0d : 00000000`00000004 00000000`00000001 fffff880`033dfeb0 00000000`00000000 : hal!HalpMceHandler+0x9e
fffff880`033dfc90 fffff800`03020e88 : 00000000`00000000 00000000`00000010 00000000`00000000 00000000`00000000 : hal!HalpMceHandlerWithRendezvous+0x55
fffff880`033dfcc0 fffff800`030d84ac : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : hal!HalHandleMcheck+0x40
fffff880`033dfcf0 fffff800`030d8313 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxMcheckAbort+0x6c
fffff880`033dfe30 fffff800`030d07b8 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiMcheckAbort+0x153
fffff880`09e9f638 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!memcpy+0x208
STACK_COMMAND: kb
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: GenuineIntel
IMAGE_NAME: GenuineIntel
DEBUG_FLR_IMAGE_TIMESTAMP: 0
IMAGE_VERSION:
FAILURE_BUCKET_ID: X64_0x124_GenuineIntel_PROCESSOR_MAE
BUCKET_ID: X64_0x124_GenuineIntel_PROCESSOR_MAE
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:x64_0x124_genuineintel_processor_mae
FAILURE_ID_HASH: {addebe90-d04a-b9c9-a39c-2531fe75dd4e}
Followup: MachineOwner
I should also mention that I checked hard drive for bad sectors and ram for any errors using 10 passes with Memcheck86 and nothing bad to report. If anyone can help me out with this that would be great! I can provide as many minidump files as you need, if
need be.
Note: I have previously tried resolving this issue and rather than GenuineIntel being the probable cause, it used to show netio.sys as the culprit. However, I tried using a registry cleaner and of course it wiped all previous minidumps that showed netio.sys
as probable source of error and now it just shows GenuineIntel. Interesting? Sorry I can't provide those "previous" minidump files accusing netio.sys, because the registry cleaner wiped them, but I can provide current minidump files.
Thanks for any help!!Hi,
In order to assist you, we will need the .DMP files to analyze what exactly occurred at the time of the crash, etc.
If you don't know where .DMP files are located, here's how to get to them:
1. Navigate to the %systemroot%\Minidump folder.
-- %systemroot% is the environment variable for your Windows directory. For example, C:\Windows.
2. Copy any and all .DMP files in the Minidump folder to your Desktop, create a new folder on the Desktop to put these .DMP files in, and then zip the folder. You can then either use a 3rd party tool such as 7-Zip/Winrar, or you can use Windows'
default method of zipping folders.
Compress and uncompress files (zip files).
Please note that any "cleaner" programs such as TuneUpUtilities, CCleaner, etc, by default will delete .DMP files upon use. With this said, if you've run such software, and your Minidump folder is empty, you will need
to allow the system to crash once again to generate a crash dump.
3. Upload the .ZIP containing the .DMP files to Onedrive or a hosting site of your choice and paste in your reply.
Preferred sites: Onedrive, Mediafire, Dropbox, etc. Nothing with wait-timers, download managers, etc.
4 (optional): The type of .DMP files located in the Minidump folder are known as Small Memory Dumps. In %systemroot% there will be what is known as a Kernel Memory Dump (if your system is set to generate). It is labeled MEMORY.DMP. The difference
between Small Memory Dumps and Kernel Memory Dumps in the simplest definition is a Kernel Memory Dump contains
much more information at the time of the crash, therefore allowing further debugging of your issue. If your upload speed permits it, and you aren't going against any strict bandwidth and/or usage caps, etc, the Kernel Memory Dump is
the best choice. Do note that Kernel Memory Dumps are much larger
in size due to containing much more info, which is why I mentioned upload speed, etc.
If you are going to use Onedrive but don't know how to upload to it, please visit the following:
Upload photos and files to Onedrive.
After doing that, to learn how to share the link to the file if you are unaware, please visit the following link -
Share files and folders and change permissions and view 'Get a link'.
