Vista : BSOD, Memory dump here.

Discussion in 'Software' started by Question2, Sep 16, 2007.

  1. Question2

    Question2 Private E-2

    Thats odd i could have sworn i made a post here earlier.

    Got a BSOD on Vista earlier, trying to get the memory dump to work. Copied and pasted symbol URL from the sticky, but :

    Code:
    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Map \SystemRoot\system32\ntkrnlpa.exe:
      Image region 800:e4a00 does not fit in mapping
    *** WARNING: Unable to verify timestamp for ntkrnlpa.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
    Windows Vista Kernel Version 6000 MP (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Kernel base = 0x81c00000 PsLoadedModuleList = 0x81d11db0
    Debug session time: Sun Sep 16 03:07:57.033 2007 (GMT+8)
    System Uptime: 0 days 0:51:19.971
    Map \SystemRoot\system32\ntkrnlpa.exe:
      Image region 800:e4a00 does not fit in mapping
    *** WARNING: Unable to verify timestamp for ntkrnlpa.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
    Loading Kernel Symbols
    ....................................................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    ..................................................
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck 7F, {d, 0, 0, 0}
    
    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.
     
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi


    What was the BSOD error code?

    Have you installed any new hardware or even updated any drivers at time this started?
     
  3. Adrynalyne

    Adrynalyne Guest

    Fix your symbols path.
     
  4. Question2

    Question2 Private E-2

    Its a new comp, so i installed all the usual drivers, like the ATI 7.9 ones from scratch.

    I am fairly sure the BSOD code was Stop : 0x0000008E (0XC000001D, 0X81C2E2EE. 0X9P36FBA0, 0X00000000).

    In the meantime how do i get the memory dump to work? Also how do i get the forum to display the oldest posts in a thread at the top(as per standard).
     
  5. Question2

    Question2 Private E-2


    Thats just it, what am i supposed to change it to? The sticky said to copy paste the following, so i did. Its exactly the same as in the sticky.
     
  6. Adrynalyne

    Adrynalyne Guest

    You copied extra chracters then, because an exact copy and paste works fine. Extra characters include spaces!

    Post what you have for a symbols path.
     
  7. Question2

    Question2 Private E-2


    I already posted it in the first post.

    "SRV*c:\symbols*http://msdl.microsoft.com/download/symbols"

    No spaces...
     
  8. Adrynalyne

    Adrynalyne Guest

    Then delete it out and re-enter it.

    There is no workaround here, the path in that article is 100% correct.

    Also--The stop error you are examining with Windbg is a stop 0x7f, you can see it from the last line in your first post.

    SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

    Copied and pasted from my own copy of Windbg, which I've been using so I know the path is right.

    Just copy and paste. No quotes!
     
  9. Question2

    Question2 Private E-2

    Just deleted it and copied and pasted from what you posted. STILL getting the error. I dont know what the hell is going on, im going to try re-installing the debugger....
     
  10. Question2

    Question2 Private E-2

    Not working. Un-installed, re-installed, went to sourcefile, the address was already there, replaced with the one in your post and still got the same error.
     
  11. Adrynalyne

    Adrynalyne Guest

    That might be the problem.

    It needs to be entered in Symbole File Path, not Source File Path.
     
  12. Question2

    Question2 Private E-2

    Wish that was the case...made a typo error in the previous post. Was supposed to be symbol file path. My source file path is empty.

    http://img76.imageshack.us/img76/2/symbolqa6.th.jpg
     
  13. Adrynalyne

    Adrynalyne Guest

    Don't know what to tell ya friend. I've been using this precise symbol file path for over three years without incident. You can also download them, and point them to a local store on your amchine.

    At any rate, post your memory dumps. Zip em up, and I will debug them.
     
  14. Question2

    Question2 Private E-2

    Where can i download them? Maybe that will work...

    The zipfile contains the 2 i have for 16th september. Thanks for the help!
     

    Attached Files:

  15. Adrynalyne

    Adrynalyne Guest

    Ok, I'm going to post a notepad file with my findings. I am not an expert with these things, in reading them. Sometimes, it isn't painfully obvious what the cause is, and I dont have the experience to read all the info.

    So...in both cases, the application being used was firefox. One says the cause was hardware related, one says a driver. In both cases, it was while you were on the net, so they have something in common.

    What I would start with is updating your NIC driver, and if that doesnt help, you still crash, start running some tests with the NIC disabled.

    Either way, the info is in this text file, for you to review.
     

    Attached Files:

  16. Adrynalyne

    Adrynalyne Guest

  17. Question2

    Question2 Private E-2

    I downloaded that, installed it, and tried using the debugger and pointing it to the place where i installed the symbols.

    Code:
    Symbol search path is: C:\Windows\Symbols
    Executable search path is: 
    Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for ntkrnlpa.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
    Windows Vista Kernel Version 6000 MP (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Kernel base = 0x81c00000 PsLoadedModuleList = 0x81d11db0
    Debug session time: Mon Sep 17 18:11:51.024 2007 (GMT+8)
    System Uptime: 1 days 2:21:09.352
    Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for ntkrnlpa.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
    
    Im starting to think theres something screwed up with the program im using.

    Got another BSOD today...mind helping me take a look? Zip file contians the 2 previous one and today's.
     

    Attached Files:

  18. Adrynalyne

    Adrynalyne Guest

    If I wasnt convinced of hardware troubles before, Im convinced now.

    I'd test ram overnight with memtest86+ (you can get it here).
    http://www.majorgeeks.com/Memtest86_d4226.html

    I'd also do some serious checking of the hard disk.

    http://www.majorgeeks.com/Hard_Drive_Inspector_d4966.html

    Also do a chkdsk /r on the disk. You can do it from cmd.exe, but it must be run as admin first.

    I'd also use Prime95 to stress test the machine. Once again, log some hours on it.
    http://www.majorgeeks.com/Prime95_d4363.html

    Debug details attached.
     

    Attached Files:

  19. Question2

    Question2 Private E-2

    What am i supposed to be seeing with hard drive inspector? I mounted the ISO for memtest86+, how do i select the virtual drive with it at the boot screen?
     
  20. Adrynalyne

    Adrynalyne Guest

    No. Boot to it. Don't try to use work arounds with it.

    Burn it to CD.
     
  21. Question2

    Question2 Private E-2

    I tried to burn it but Nero 7 is insisting it needs a CD-R and not the DVD-Rs i have. Is there any alternative? Like using a thumbdrive to boot it up or something?
     
  22. Question2

    Question2 Private E-2

    Well i bought a CD-R and ran memtest...i got 3 errors in test 7. Where can i get the specifics about the errors?
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds