Click here to Skip to main content
16,015,518 members
Home / Discussions / System Admin
   

System Admin

 
GeneralRe: Mail Server Pin
Roger Wright21-Aug-02 3:00
professionalRoger Wright21-Aug-02 3:00 
Generalping problem Pin
seetaram16-Aug-02 21:39
seetaram16-Aug-02 21:39 
GeneralRe: ping problem Pin
Venet16-Aug-02 22:38
Venet16-Aug-02 22:38 
Generalping problem Pin
seetaram16-Aug-02 21:37
seetaram16-Aug-02 21:37 
GeneralNet Time Pin
Mazdak16-Aug-02 2:57
Mazdak16-Aug-02 2:57 
GeneralRe: Net Time Pin
Bruce Duncan16-Aug-02 9:15
Bruce Duncan16-Aug-02 9:15 
GeneralRe: Net Time Pin
Mazdak18-Aug-02 3:46
Mazdak18-Aug-02 3:46 
GeneralHelp with STOP message - 0x0000001e Pin
sheldon115-Aug-02 17:03
sheldon115-Aug-02 17:03 
I keep getting the following BSOD every few days. I reinstalled Windows 2000
Advanced Server and still have to problem. Here are the details

Aug 4 Error info

Event Type: Information
Event Source: Save Dump
Event Category: None
Event ID: 1001
Date: 8/4/2002
Time: 9:47:57 PM
User: N/A
Computer: XXXXXXX
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000001e
(0xc0000005, 0xa001fa95, 0x00000001, 0x00000048). Microsoft Windows 2000
[v15.2195]. A dump was saved in: C:\WINNT\MEMORY.DMP.

Any ideas how to found out the problem?