If your computer is not generating .DMP files, please do the following:
1. Start > type %systemroot% which should show the Windows folder, click on it. Once inside that folder, ensure there is a Minidump folder created. If not, CTRL-SHIFT-N to make a New Folder and name it Minidump.
2. Windows key + Pause key. This should bring up System. Click Advanced System Settings on the left > Advanced > Performance > Settings > Advanced > Ensure there's a check-mark for 'Automatically manage paging file size for
all drives'.
3. Windows key + Pause key. This should bring up System. Click Advanced System Settings on the left > Advanced > Startup and Recovery > Settings > System Failure > ensure there is a check mark next to 'Write an event to the
system log'.
Ensure Small Memory Dump is selected and ensure the path is %systemroot%\Minidump.
4. Double check that the WERS is ENABLED:
Start > Search > type services.msc > Under the name tab, find Windows Error Reporting Service > If the status of the service is not Started then right click it and select Start. Also ensure that under Startup Type it is set to Automatic rather than
Manual. You can do this by right clicking it, selecting properties, and under General selecting startup type to 'Automatic', and then click Apply.
If you cannot get into normal mode to do any of this, please do this via Safe Mode.
Regards,
Patrick
“Be kind whenever possible. It is always possible.” - Dalai Lama -
Windows 2008 R2 SP1 BSOD Bug Check 0x0000003b
Hi,
I have a Win 2k8 R2 SP1 VM that keeps crashing every night for the past 2 days. Every time is the same bug check code 0x0000003b. I looked around and found 2 KBs for this specific code:
http://support.microsoft.com/kb/980932/en-gb - does not apply to my system
http://support.microsoft.com/kb/2836373/en-gb - installed the hotfix yesterday but got another crash today
The server has 30 printers installed on it and during the night only one is used so I tend to think that it is causing the crash. The printer has the latest driver installed (Konica Minolta Universal Printing Driver v2.4).
I looked through the dump files generated by every BSOD but I cannot find anything that would point me in the right direction... or I might have missed it.
Here is a bit more info on the server:
Windows 2008 R2 Standard SP1
System is a VM
IIS role installed
30 printers installed - all drivers are up to date
I have stored the dump files here: http://1drv.ms/1kpL9vh
Any help with this would be greatly appreciated.
ThanksHi gogu2008,
First , please keep the VM and Host up-to-date then check if the issue persists .
What is the Host OS ?
How much RAM does the VM have ?
If the VM is using dynamic memory , for troubleshooting you may try to configure fixed RAM for the VM.
As for the DUMP , you can change the "mini dump " to "kernel memory dump " then analysis the file after BSOD .
Hope it helps
Best Regards
Elton Ji
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place. -
Event 1001, BugCheck + Event 41, Kernel-Power
hello,
I'm getting these random restarts on my laptop i baught just few months ago.
In the event viewer i found Event 41, Kernel-Power
followed by an Event 1001, BugCheck.
Please help.
System
Provider
[ Name]
Microsoft-Windows-Kernel-Power
[ Guid]
{331C3B3A-2005-44C2-AC5E-77220C37D6B4}
EventID
41
Version
3
Level
1
Task
63
Opcode
0
Keywords
0x8000000000000002
TimeCreated
[ SystemTime]
2014-03-25T23:24:31.654884500Z
EventRecordID
21937
Correlation
Execution
[ ProcessID]
4
[ ThreadID]
8
Channel
System
Computer
Arseni_Graifer
Security
[ UserID]
S-1-5-18
EventData
BugcheckCode
159
BugcheckParameter1
0x3
BugcheckParameter2
0xffffe000059b3620
BugcheckParameter3
0xffffd00020c6b840
BugcheckParameter4
0xffffe00000c83010
SleepInProgress
0
PowerButtonTimestamp
0
BootAppStatus
0
System
Provider
[ Name]
Microsoft-Windows-WER-SystemErrorReporting
[ Guid]
{ABCE23E7-DE45-4366-8631-84FA6C525952}
[ EventSourceName]
BugCheck
EventID
1001
[ Qualifiers]
16384
Version
0
Level
2
Task
0
Opcode
0
Keywords
0x80000000000000
TimeCreated
[ SystemTime]
2014-03-25T23:24:56.000000000Z
EventRecordID
21926
Correlation
Execution
[ ProcessID]
0
[ ThreadID]
0
Channel
System
Computer
ARSENI_GRAIFER
Security
EventData
param1
0x0000009f (0x0000000000000003, 0xffffe000059b3620, 0xffffd00020c6b840, 0xffffe00000c83010)
param2
C:\WINDOWS\MEMORY.DMP
param3
032614-25828-01
My tech specs:
proccessor: Intel Core i7-3632QM CPU @ 2.20GHz 2.20GHz
NVIDIA Geforce GT 635M
LENOVO IDEAPAD Z500Hi,
First, for this issue, please open device manager and check updates for power driver first.
