Help with Windows 7 BSOD with windbg minidump !analyze -v results

Posted by Kurt Harless on Super User See other posts from Super User or by Kurt Harless
Published on 2010-12-29T04:59:00Z Indexed on 2010/12/29 5:56 UTC
Read the original article Hit count: 497

Filed under:
|

Hi gang,

Windows 7 X64 Ultimate is BSODing occasionally. I suspect an overheating issue or something related to the use of my GTX-295 card that runs very hot.

Here is an !analyze -v listing of the most recent minidump.

Any and all help greatly appreciated.

Kurt

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\122810-31387-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`03065000 PsLoadedModuleList = 0xfffff800`032a2e50
Debug session time: Tue Dec 28 11:04:03.597 2010 (UTC - 7:00)
System Uptime: 2 days 2:28:40.407
Loading Kernel Symbols
...............................................................
................................................................
..............................................
Loading User Symbols
Loading unloaded module list
................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff800033b8873, fffff8800e322dc0, 0}

Probably caused by : ntkrnlmp.exe ( nt!RtlCompareUnicodeStrings+c3 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff800033b8873, Address of the instruction which caused the bugcheck
Arg3: fffff8800e322dc0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!RtlCompareUnicodeStrings+c3
fffff800`033b8873 488b7c2418      mov     rdi,qword ptr [rsp+18h]

CONTEXT:  fffff8800e322dc0 -- (.cxr 0xfffff8800e322dc0)
rax=0000000000000041 rbx=fffff8a015a3c1c0 rcx=0000000000000024
rdx=0000000000000003 rsi=fffff8800e3238b0 rdi=0000000000000009
rip=fffff800033b8873 rsp=fffff8800e323798 rbp=000000000000000d
 r8=fffff8a018cb374c  r9=000000200a98fdc4 r10=fffff8800e323988
r11=fffff8800e32398e r12=fffff8a018127c18 r13=fffff8800126e550
r14=0000000000000001 r15=fffffa800abe1570
iopl=0         nv up ei pl nz ac po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010216
nt!RtlCompareUnicodeStrings+0xc3:
fffff800`033b8873 488b7c2418      mov     rdi,qword ptr [rsp+18h] ss:0018:fffff880`0e3237b0=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  ccSvcHst.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff800033b8873

STACK_TEXT:  
fffff880`0e323798 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!RtlCompareUnicodeStrings+0xc3


FOLLOWUP_IP: 
nt!RtlCompareUnicodeStrings+c3
fffff800`033b8873 488b7c2418      mov     rdi,qword ptr [rsp+18h]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!RtlCompareUnicodeStrings+c3

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

STACK_COMMAND:  .cxr 0xfffff8800e322dc0 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!RtlCompareUnicodeStrings+c3

BUCKET_ID:  X64_0x3B_nt!RtlCompareUnicodeStrings+c3

Followup: MachineOwner
---------

© Super User or respective owner

Related posts about windows-7

Related posts about bsod