Here is the information that I get from the Windows Debugging Tools

Microsoft (R) Windows Debugger Version 6.0.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Memory Dumps\Aug 4\MEMORY.DMP]
Kernel Dump File: Full address space is available
Symbol search path is:
srv*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 2000 Kernel Version 2195 (Service Pack 3) MP (2 procs) Free x86
compatible
Product: LanManNt, suite: Enterprise TerminalServer SingleUserTS
Kernel base = 0x80400000 PsLoadedModuleList = 0x80483de0
Debug session time: Sun Aug 04 21:41:01 2002
System Uptime: 1 days 23:18:19.267
Loading Kernel Symbols
............................................................................
...........................
Loading unloaded module list
.................................................
Loading User Symbols
.............Unable to translate address 6e420000 with prototype PTE
.Unable to translate address 75e60000 with prototype PTE
...Unable to translate address 775a0000 with prototype PTE
..Unable to translate address 63000000 with prototype PTE
.Unable to translate address 77440000 with prototype PTE
.Unable to translate address 77430000 with prototype PTE
.Unable to translate address 77840000 with prototype PTE
.Unable to translate address 770c0000 with prototype PTE
.Unable to translate address 10000000 with prototype PTE
........Unable to translate address 51580000 with prototype PTE
.Unable to translate address 770f0000 with prototype PTE
.Unable to translate address 75ac0000 with prototype PTE
.Unable to translate address 76620000 with prototype PTE
.Unable to translate address 75160000 with prototype PTE
.Unable to translate address 75210000 with prototype PTE
.Unable to translate address 751d0000 with prototype PTE
.Unable to translate address 75170000 with prototype PTE
.Unable to translate address 77be0000 with prototype PTE
.Unable to translate address 751c0000 with prototype PTE
.Unable to translate address 75150000 with prototype PTE
.Unable to translate address 75030000 with prototype PTE
.Unable to translate address 75020000 with prototype PTE
.Unable to translate address 77950000 with prototype PTE
.Unable to translate address 77980000 with prototype PTE
.Unable to translate address 75050000 with prototype PTE
..Unable to translate address 77560000 with prototype PTE
..Unable to translate address 77410000 with prototype PTE
..Unable to translate address 74fd0000 with prototype PTE
.Unable to translate address 774e0000 with prototype PTE
.Unable to translate address 774c0000 with prototype PTE
.Unable to translate address 77530000 with prototype PTE
.Unable to translate address 77830000 with prototype PTE
.Unable to translate address 75010000 with prototype PTE
.Unable to translate address 75ab0000 with prototype PTE
.Unable to translate address 77c10000 with prototype PTE
.Unable to translate address 782c0000 with prototype PTE
.Unable to translate address 77340000 with prototype PTE
.Unable to translate address 77520000 with prototype PTE
.Unable to translate address 77320000 with prototype PTE
.Unable to translate address 773b0000 with prototype PTE
.Unable to translate address 77380000 with prototype PTE
.Unable to translate address 77880000 with prototype PTE
.Unable to translate address 77360000 with prototype PTE
.Unable to translate address 777e0000 with prototype PTE
.Unable to translate address 777f0000 with prototype PTE
.Unable to translate address 6b700000 with prototype PTE
.Unable to translate address 70f30000 with prototype PTE
.Unable to translate address 6b600000 with prototype PTE
..Unable to translate address 76b30000 with prototype PTE
.Unable to translate address 727f0000 with prototype PTE
...Unable to translate address 70400000 with prototype PTE
..Unable to translate address 703d0000 with prototype PTE
.Unable to translate address 76930000 with prototype PTE
.Unable to translate address 77920000 with prototype PTE
.Unable to translate address 78160000 with prototype PTE
.Unable to translate address 7ca00000 with prototype PTE
.Unable to translate address 67400000 with prototype PTE
.Unable to translate address 70510000 with prototype PTE
.Unable to translate address 35c50000 with prototype PTE
..Unable to translate address 35cb0000 with prototype PTE
.Unable to translate address 69190000 with prototype PTE
.Unable to translate address 01110000 with prototype PTE
.Unable to translate address 6b050000 with prototype PTE
..Unable to translate address 4aa00000 with prototype PTE
.Unable to translate address 4ac00000 with prototype PTE
.Unable to translate address 6d360000 with prototype PTE
.Unable to translate address 6d510000 with prototype PTE
.Unable to translate address 6b7d0000 with prototype PTE
.Unable to translate address 6d5a0000 with prototype PTE
..
****************************************************************************
***
* *
* Bugcheck Analysis *
* *
****************************************************************************
***
Use !analyze -v to get detailed debugging information.
BugCheck 1E, {c0000005, a001fa95, 1, 48}
Unable to translate address 711e6728 with prototype PTE
Probably caused by : win32k.sys ( win32k!EBRUSHOBJ::vInitBrush+2d0 )
Followup: MachineOwner
---------
1: kd> !analyze -v
****************************************************************************
***
* *
* Bugcheck Analysis *
* *
****************************************************************************
***
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
An exception code of 0x80000002 (STATUS_DATATYPE_MISALIGNMENT) indicates
that an unaligned data reference was encountered. The trap frame will
supply additional information.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: a001fa95, The address that the exception occurred at
Arg3: 00000001, Parameter 0 of the exception
Arg4: 00000048, Parameter 1 of the exception
Debugging Details:
------------------