Then, we consider that this issue is related to BSOD, please help to upload the minidump file here for our research:
Please upload them to a file sharing service like Onedrive or "Rapidshare" and put a link to them in your reply.
Link for how to upload below.
http://www.wikihow.com/Use-SkyDrive
To ensure minidumps are enabled, refer to the step “Configure the dump type” in following article:
How to read the small memory dump file that is created by Windows if a crash occurs
http://support.microsoft.com/kb/315263#method2
Kate Li
TechNet Community Support -
Windows 8.1 rebooting overnight with a bug check
Windows 8.1 is rebooting overnight with a bug check in the system logs.
Event files saved:
https://onedrive.live.com/redir?resid=7DE1274A30A8AE63!1788&authkey=!AGhpLBq-8hDqCok&ithint=file%2c.zip
I also tried verifier to check out device drivers but could not figure out how to use it. I got it configured and started, but did not know what to do once the computer rebooted.... Sounds like I need to download a windows debugger and
so I thought I would start with the event log files. Any link on how to interpret the even logs, dump or mini dump files?
Thanks,
RossHi,
According to the Event Log:
Session "ReadyBoot" stopped due to the following error: 0xC0000188
After that:
The previous system shutdown at 7:07:39 PM on 6/3/2014 was unexpected.
This problem probably caused by ReadyBoot problem, While you needn't worry about it,
The logging of this error will not affect the operation of your computer. ReadyBoot is used by the ReadyBoost service that optimizes the boot time of your computer to a minimum.
You can refer to the link below for more details about this error:
http://support.microsoft.com/kb/2001347
In addition, I found another error message in your event log:
The computer has rebooted from a bugcheck. The bugcheck was: 0x00000019 (0x0000000000000020, 0xffffc0016d9657f0, 0xffffc0016d966040, 0x000000000585000a). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 060314-18953-01.
If you still need assistance about this problem, please upload the memory.dmp file and share with us. We would help you try to analysize this log to find further reason of this problem.
Roger Lu
TechNet Community Support -
Need hotfix for BUG Check reboots for 2012R2
I have 5 Node cluster of 2012R2 which will go to production in next few days, but am struck with the Bug check issue, which reboots atleast 3 nodes frequently. Am aware of this bug check and know the hotfixes for 2012 and 2008. However am not able to find
the hotfix or steps to resolve this issue on 2012r2.
Need assistance to fix this problem.
Thanks in advance, below the debug report.
3: kd> !analyze -v
* Bugcheck Analysis
USER_MODE_HEALTH_MONITOR (9e)
One or more critical user mode components failed to satisfy a health check.
Hardware mechanisms such as watchdog timers can detect that basic kernel
services are not executing. However, resource starvation issues, including
memory leaks, lock contention, and scheduling priority misconfiguration,
may block critical user mode components without blocking DPCs or
draining the nonpaged pool.
Kernel components can extend watchdog timer functionality to user mode
by periodically monitoring critical applications. This bugcheck indicates
that a user mode health check failed in a manner such that graceful
shutdown is unlikely to succeed. It restores critical services by
rebooting and/or allowing application failover to other servers.
