On Tue, Jun 16, 2009 at 5:01 PM, Sam Cayze <[email protected]> wrote: > There are ways to pinpoint which driver it is, as it diffidently looks > like a driver issue. > Analyze the DUMP file: http://support.microsoft.com/kb/315263
Okay. This has been a learning experience for me. :) I copied the minidump files from the problem laptop to my PC. I downloaded and/or installed the Windows XP Support Tools, Debugging Tools, and debugging symbols. I've put every subdir of C:\WINDOWS\Symbols\ in to my _NT_SYMBOL_PATH, along with a reference to the Microsoft symbol server. I run some commands (cookbooking from the MSKB article): CMD> windbg -i T:\Microsoft\Windows\XP\Pro\VLM\VX2PVOL_EN\I386 -z Mini061609-01.dmp kd> !reload kd> !analyze -v That gives me lots of stuff. It includes the bugcheck parameters, and they all match what I wrote down from the BSOD, so I think it worked. But I'm not sure how to interpret the output. I've done some programming before, so I know what a stack dump is. But everything I'm seeing looks generic -- not a driver specific to a give piece of hardware, but generic Windows kernel stuff. Maybe I'm missing something. I'm at the end of the cookbook recipe but the cake still isn't done! :) If my best bet is to send someone else the minidump file, I will do that. I just thought it would be nice to try myself. :) Possibly relevant excerpts from windbg session: kd> !reload Unable to load image ntoskrnl.exe, Win32 error 0n2 WARNING: Unable to verify timestamp for ntoskrnl.exe Unable to load image portcls.sys, Win32 error 0n2 kd> !analyze -v FAULTING_IP: portcls!CPortPinWavePci::Release+c a9fb9f21 ff510c call dword ptr [ecx+0Ch] PROCESS_NAME: services.exe STACK_TEXT: baccffa0 80501833 ed1f189c ffdff9c0 ffdff000 portcls!CPortPinWavePci::Release+0xc baccffcc 805450df 8055b4a0 00000000 00071970 nt!MiGatherMappedPages+0x12f ffdff980 8055b4a4 bacd0000 0005df91 00000001 nt!WmiTraceMessageVa+0x46 ffdff99c 00000000 00000001 00000003 a93b3bc0 nt!MiPageFileTraces+0x8c4 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
