Re: Need help with minidump

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Okay, I ran the command line. I've included the results below. What I'm
getting is that the kernel has caused some problem. I get:

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

Here's the output:

----------------------------------------------------------------------------


Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [p:\Mini050708-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is:
srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: c:\windows\i386
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp2_rtm.040803-2158
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055ab20
Debug session time: Wed May 7 21:07:59.092 2008 (GMT-4)
System Uptime: 0 days 0:00:22.662
Loading Kernel Symbols
.............................................................................................
Loading User Symbols
Loading unloaded module list
...
ERROR: FindPlugIns 8007007b
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007F, {8, 80042000, 0, 0}

Probably caused by : ntoskrnl.exe ( nt!KiTrap0E+23 )

Followup: MachineOwner
---------

kd> !analyze -v
ERROR: FindPlugIns 8007007b
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 00000008, EXCEPTION_DOUBLE_FAULT
Arg2: 80042000
Arg3: 00000000
Arg4: 00000000

Debugging Details:
------------------


BUGCHECK_STR: 0x7f_8

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: INTEL_CPU_MICROCODE_ZERO

PROCESS_NAME: winlogon.exe

TRAP_FRAME: f77cb194 -- (.trap fffffffff77cb194)
ErrCode = 00000000
eax=00b10023 ebx=f77cb27c ecx=00b1e7c8 edx=00070608 esi=01c8c960
edi=804e1f7c
eip=804e1f7c esp=f77cb208 ebp=f77cb208 iopl=0 nv up di pl zr na pe
nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00010046
nt!KiTrap0E+0x57:
804e1f7c f60550f0dfffff test byte ptr ds:[0FFDFF050h],0FFh
ds:0023:ffdff050=??
Resetting default scope

LAST_CONTROL_TRANSFER: from 804e1f7c to 804e1f48

STACK_TEXT:
f77cb038 804e1f7c badb0d00 00070608 0030001a nt!KiTrap0E+0x23
f77cb0ac 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb120 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb194 804e1f7c badb0d00 00070608 805577c0 nt!KiTrap0E+0x57
f77cb208 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb27c 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb2f0 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb364 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb3d8 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb44c 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb4c0 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb534 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb5a8 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb61c 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb690 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb704 804e1f7c badb0d00 00070608 00000100 nt!KiTrap0E+0x57
f77cb778 804e1f7c badb0d00 00070608 e160c7d0 nt!KiTrap0E+0x57
f77cb7ec 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb860 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb8d4 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb948 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cb9bc 804e1f7c badb0d00 00070608 805577c0 nt!KiTrap0E+0x57
f77cba30 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cbaa4 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cbb18 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cbb8c 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cbc00 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cbc74 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cbce8 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cbd5c 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cbdd0 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cbe44 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cbeb8 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cbf2c 804e1f7c badb0d00 00070608 00000100 nt!KiTrap0E+0x57
f77cbfa0 804e1f7c badb0d00 00070608 805577c0 nt!KiTrap0E+0x57
f77cc014 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc088 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc0fc 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc170 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc1e4 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc258 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc2cc 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc340 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc3b4 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc428 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc49c 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc510 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc584 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc5f8 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc66c 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc6e0 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc754 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc7c8 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc83c 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc8b0 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc924 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cc998 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cca0c 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cca80 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77ccaf4 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77ccb68 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77ccbdc 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77ccc50 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cccc4 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77ccd38 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77ccdac 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cce20 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cce94 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77ccf08 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77ccf7c 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77ccff0 804e1f7c badb0d00 00070608 00000038 nt!KiTrap0E+0x57
f77cd064 804e1f7c badb0d00 00070608 00000001 nt!KiTrap0E+0x57
f77cd0d8 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57
f77cd14c 804e1f7c badb0d00 00070608 805577c0 nt!KiTrap0E+0x57
f77cd1c0 804e1f7c badb0d00 00070608 00000000 nt!KiTrap0E+0x57


STACK_COMMAND: kb

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

FOLLOWUP_NAME: MachineOwner

DEBUG_FLR_IMAGE_TIMESTAMP: 41108004

FOLLOWUP_IP:
nt!KiTrap0E+23
804e1f48 1e push ds

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!KiTrap0E+23

FAILURE_BUCKET_ID: TRAP_FRAME_RECURSION

BUCKET_ID: TRAP_FRAME_RECURSION

Followup: MachineOwner
---------



"Rey Santos" <ReySantos@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F167DB18-7561-4EFF-B2DF-E1751328FC91@xxxxxxxxxxxxxxxx
I don't know why you have an ERROR: FindPlugIns 8007007b maybe you're not
connected to the internet for the symbols. The path for the symbls is
http://msdl.microsoft.com/download/symbols -i

Below are what I typed in the command prompt for my Minidump analysis:

cd c:\program files\debugging tools for windows

Press Enter

windbg -y srv*c:\symbols*http://msdl.microsoft.com/download/symbols -i
c:\windows\i386 -z c:\windows\minidump\Your Minidump file.dmp