Arguments:
Arg1: ffffe8010a271900, Process that failed to satisfy a health check within the
configured timeout
Arg2: 00000000000004b0, Health monitoring timeout (seconds)
Arg3: 0000000000000005
Arg4: 0000000000000000
Debugging Details:
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work.
*** Type referenced: nt!_KPRCB
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work.
*** Type referenced: nt!_KPRCB
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work.
*** Type referenced: nt!_KPRCB
ADDITIONAL_DEBUG_TEXT:
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.
MODULE_NAME: netft
FAULTING_MODULE: fffff80021089000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 5215f788
PROCESS_OBJECT: ffffe8010a271900
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0x9E
CURRENT_IRQL: 0
ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) x86fre
LAST_CONTROL_TRANSFER: from fffff800a291ac08 to fffff800211dcfa0
STACK_TEXT:
ffffd001`d60c6938 fffff800`a291ac08 : 00000000`0000009e ffffe801`0a271900 00000000`000004b0 00000000`00000005 : nt!KeBugCheckEx
ffffd001`d60c6940 fffff800`a291a892 : 00000000`00000000 00000000`00000000 ffffd001`d601c180 ffffe001`1f716ec8 : netft+0x2c08
ffffd001`d60c6980 fffff800`210e2810 : ffffd001`d60c6b00 ffffe001`1f716ec8 ffffe001`24e7d220 ffffd001`d601c180 : netft+0x2892
ffffd001`d60c69b0 fffff800`211e0aea : ffffd001`d601c180 ffffd001`d601c180 ffffd001`d6028dc0 ffffe001`24e7d080 : nt!KeRemoveQueueEx+0x3b80
ffffd001`d60c6c60 00000000`00000000 : ffffd001`d60c7000 ffffd001`d60c1000 00000000`00000000 00000000`00000000 : nt!KeSynchronizeExecution+0x2efa
STACK_COMMAND: kb
FOLLOWUP_IP:
netft+2c08
fffff800`a291ac08 cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: netft+2c08
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: netft.sys
BUCKET_ID: WRONG_SYMBOLS
FAILURE_BUCKET_ID: WRONG_SYMBOLS
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:wrong_symbols
FAILURE_ID_HASH: {70b057e8-2462-896f-28e7-ac72d4d365f8}
Followup: MachineOwner
ndrajHi,
Try to install all recommended cluster hot-fixes to stop further BSODs. Bug check ID 0x9E is recorded for this shutdown & image name netft.sys cause of server shutdown.
As suggested in
similar kind of thread netft.sys is driver of MS Cluster Virtual Adapter. Try to to update firmware/drivers of NICs.
Here is another useful link for your reference
Regards, Ravikumar P -
Can anyone tell me what may be causing this bsod?
Thanks in advance
http://sdrv.ms/1gUFj3USHesser
This one crash was related to your 4 year old video driver. I would start by updating it to current. If this is a laptop it may also be heat.
"It's not a true crash, in the sense that the Blue Screen was initiated only because the combination of video driver and video hardware was being unresponsive, and not because of any synchronous processing exception".
Since Vista, the "Timeout Detection and Recovery" (TDR) components of the OS video subsystem have been capable of doing some truly impressive things to try to recover from issues which would have caused earlier OS's like XP to crash.
As a last resort, the TDR subsystem sends the video driver a "please restart yourself now!" command and waits a few seconds.
If there's no response, the OS concludes that the video driver/hardware combo has truly collapsed in a heap, and it fires off that stop 0x116 BSOD.
If playing with video driver versions hasn't helped, make sure the box is not overheating.
Try removing a side panel and aiming a big mains fan straight at the motherboard and GPU.
Run it like that for a few hours or days - long enough to ascertain whether cooler temperatures make a difference.
If so, it might be as simple as dust buildup and subsequently inadequate cooling.