EXCEPTION_CODE: c0000005
FAULTING_IP:
win32k!EBRUSHOBJ::vInitBrush+2d0
a001fa95 814e4800408004 or dword ptr [esi+0x48],0x4804000
EXCEPTION_PARAMETER1: 00000001
EXCEPTION_PARAMETER2: 00000048
WRITE_ADDRESS: 00000048
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x1E_W
TRAP_FRAME: b8937aac -- (.trap ffffffffb8937aac)
ErrCode = 00000002
eax=00000000 ebx=00000000 ecx=ffffffff edx=00000005 esi=00000000
edi=000001ce
eip=a001fa95 esp=b8937b20 ebp=b8937b5c iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
win32k!EBRUSHOBJ::vInitBrush+2d0:
a001fa95 814e4800408004 or dword ptr [esi+0x48],0x4804000
ds:0023:00000048=????????
Resetting default context
LAST_CONTROL_TRANSFER: from a001f9e1 to a001fa95
STACK_TEXT:
b8937b5c a001f9e1 a2019008 00000006 0108002a
win32k!EBRUSHOBJ::vInitBrush+0x2d0
b8937b94 a00793e2 0301003a 000001ce a2019008 win32k!bDeleteSurface+0x28
b8937bd8 a0022bce a12cd150 000002bb 0301003a win32k!CreateSpb+0x229
b8937c38 a0021abd a12806e0 a0187550 a2b29b68 win32k!ValidateWindowPos+0x122
b8937c80 a0020b5a a0187550 00000000 a12cd150 win32k!zzzChangeStates+0x18d
b8937cdc a0020edd 00000001 00000000 ffffffff
win32k!xxxEndDeferWindowPosEx+0x1d9
b8937cf8 a006086b a12cd150 ffffffff 000000c0 win32k!FindValidWindowPos+0x4
b8937d40 80465d49 002b0e50 ffffffff 000000c0 win32k!CopyOutputString+0x33
b8937d40 77e138f5 002b0e50 ffffffff 000000c0 nt!KiSystemService+0xc9
0880e6d8 7117f3f9 002b0e50 0880e700 00000210 USER32!NtUserSetWindowPos+0xb
0880e754 7117f204 0880ea18 0880ea08 00000000
BROWSEUI!CMenuDeskBar::_PositionWindow+0x223
0880e9c4 71177686 00000000 0880ea18 0880ea08
BROWSEUI!CMenuDeskBar::Popup+0x10f
0880ea28 71177514 00008170 00000000 04e33c94
BROWSEUI!CMenuToolbarBase::PositionSubmenu+0x166
0880ea38 711764f3 00008170 0d132e30 00000003
BROWSEUI!CMenuToolbarBase::PopupOpen+0x22
0880ea48 711774b3 04e33c94 00000001 00000000
BROWSEUI!CMenuBand::UIActivateIO+0x82
0880ea5c 7116c1b2 00008170 00000000 00000000
BROWSEUI!CMenuToolbarBase::PopupHelper+0x51
0880ea78 71164137 04e33c9c 71162354 00000006 BROWSEUI!CMenuBand::Exec+0x3ed
0880eab0 71163023 04e33c9c 0880eb6c 00000000
BROWSEUI!CMenuBand::_ProcessMenuPaneMessages+0x71
0880eae0 71165c18 04e33cbc 0880eb00 0880eb54
BROWSEUI!CMenuBand::TranslateMenuMessage+0x2b2
0880eb1c 71165b0e 001e0c2c 0000c09d 0880eb6c
BROWSEUI!CShellBrowser2::_TranslateMenuMessage+0x46
0880eb58 71165ad8 0d2c6918 001e0c2c 0000c09d
BROWSEUI!CShellBrowser2::WndProcBS+0x2f
0880eb84 77e11d0a 0d2c6918 0000c09d 00008170 BROWSEUI!IEFrameWndProc+0x1d3
0880eba4 77e11bc8 71165a87 001e0c2c 0000c09d USER32!UserCallWinProc+0x18
0880ec30 77e11cef 0880ee74 00000000 71162200
USER32!DispatchMessageWorker+0x2d0
0880ec3c 71162200 0880ee74 00000000 0d2c6918 USER32!DispatchMessageW+0xb
0880ec54 7118a339 0880ee74 0880ffac 04f35dd8
BROWSEUI!TimedDispatchMessage+0x35
0880eeac 7118a113 00000000 0880ffac 04f35dd8
BROWSEUI!BrowserThreadProc+0x2d5
0880ef38 7118a0ca 04f35dd8 00000000 00000000
BROWSEUI!BrowserProtectedThreadProc+0xce
0880ffb4 77e887dd 04f35dd8 00000000 00000000
BROWSEUI!SHOpenFolderWindow+0x1fc
0880ffec 00000000 7172ea03 04f35dd8 00000000 KERNEL32!BaseThreadStart+0x52

FOLLOWUP_IP:
win32k!EBRUSHOBJ::vInitBrush+2d0
a001fa95 814e4800408004 or dword ptr [esi+0x48],0x4804000
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: win32k!EBRUSHOBJ::vInitBrush+2d0
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 3cdb4146
STACK_COMMAND: .trap ffffffffb8937aac ; kb
BUCKET_ID: 0x1E_W_win32k!EBRUSHOBJ::vInitBrush+2d0
Followup: MachineOwner


Aug 15 STOP error info

Loading Dump File [C:\Memory Dumps\Aug 15\MEMORY.DMP]
Kernel Dump File: Full address space is available

Symbol search path is: srv*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 2000 Kernel Version 2195 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: LanManNt, suite: Enterprise TerminalServer SingleUserTS
Kernel base = 0x80400000 PsLoadedModuleList = 0x80483de0
Debug session time: Thu Aug 15 22:35:13 2002
System Uptime: 1 days 6:55:53.227
Loading Kernel Symbols
.......................................................................................................
Loading unloaded module list
..................................................
Loading User Symbols
........................................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {c0000005, a001fa95, 1, 48}