Replace the last entry with your minidump file (MiniMMDDYY-01.dmp)

Press Enter

(You can use copy and paste to be sure of the characters entered)

Windebug will open
Command window results/log below:

___My Results___

Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [c:\windows\minidump\mini041808-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is:
srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: c:\windows\i386
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a620
Debug session time: Fri Apr 18 20:42:56.078 2008 (GMT+8)
System Uptime: 0 days 8:06:07.788
Loading Kernel Symbols
.......................................................................................................................................
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007F, {d, 0, 0, 0}


Probably caused by : usbhub.sys ( usbhub!USBH_PdoRemoveDevice+41 )

Followup: MachineOwner
---------

Note the line Probably caused by: usbhub.sys (
usbhub!USBH_PdoRemoveDevice+41 )
Now click the blue !analyze -v to get detailed debugging information.
My results below: On the result the lines: (last parts)
MODULE_NAME: usbhub
IMAGE_NAME: usbhub.sys
SYMBOL_NAME: usbhub!USBH_PdoRemoveDevice+41
the usbhub noted on the first part of the log are related to these
headings.The usbhub.sys is the problem file that should uninstalled,
reinstalled or updated. Use Google to search for yourproblem file.
Remove/uninstall the related hardware or prograam.


kd> !analyze -v
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000d, EXCEPTION_GP_FAULT
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000

Debugging Details:
------------------




BUGCHECK_STR: 0x7f_d

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: System

LAST_CONTROL_TRANSFER: from f78da6ff to c4000009

STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
f7ce5b80 f78da6ff 00430039 68627375 70646f52 0xc4000009
f7ce5bb1 e8f78e16 80835d8d 08836c86 088377f0
usbhub!USBH_PdoRemoveDevice+0x41
f7ce5bc1 a08377f0 80835d8e f4836c86 52f7ce5b 0xe8f78e16
f7ce5bc5 80835d8e f4836c86 52f7ce5b a0f78da9 0xa08377f0
f7ce5bc9 f4836c86 52f7ce5b a0f78da9 08835d8e 0x80835d8e
f7ce5bcd 52f7ce5b a0f78da9 08835d8e 028377f0 0xf4836c86
f7ce5bd1 a0f78da9 08835d8e 028377f0 ff000000 0x52f7ce5b
f7ce5bd5 08835d8e 028377f0 ff000000 07f7ce5b 0xa0f78da9
f7ce5bd9 028377f0 ff000000 07f7ce5b 108054aa 0x8835d8e
f7ce5bdd ff000000 07f7ce5b 108054aa 0083c46b 0x28377f0
f7ce5be1 07f7ce5b 108054aa 0083c46b 04000000 0xff000000
f7ce5be5 108054aa 0083c46b 04000000 d8f7ce5c 0x7f7ce5b
f7ce5be9 0083c46b 04000000 d8f7ce5c a0f78d81 0x108054aa
f7ce5bed 04000000 d8f7ce5c a0f78d81 08015d8e 0x83c46b
f7ce5bf1 d8f7ce5c a0f78d81 08015d8e 288377f0 0x4000000
f7ce5bf5 a0f78d81 08015d8e 288377f0 f7f7ce5c 0xd8f7ce5c
f7ce5bf9 08015d8e 288377f0 f7f7ce5c e8804e37 0xa0f78d81
f7ce5bfd 288377f0 f7f7ce5c e8804e37 08835d8d 0x8015d8e
f7ce5c01 f7f7ce5c e8804e37 08835d8d 808377f0 0x288377f0
f7ce5c05 e8804e37 08835d8d 808377f0 b483767c 0xf7f7ce5c
f7ce5c09 08835d8d 808377f0 b483767c c8f7bc8d 0xe8804e37
f7ce5c0d 808377f0 b483767c c8f7bc8d 8083767b 0x8835d8d
f7ce5c11 b483767c c8f7bc8d 8083767b 0883767c 0x808377f0
f7ce5c15 c8f7bc8d 8083767b 0883767c 408377f0 0xb483767c
f7ce5c19 8083767b 0883767c 408377f0 80f7ce5c 0xc8f7bc8d
f7ce5c1d 0883767c 408377f0 80f7ce5c c8f7bca9 0x8083767b
f7ce5c21 408377f0 80f7ce5c c8f7bca9 0883767b 0x883767c
f7ce5c25 80f7ce5c c8f7bca9 0883767b 088377f0 0x408377f0
f7ce5c29 c8f7bca9 0883767b 088377f0 108377f1 0x80f7ce5c
f7ce5c2d 0883767b 088377f0 108377f1 7c83c41b 0xc8f7bca9
f7ce5c31 088377f0 108377f1 7c83c41b f7f7ce5c 0x883767b
f7ce5c35 108377f1 7c83c41b f7f7ce5c c8804e37 0x88377f0
f7ce5c39 7c83c41b f7f7ce5c c8804e37 0883767b 0x108377f1
f7ce5c3d f7f7ce5c c8804e37 0883767b cc8377f0 0x7c83c41b
f7ce5c41 c8804e37 0883767b cc8377f0 fff7ce5c 0xf7f7ce5c
f7ce5c45 0883767b cc8377f0 fff7ce5c e8805dc5 0xc8804e37
f7ce5c49 cc8377f0 fff7ce5c e8805dc5 e8835d8d 0x883767b
f7ce5c4d fff7ce5c e8805dc5 e8835d8d 02835d8d 0xcc8377f0
f7ce5c51 e8805dc5 e8835d8d 02835d8d 01000000 0xfff7ce5c
f7ce5c55 e8835d8d 02835d8d 01000000 00830406 0xe8805dc5
f7ce5c59 02835d8d 01000000 00830406 6c000000 0xe8835d8d
f7ce5c5d 01000000 00830406 6c000000 6cf7ce5c 0x2835d8d
f7ce5c61 00830406 6c000000 6cf7ce5c bbf7ce5c 0x1000000
f7ce5c65 6c000000 6cf7ce5c bbf7ce5c 00c00000 0x830406
f7ce5c69 6cf7ce5c bbf7ce5c 00c00000 d0000000 0x6c000000
f7ce5c6d bbf7ce5c 00c00000 d0000000 4ef7ce5c 0x6cf7ce5c
f7ce5c71 00c00000 d0000000 4ef7ce5c c88061a9 0xbbf7ce5c
f7ce5c75 d0000000 4ef7ce5c c88061a9 a883767b 0xc00000
f7ce5c79 4ef7ce5c c88061a9 a883767b 00f7ce5c 0xd0000000
f7ce5c7d c88061a9 a883767b 00f7ce5c a4000000 0x4ef7ce5c
f7ce5c81 a883767b 00f7ce5c a4000000 00e6211b 0xc88061a9
f7ce5c85 00f7ce5c a4000000 00e6211b 30000000 0xa883767b
f7ce5c89 a4000000 00e6211b 30000000 0083d5fd 0xf7ce5c
f7ce5c8d 00e6211b 30000000 0083d5fd 99000000 0xa4000000
f7ce5c91 30000000 0083d5fd 99000000 00805311 0xe6211b
f7ce5c95 0083d5fd 99000000 00805311 1b006454 0x30000000
f7ce5c99 99000000 00805311 1b006454 00000002 0x83d5fd
f7ce5c9d 00805311 1b006454 00000002 00000000 0x99000000
f7ce5ca1 1b006454 00000002 00000000 00000000 0x805311
f7ce5ca5 00000000 00000000 00000000 00000000 0x1b006454