I would download cpu-z and gpu-z (both free) and keep an eye on the video temps
For more information please read this blog http://captaindbg.com/bug-check-0x116-video_tdr_error-troubleshooting-tips/
http://msdn.microsoft.com/en-us/library/windows/hardware/ff557263%28v=vs.85%29.aspx
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18247.x86fre.win7sp1_gdr.130828-1532
Machine Name:
Kernel base = 0x82e4b000 PsLoadedModuleList = 0x82f944d0
Debug session time: Fri Feb 7 15:58:04.589 2014 (UTC - 5:00)
System Uptime: 0 days 2:47:15.306
Loading Kernel Symbols
BugCheck 116, {86129510, 92e449b0, 0, c}
*** WARNING: Unable to verify timestamp for igdkmd32.sys
*** ERROR: Module load completed but symbols could not be loaded for igdkmd32.sys
Probably caused by : igdkmd32.sys ( igdkmd32+119b0 )
VIDEO_TDR_FAILURE (116)
Attempt to reset the display driver and recover from timeout failed.
Arguments:
Arg1: 86129510, Optional pointer to internal TDR recovery context (TDR_RECOVERY_CONTEXT).
Arg2: 92e449b0, The pointer into responsible device driver module (e.g. owner tag).
Arg3: 00000000, Optional error code (NTSTATUS) of the last failed operation.
Arg4: 0000000c, Optional internal context dependent data.
Debugging Details:
FAULTING_IP:
igdkmd32+119b0
92e449b0 55 push ebp
DEFAULT_BUCKET_ID: GRAPHICS_DRIVER_TDR_FAULT
CUSTOMER_CRASH_COUNT: 1
BUGCHECK_STR: 0x116
PROCESS_NAME: SpotifyHelper.
CURRENT_IRQL: 0
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
STACK_TEXT:
905cb65c 933bd0ff 00000116 86129510 92e449b0 nt!KeBugCheckEx+0x1e
905cb680 933b1ae6 92e449b0 00000000 0000000c dxgkrnl!TdrBugcheckOnTimeout+0x8d
905cb6a4 920bc92c 00129510 00000000 905cb768 dxgkrnl!TdrIsRecoveryRequired+0xb8
905cb71c 920e3d55 fffffcfb 0009d053 00000000 dxgmms1!VidSchiReportHwHang+0x3c0
905cb748 920cd471 886fa008 905cb768 00000102 dxgmms1!VidSchWaitForCompletionEvent+0x16f
905cb7e0 920ceaeb bb03afe0 00000002 00000000 dxgmms1!VIDMM_GLOBAL::xWaitForAllEngines+0x181
905cb7f8 920de881 b50732e0 88525948 85d7fab8 dxgmms1!VIDMM_GLOBAL::WaitForAllPagingEngines+0x1b
905cb810 8301a603 86105130 85d7fab8 905cb9ec dxgmms1!VIDMM_MEMORY_SEGMENT::RotateCopyCallback+0x87
905cb93c 920d7dcb 08410000 905cb984 00000000 nt!MmRotatePhysicalView+0x59c
905cb98c 920dee13 bb193580 00000002 00000000 dxgmms1!VIDMM_PROCESS_HEAP::Rotate+0xe1
905cba78 920c8ac7 b50732e0 00000001 88922838 dxgmms1!VIDMM_MEMORY_SEGMENT::EvictResource+0x4b5
905cba9c 920cede8 88922840 00000000 88922824 dxgmms1!VIDMM_GLOBAL::EvictAllAllocationInList+0x2f
905cbac0 920d08b7 00000000 00000000 00000000 dxgmms1!VIDMM_GLOBAL::EvictAllReclaimedAllocation+0x2a
905cbbb8 920e7988 9d1fff00 00000000 89697e40 dxgmms1!VIDMM_GLOBAL::PrepareDmaBuffer+0x925
905cbd18 920e8279 8970cf08 89721008 905cbd3c dxgmms1!VidSchiSubmitRenderCommand+0x1c0
905cbd28 920e8516 8970cf08 82e81b99 886fa008 dxgmms1!VidSchiSubmitQueueCommand+0x61
905cbd3c 920e85bd 886fa008 00000000 88525948 dxgmms1!VidSchiRun_PriorityTable+0x24
905cbd50 8305413d 886fa008 a12eae73 00000000 dxgmms1!VidSchiWorkerThread+0x7f
905cbd90 82efb559 920e853e 886fa008 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
STACK_COMMAND: .bugcheck ; kb
FOLLOWUP_IP:
igdkmd32+119b0
92e449b0 55 push ebp
SYMBOL_NAME: igdkmd32+119b0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: igdkmd32
IMAGE_NAME: igdkmd32.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a01d354
FAILURE_BUCKET_ID: 0x116_IMAGE_igdkmd32.sys
BUCKET_ID: 0x116_IMAGE_igdkmd32.sys
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x116_image_igdkmd32.sys
Wanikiya and Dyami--Team Zigzag -
Group RCDC Event Handler Bug?
