PDA

View Full Version : NTOSKRNL crashes


Chris G
December 26th 03, 09:14 PM
Hi,

I have Windows XP Pro SP1 and keep getting NTOSKRNL crash dumps as per
below. As the http://oca.microsoft.com is now closed does anyone have any
ideas how I can find out what driver is causing my system to crash?

IRQL_NOT_LESS_OR_EQUAL (a)

An attempt was made to access a pageable (or completely invalid) address at
an

interrupt request level (IRQL) that is too high. This is usually

caused by drivers using improper addresses.

If a kernel debugger is available get the stack backtrace.

Arguments:

Arg1: 00000000, memory referenced

Arg2: 000000ff, IRQL

Arg3: 00000001, value 0 = read operation, 1 = write operation

Arg4: 804df06c, address which referenced memory

Debugging Details:

------------------

Database SolnDb not connected

WRITE_ADDRESS: 00000000

CURRENT_IRQL: ff

FAULTING_IP:

nt!CcSetActiveVacb+56

804df06c 893e mov [esi],edi

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

TRAP_FRAME: f3d18a38 -- (.trap fffffffff3d18a38)

ErrCode = 00000002

eax=814f3d18 ebx=0000ea60 ecx=814f3d7c edx=f3d18b24 esi=00000000
edi=00000000

eip=804df06c esp=f3d18aac ebp=f3d18ab8 iopl=0 nv up di pl zr na po nc

cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010046

nt!CcSetActiveVacb+56:

804df06c 893e mov [esi],edi ds:0023:00000000=????????

Resetting default context

LAST_CONTROL_TRANSFER: from 804dba42 to 804df06c

STACK_TEXT:

f3d18ab8 804dba42 814f3d18 f3d18b24 0000ea60 nt!CcSetActiveVacb+0x56

f3d18b4c 804d9941 814f3d18 02190660 f3f08b78 nt!CcMapAndCopy+0x296

f3968bbc 00000000 00000000 00000000 00000000 nt!CcFastCopyWrite+0x205



FOLLOWUP_IP:

nt!CcSetActiveVacb+56

804df06c 893e mov [esi],edi

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!CcSetActiveVacb+56

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 3df92c04

STACK_COMMAND: .trap fffffffff3d18a38 ; kb

BUCKET_ID: 0xA_W_nt!CcSetActiveVacb+56

Followup: MachineOwner

---------

Shawn Shepherd [MSFT]
December 26th 03, 10:19 PM
Chris,

To get this analyized I recommend calling in for someone to do a dump
analysis.

Live support
1-888-456-5570 VAP support line

1-800-936-4900 Professional IT support line (pay per incident support)

1-800-936-3100 Premier support line ( contract support only)

You would need to open a case on this, I did do a search and the related
errors and dissimiliar solutions that were specific to the situation
generally.

Shawn Shepherd[MSFT]
MCSE2000/MCSA
Online Support Professional

This posting is provided "AS IS" with no warranties, and confers no rights.
Get Secure! - www.microsoft.com/security

Google