STACK_COMMAND: kb

FOLLOWUP_IP:
usbhub!USBH_PdoRemoveDevice+41
f78da6ff 83bfa800000001 cmp dword ptr [edi+0A8h],1

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: usbhub!USBH_PdoRemoveDevice+41

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: usbhub

IMAGE_NAME: usbhub.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 41107d68

FAILURE_BUCKET_ID: 0x7f_d_usbhub!USBH_PdoRemoveDevice+41

BUCKET_ID: 0x7f_d_usbhub!USBH_PdoRemoveDevice+41

Followup: MachineOwner
---------
--
Rey



.

Relevant Pages

  • Re: Need help with minidump
    ... It's a customer's machine and there is only one minidump file. ... Mini Kernel Dump File: Only registers and stack trace are available ... This means a trap occurred in kernel mode, and it's a trap of a kind ... FOLLOWUP_NAME: MachineOwner ...
    (microsoft.public.windowsxp.general)
  • reproduceable kernel panic when trying to use tap0 interface (sparc64)
    ... im using 6_stable on sparc64 and get a 100% reproduceable kernel panic. ... panic: trap: memory address not aligned ... addr 0x1400726000-0x1400726003,0x1400728000-0x1400728003,0x140072a000-0x140072a003,0x140072c000-0x140072c003,0x140072f000-0x140072f003 on ebus0 ...
    (freebsd-stable)
  • Re: double panic, and whats apic_cmd? (kqemu crash...)
    ... I also have KDB_TRACE and KDB_UNATTENDED in the kernel config. ... GDB is free software, covered by the GNU General Public License, and you are ... Fatal trap 12: page fault while in kernel mode ...
    (freebsd-hackers)
  • Re: double panic, and whats apic_cmd? (kqemu crash...)
    ... I also have KDB_TRACE and KDB_UNATTENDED in the kernel config. ... GDB is free software, covered by the GNU General Public License, and you are ... Fatal trap 12: page fault while in kernel mode ...
    (freebsd-hackers)
  • Win 2k3 stop, error 1000007f
    ... have read to the interesting article of the forum "Dump Data collection ... Loading Kernel Symbols ... This means a trap occurred in kernel mode, and it's a trap of a kind ... FOLLOWUP_NAME: MachineOwner ...
    (microsoft.public.windows.server.general)