I have added a field in the Group RCDC in a Tab (grouping) called "Admin" and marked it as Required within the RCDC.
Now, if I were to take an existing group that has a Member Selection of "Criteria-Based" and change it to "Manual" and click "OK" without populating the "required" field in the other tab, I would be re-directed to
the field with the note "The required field cannot be empty" as expected. However, if I fill out the field and submit the request, I noticed it doesn't clear the underlying "Filter" attribute and the request fails with "Group validation
failed: Static group cannot update membership filter".
I believe this is related to the fact that the Group RCDC has a built-in event handler when the "Member Selection" changes. But doesn't modify the "Filter" attribute unless you go to the "Members" tab? Seems the even handler
is ignored or overridden by the event handler that checks for Required fields to be populated?
Anyone else run into this?I have added a field in the Group RCDC in a Tab (grouping) called "Admin" and marked it as Required within the RCDC.
Now, if I were to take an existing group that has a Member Selection of "Criteria-Based" and change it to "Manual" and click "OK" without populating the "required" field in the other tab, I would be re-directed to
the field with the note "The required field cannot be empty" as expected. However, if I fill out the field and submit the request, I noticed it doesn't clear the underlying "Filter" attribute and the request fails with "Group validation
failed: Static group cannot update membership filter".
I believe this is related to the fact that the Group RCDC has a built-in event handler when the "Member Selection" changes. But doesn't modify the "Filter" attribute unless you go to the "Members" tab? Seems the even handler
is ignored or overridden by the event handler that checks for Required fields to be populated?
Anyone else run into this? -
Windows 2003 Memory Dump - Bug check Analysis attached
Hi all
I recently have had a Windows 2003 Standard with SP2 server crash with a memory dump
I have used WinDBG to read the file and output below
can anyone shed any light on the faults, or point me in the right direction?
* Bugcheck Analysis
KERNEL_MODE_EXCEPTION_NOT_HANDLED (8e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8081c630, The address that the exception occurred at
Arg3: b7487c30, Trap Frame
Arg4: 00000000
Debugging Details:
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!IoGetAttachedDevice+c
8081c630 8b4810 mov ecx,dword ptr [eax+10h]
TRAP_FRAME: b7487c30 -- (.trap 0xffffffffb7487c30)
ErrCode = 00000000
eax=000007f6 ebx=85e76068 ecx=000007f6 edx=00000000 esi=85e76068 edi=89d42020
eip=8081c630 esp=b7487ca4 ebp=b7487ca4 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!IoGetAttachedDevice+0xc:
8081c630 8b4810 mov ecx,dword ptr [eax+10h] ds:0023:00000806=????????