Probably caused by : win32k.sys ( win32k!EBRUSHOBJ::vInitBrush+2d0 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
An exception code of 0x80000002 (STATUS_DATATYPE_MISALIGNMENT) indicates
that an unaligned data reference was encountered. The trap frame will
supply additional information.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: a001fa95, The address that the exception occurred at
Arg3: 00000001, Parameter 0 of the exception
Arg4: 00000048, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: c0000005

FAULTING_IP:
win32k!EBRUSHOBJ::vInitBrush+2d0
a001fa95 814e4800408004 or dword ptr [esi+0x48],0x4804000

EXCEPTION_PARAMETER1: 00000001

EXCEPTION_PARAMETER2: 00000048

WRITE_ADDRESS: 00000048

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x1E_W

TRAP_FRAME: b86aaaac -- (.trap ffffffffb86aaaac)
ErrCode = 00000002
eax=00000000 ebx=00000000 ecx=ffffffff edx=00000005 esi=00000000 edi=000001d5
eip=a001fa95 esp=b86aab20 ebp=b86aab5c iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
win32k!EBRUSHOBJ::vInitBrush+2d0:
a001fa95 814e4800408004 or dword ptr [esi+0x48],0x4804000 ds:0023:00000048=????????
Resetting default context

LAST_CONTROL_TRANSFER: from a001f9e1 to a001fa95

STACK_TEXT:
b86aab5c a001f9e1 a2019008 00000006 0108002a win32k!EBRUSHOBJ::vInitBrush+0x2d0
b86aab94 a00793e2 0301003a 000001d5 a2019008 win32k!bDeleteSurface+0x28
b86aabd8 a0022bce a1431380 00000400 0301003a win32k!CreateSpb+0x229
b86aac38 a0021abd a12806e0 a0187550 a279dd08 win32k!ValidateWindowPos+0x122
b86aac80 a0020b5a a0187550 00000000 a1431380 win32k!zzzChangeStates+0x18d
b86aacdc a0020edd 00000001 00000000 ffffffff win32k!xxxEndDeferWindowPosEx+0x1d9
b86aacf8 a006086b a1431380 ffffffff 000002b7 win32k!FindValidWindowPos+0x4
b86aad40 80465d49 00160c40 ffffffff 000002b7 win32k!CopyOutputString+0x33
b86aad40 77e138f5 00160c40 ffffffff 000002b7 nt!KiSystemService+0xc9
0012e614 7117f3f9 00160c40 0012e63c 00000210 USER32!NtUserSetWindowPos+0xb
0012e690 7117f204 0012e954 0012e944 00000000 BROWSEUI!CMenuDeskBar::_PositionWindow+0x223
0012e900 71177686 00000000 0012e954 0012e944 BROWSEUI!CMenuDeskBar::Popup+0x10f
0012e964 71177514 00000013 00000000 0015ae4c BROWSEUI!CMenuToolbarBase::PositionSubmenu+0x166
0012e974 711764f3 00000013 0015a498 00000013 BROWSEUI!CMenuToolbarBase::PopupOpen+0x22
0012e984 711774b3 0015ae4c 00000001 00000000 BROWSEUI!CMenuBand::UIActivateIO+0x82
0012e998 7116c1b2 00000013 00000000 00000000 BROWSEUI!CMenuToolbarBase::PopupHelper+0x51
0012e9b4 71164137 0015ae54 71162354 00000006 BROWSEUI!CMenuBand::Exec+0x3ed
0012e9ec 71163023 0015ae54 0012eaa8 00000000 BROWSEUI!CMenuBand::_ProcessMenuPaneMessages+0x71
0012ea1c 71165c18 0014e26c 0012ea3c 0012ea90 BROWSEUI!CMenuBand::TranslateMenuMessage+0x2b2
0012ea58 71165b0e 003d0bca 0000c09a 0012eaa8 BROWSEUI!CShellBrowser2::_TranslateMenuMessage+0x46
0012ea94 71165ad8 0013a748 003d0bca 0000c09a BROWSEUI!CShellBrowser2::WndProcBS+0x2f
0012eac0 77e11d0a 0013a748 0000c09a 00000013 BROWSEUI!IEFrameWndProc+0x1d3
0012eae0 77e11bc8 71165a87 003d0bca 0000c09a USER32!UserCallWinProc+0x18
0012eb6c 77e11cef 0012edb0 00000000 71162200 USER32!DispatchMessageWorker+0x2d0
0012eb78 71162200 0012edb0 00000000 0013a748 USER32!DispatchMessageW+0xb
0012eb90 7118a339 0012edb0 0012fee8 0013a568 BROWSEUI!TimedDispatchMessage+0x35
0012ede8 7118a113 00000000 0012fee8 0013a568 BROWSEUI!BrowserThreadProc+0x2d5
0012ee74 7118a0ca 0013a568 0013a568 00000000 BROWSEUI!BrowserProtectedThreadProc+0xce
0012fef0 7172e9c9 0013a568 00401350 70bf0faf BROWSEUI!SHOpenFolderWindow+0x1fc
0012ff10 00401ecd 00132c89 00000001 0006dbc8 SHDOCVW!IEWinMain+0x115
0012ff60 00401f7d 00000004 00000000 00132c89 iexplore!WinMainT+0x2dc
0012ffc0 77e9ca90 0006dbc8 77f86c6e 7ffdf000 iexplore!ModuleEntry+0x97
0012fff0 00000000 00401ee6 00000000 000000c8 KERNEL32!BaseProcessStart+0x3d


