Random reboot

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Ricardo (anonymous_at_discussions.microsoft.com)
Date: 02/17/04


Date: Tue, 17 Feb 2004 13:03:59 -0800

Hi, i have a random reboot problem. It happens only in my
windows xp sp 1 partition, every 3 hours and only if i
use some kind of audio.

This is the full memory dump analysis. I would be very
grateful if you can send me some clues.

Thanks

Microsoft (R) Windows Debugger Version 6.3.0005.1
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINDOWS\Minidump\MEMORY.DMP]
Kernel Dump File: Full address space is available

Symbol search path is: SRV*d:\archivos de
programa\debugging tools for windows\downstream
store*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 1) UP Free
x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp2.030422-1633
Kernel base = 0x804d4000 PsLoadedModuleList = 0x80543530
Debug session time: Tue Feb 17 15:43:38 2004
System Uptime: 0 days 3:04:03.620
Loading Kernel Symbols
..........................................................
..........................................................
..
Loading unloaded module list
.................
Loading User Symbols
**********************************************************
*********************
*
                    *
* Bugcheck
Analysis *
*
                    *
**********************************************************
*********************

Use !analyze -v to get detailed debugging information.

BugCheck A, {35423e0, 2, 0, 805fa25a}

Probably caused by : ntoskrnl.exe ( nt!NtQueryKey+48 )

Followup: MachineOwner
---------

kd> !analyze -v
**********************************************************
*********************
*
                    *
* Bugcheck
Analysis *
*
                    *
**********************************************************
*********************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely
invalid) address at an
interrupt request level (IRQL) that is too high. This is
usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 035423e0, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write
operation
Arg4: 805fa25a, address which referenced memory

Debugging Details:
------------------

READ_ADDRESS: 035423e0

CURRENT_IRQL: 2

FAULTING_IP:
nt!NtQueryKey+48
805fa25a 84ba00000083 test [edx+0x83000000],bh

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from ffdff980 to 805fa25a

TRAP_FRAME: 805394bc -- (.trap ffffffff805394bc)
ErrCode = 00000000
eax=fffffffb ebx=ffdff000 ecx=805fa25a edx=805423e0
esi=80541da0 edi=80542000
eip=805fa25a esp=80539530 ebp=ffdff980 iopl=0 nv
up ei pl zr na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030
gs=0000 efl=00010246
nt!NtQueryKey+0x48:
805fa25a 84ba00000083 test [edx+0x83000000],bh
ds:0023:035423e0=??
Resetting default scope

STACK_TEXT:
ffdff980 ffdff980 f9e4e000 003d1c41 00000000 nt!
NtQueryKey+0x48

FOLLOWUP_IP:
nt!NtQueryKey+48
805fa25a 84ba00000083 test [edx+0x83000000],bh

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!NtQueryKey+48

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 3ea80977

STACK_COMMAND: .trap ffffffff805394bc ; kb

BUCKET_ID: 0xA_nt!NtQueryKey+48

Followup: MachineOwner
---------

AIDA Report if you need it:

--------[ AIDA32 (c) 1995-2004 Tamas Miklos ]-------------
----------------------------------------------------------

----
                                       
    Computer:
      Microsoft Windows XP Professional
      Service Pack 1
      Internet Explorer                                 
6.0.2800.1106 (IE 6.0 SP1)
      Processor
      AMD Athlon-PECM, 1009 MHz (5 x 202)
      Motherboard
      Gigabyte GA-7IXE4  (2 ISA, 5 PCI, 1 AGP, 3 DIMM)
      Chipset
      AMD-750 Irongate
      Memory
      256 MB  (PC133 SDRAM)
      BIOS
      AMI (02/20/02)
      Graphic card            
      RADEON 9500  (128 MB) (R300)
    
     Monitor                                              
      LG 775FT
    Multimedia:
      Soundcard
      Creative SB Live! Player 1024 Sound Card
      Storage drives
      Disquetera de 3 1/2                               
Unidad de disquete
      Hard disk                                        
ST330630A  (29 GB, 7200 RPM, Ultra-ATA/66)
      Lector óptico                                     
AXV CD/DVD-ROM SCSI CdRom Device  (Virtual DVD-ROM)
      Lector óptico                                     
PIONEER DVD-ROM DVD-116  (16x/40x DVD-ROM)
      Lector óptico                                     
YAMAHA CRW2100E  (16x/10x/40x CD-RW)
    Partitions:
      C: (FAT32)                                        
21992 MB (1518 MB libre)
      D: (FAT32)                                        
7155 MB (1058 MB libre)
      Keyboard                                          
Teclado estándar de 101/102 teclas o Microsoft Natural 
PS/2 Keyboard
      Mouse                                             
Logitech USB Wheel Mouse
      Net card      
      NIC Fast Ethernet PCI Familia RTL8139 de Realtek  
      Printer
      hp deskjet 845c
      


Relevant Pages

  • Re: Windbg: Disable user mode debugging
    ... >> This group is not applicable because of the win32 in the title. ... So you don't have 64-bit Windows. ... debugger is an extension to ntoskrnl and maybe the hal too. ... I do know that the kernel does not have ...
    (microsoft.public.win32.programmer.kernel)
  • Re: To the OP: Wintroll FUD about alleged insecurity refuted (was: Re: Linux why?)
    ... onto which a 32-bit Windows kernel was bolted. ... what he said was that "Windows NT is a better UNIX ... Microsoft Xenix way back when). ...
    (comp.os.linux.misc)
  • Re: IRQL_NOT_LESS_OR_EQUAL
    ... that suggests a network driver problem. ... > Copyright Microsoft Corporation. ... > Kernel Summary Dump File: Only kernel address space is available ... > If a kernel debugger is available get the stack backtrace. ...
    (microsoft.public.windowsxp.hardware)
  • Re: Random reboots
    ... Disable automatic restart on system failure. ... Microsoft Windows Debugger Version 6.9.0003.113 X86 ... Mini Kernel Dump File: Only registers and stack trace are available ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Which is better?
    ... The NT kernel was written by Dave Cutler, who had also written the DEC ... transfered to Microsoft, and that is why Microsoft settled by agreeing ... However, it's the Win32 personality that dominates what Windows NT is, ... Microsoft is working on a totally new operating system - ...
    (comp.os.linux.misc)