Resetting default scope
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: DocTransport.ex
CURRENT_IRQL: 0
ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) x86fre
LAST_CONTROL_TRANSFER: from 8082db20 to 80827f7d
STACK_TEXT:
b74877fc 8082db20 0000008e c0000005 8081c630 nt!KeBugCheckEx+0x1b
b7487bc0 8088c12a b7487bdc 00000000 b7487c30 nt!KiDispatchException+0x3a2
b7487c28 8088c0de b7487ca4 8081c630 badb0d00 nt!CommonDispatchException+0x4a
b7487ca4 8081c7e1 89d42020 b7487d64 00000000 nt!KiExceptionExit+0x186
b7487cb8 808f44c7 85e76068 b7487d64 08a9ea50 nt!IoGetRelatedDeviceObject+0x63
b7487d38 8088b658 00001e20 00000000 00000000 nt!NtReadFile+0x55
b7487d38 7c82845c 00001e20 00000000 00000000 nt!KiSystemServicePostCall
WARNING: Frame IP not in any known module. Following frames may be wrong.
08a9ea8c 00000000 00000000 00000000 00000000 0x7c82845c
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!IoGetAttachedDevice+c
8081c630 8b4810 mov ecx,dword ptr [eax+10h]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!IoGetAttachedDevice+c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 51d4c567
IMAGE_VERSION: 5.2.3790.5190
FAILURE_BUCKET_ID: 0x8E_nt!IoGetAttachedDevice+c
BUCKET_ID: 0x8E_nt!IoGetAttachedDevice+c
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x8e_nt!iogetattacheddevice+c
FAILURE_ID_HASH: {22c1c728-5bf3-efb9-fff4-40d5ae0d47e2}
Followup: MachineOwnerHi,
For Bug Check 0x8E, it
indicates that a kernel-mode application generated an exception that the error handler did not catch. For more details, please refer to following article and check if can help you.
Bug Check 0x8E: KERNEL_MODE_EXCEPTION_NOT_HANDLED
Did you remember that which operation (or any change) you do before this issue occurred? Or just the server
crashed suddenly?
Please check if all necessary updates were installed and drivers were updated.
à
PROCESS_NAME:
DocTransport.exe
Did you install any third-party application on the server? Please
perform a clean boot and monitor the result.
By the way, as you know, troubleshoot this kind of kernel crash issue, we need to analyze the crash dump file to narrow down the root cause of the issue. However, it is not
effective for us to debug the crash dump file here in the forum. If this issues is a state of emergency for you. Please contact Microsoft Customer Service and Support (CSS) via telephone so that a dedicated Support Professional can assist with your request.
To obtain the phone numbers for specific technology request, please refer to the web site listed below:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607
Hope this helps.
Best regards,
Justin Gu -
We have an ProLiant DL580 G5 server which get blue screen every few minutes. In ILO logs (IML) i get the message.
Abnormal Program Termination (Windows bug check, STOP: 0x0000007E (0xFFFFFFFFC0000005, 0xFFFFF880018B346C, 0xFFFFF88002FD93F8, 0xFFFFF88002FD8C50))
Tried booting in safe mode, but no go. Please advise.Hi:
You may also want to post your question on the HP Business Support Forum -- Proliant DL Servers section.
http://h30499.www3.hp.com/t5/ProLiant-Servers-ML-DL-SL/bd-p/itrc-264#.VCbIEnl0y9I -
[svn:fx-trunk] 9215: Event Propagation bug fix
Revision: 9215
Author: [email protected]
Date: 2009-08-10 17:30:21 -0700 (Mon, 10 Aug 2009)
Log Message:
Event Propagation bug fix
http://bugs.adobe.com/jira/browse/SDK-21044 - Spark Components should use event.preventDefault instead of event.stopPropagation
Since keyboard are now cancellable, the Spark components should use event.preventDefault() / event.isDefaultPrevented() instead of event.stopPropagation. I updated ButtonBar, RadioButton, and DropDownList to use preventDefault(). Also cleaned up Slider and Spinner to always assume the event is cancellable.