FOLLOWUP_IP:
win32k!EBRUSHOBJ::vInitBrush+2d0
a001fa95 814e4800408004 or dword ptr [esi+0x48],0x4804000

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: win32k!EBRUSHOBJ::vInitBrush+2d0

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 3cdb4146

STACK_COMMAND: .trap ffffffffb86aaaac ; kb

BUCKET_ID: 0x1E_W_win32k!EBRUSHOBJ::vInitBrush+2d0

Followup: MachineOwner
---------
GeneralInterLAN Email in WinXP Pin
Roger Wright15-Aug-02 3:39
professionalRoger Wright15-Aug-02 3:39 
GeneralRe: InterLAN Email in WinXP Pin
Venet16-Aug-02 22:28
Venet16-Aug-02 22:28 
GeneralRe: InterLAN Email in WinXP Pin
Roger Wright17-Aug-02 4:15
professionalRoger Wright17-Aug-02 4:15 
GeneralRe: InterLAN Email in WinXP Pin
Venet17-Aug-02 4:43
Venet17-Aug-02 4:43 
GeneralRe: InterLAN Email in WinXP Pin
Roger Wright17-Aug-02 5:30
professionalRoger Wright17-Aug-02 5:30 
GeneralRe: InterLAN Email in WinXP Pin
Venet18-Aug-02 2:58
Venet18-Aug-02 2:58 
GeneralRe: InterLAN Email in WinXP Pin
Roger Wright18-Aug-02 5:16
professionalRoger Wright18-Aug-02 5:16 
GeneralRe: InterLAN Email in WinXP Pin
Venet18-Aug-02 6:39
Venet18-Aug-02 6:39 
GeneralRe: InterLAN Email in WinXP Pin
Roger Wright18-Aug-02 7:40
professionalRoger Wright18-Aug-02 7:40 
Generalchanging logo in Windows 2000 Pin
drmzunlimited15-Aug-02 2:21
drmzunlimited15-Aug-02 2:21 
GeneralRe: changing logo in Windows 2000 Pin
Venet16-Aug-02 22:16
Venet16-Aug-02 22:16 
QuestionHow to set quota in VC++ project? Pin
Tida14-Aug-02 5:17
Tida14-Aug-02 5:17 
General"file access denied" Pin
Pilso13-Aug-02 5:22
Pilso13-Aug-02 5:22 
GeneralRe: "file access denied" Pin
Venet13-Aug-02 22:43
Venet13-Aug-02 22:43 
GeneralRe: "file access denied" Pin
Pilso14-Aug-02 7:33
Pilso14-Aug-02 7:33 
GeneralRe: "file access denied" Pin
Venet16-Aug-02 21:20
Venet16-Aug-02 21:20 
GeneralRe: "file access denied" Pin
Bruce Duncan15-Aug-02 9:27
Bruce Duncan15-Aug-02 9:27 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.