QE notes: Add tests with these components inside of scrollable containers
Doc notes: None
Bugs: SDK-21044
Reviewer: Hans
Tests run: Slider, Spinner, RadioButton, ButtonBar, DropDownList
Is noteworthy for integration: No
Ticket Links:
http://bugs.adobe.com/jira/browse/SDK-21044
http://bugs.adobe.com/jira/browse/SDK-21044
Modified Paths:
flex/sdk/trunk/frameworks/projects/spark/src/spark/components/ButtonBar.as
flex/sdk/trunk/frameworks/projects/spark/src/spark/components/RadioButton.as
flex/sdk/trunk/frameworks/projects/spark/src/spark/components/Spinner.as
flex/sdk/trunk/frameworks/projects/spark/src/spark/components/supportClasses/DropDownCont roller.as
flex/sdk/trunk/frameworks/projects/spark/src/spark/components/supportClasses/Slider.aserror dateField not selecion date 27/11/2002 ?
This is bug flex 3 ?
thanks -
Can Visual Studio 2013 installed on Windows 7 cause Bug check in NTFS driver?
Hello!
I installed Visual Studio 2013 on Windows 7. Shortly after that Bug check of NTFS started periodically happen.
Does VS install any drivers and therefore may be the cause of the bug check?
Thank youHi,
Visual Studio 2013's target platform include Windows 7 Service Pack 1, Windows 8, Windows 8.1, Windows Server 2008 R2 SP1, Windows Server 2012, Windows Server 2012 R2.
For more information, please view this article:
Visual Studio 2013 Compatibility
http://www.visualstudio.com/products/visual-studio-2013-compatibility-vs
For further help, I would like to suggest you ask MSDN Visual Studio Forum:
http://social.msdn.microsoft.com/Forums/en-US/home?forum=vssetup&filter=alltypes&sort=lastpostdesc
Note: add your exact error message or symptoms.
Karen Hu
TechNet Community Support -
Hi,
I upgraded my Vista x64 (Dell Optiplex 755) to Windows 7 RTM and I'm getting the above bug check. The following site nicely describes the various bug check parameters - http://msdn.microsoft.com/en-us/library/ms796150.aspx - but I don't see an entry for parameter 1 that I'm seeing (504). I assume the 504 is new for Windows 7? If anyone has updated information on this bug check, that'd be much appreciated. From windbg:
BugCheck DA, {504, fffff6fc4002a2e0, 30, 545c}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+b47b )
Thanks
Hans
HKHi Hans
Thanks for letting us know how you resolved the problem.
Regards,
Thank You for using Windows 7
Ronnie Vernon MVP
Maybe you are looking for
-
Mac Pro keeps freezing & no longer Shuts Down properly
Hya. Im using a Mac Pro in work (Mac Os 10.5.8. with 2.66 GHz Quad-Core Intel Xeon) . One day while doing a "Save as" in a program, the program froze/became unresponsive. In the Force Quit tab, it says "not responding", so i click force quit on it. I
-
ADF Task Flow Question.
Hi everyone, Is it possible to call an unbounded task flow from a bounded task flow? Let me explain. I have created a template, with an af:navigationpane on top. Inside it, I have placed three commandNavigationItems: the first two go to simple views.
-
How do I get the search here tab off the top of my screen?
All of the sudden I have a new tab at the top of my Firefox screen for searching. It says "search here" with a colorful little pinwheel. There is no where I can find to take this whole thing off. I've tried uninstalling it on my computer, but it stil
-
PSA to Multiple Data Targets in process chain
Hello All, I am trying to create a process chain that loads data from an already loaded PSA to further targets. (Note that the infopackage to load from R/3 to PSA is in another process chain). I am using the "Read PSA and Update Data Target" process
-
Issue with Tascam FW-1082 Control Surface
Anyone having issues with this connected to a mac Pro? I have one and upon turning on the unit, crashes the entire computer. If I boot with the unit connected, it'll sometimes keep OSX from doing a full boot, or if it does boot, FCP will hang on star