Minidumps available !

08-27-2007

Hello,

Windows XP Professional x64 Edition has crashed many times the last year and
two months.

I have made available 27 minidumps that were made during the crashes !

Not all minidumps might be complete, sometimes I resetted the system because
I didn't want to wait, so some minidumps might be truncated.

Also the Win 64 Debugger doesn't show that much information but some command
line tool did show much more information... which can be seen in the two
output.txt samples. (Can't remember which command line tool it was, maybe
output.txt has hints !

)

I have uploaded these minidumps to my webdrive for you to download in case
you want to improve WinXPx64Pro !

Hope this helps ! (I also hope no passwords are in there or something like
that LOL !

gjez)

Webdrive is located at:

http://members.home.nl/hbthouppermans/

Specifically:

http://members.home.nl/hbthoupperman...4ProMinidumps/

I hope you have some fun with them !

I will inspect the latest myself:

27 august 2007.

I was debugging, developing with Delphi 2007 with themed support enabled and
then first system hang and the second time system crashed !

Nasty ! (win32k.sys bug ?)

Bye,
Skybuck.

08-27-2007

Oh ****,

I just noticed all the date/time on the webdrive have be changed to the day
I uploaded them ****.

The minidump for today/themed crash is:

Mini082707-01.dm

Bye,
Skybuck.

08-27-2007

I am definetly no expert...

Seems like something did a try except where that is not allowed, also seems
resource related ????:

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINDOWS\Minidump\Mini082707-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is:
SRV*c:\Tools\WinDbg\WebSymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs) Free
x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp2_rtm.070216-1710
Kernel base = 0xfffff800`01000000 PsLoadedModuleList = 0xfffff800`011d5100
Debug session time: Mon Aug 27 15:17:04.640 2007 (GMT+2)
System Uptime: 0 days 0:27:21.571
Loading Kernel Symbols
.................................................. .................................................. ........................................
Loading User Symbols
Loading unloaded module list
.................................................. .
************************************************** *****************************
*
*
* Bugcheck Analysis
*
*
*
************************************************** *****************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffffa8804c21090, 0, fffff97fff0a7742, 5}

Could not read faulting driver name
Probably caused by : win32k.sys ( win32k!HmgAllocateDcAttr+1b6 )

Followup: MachineOwner
---------

1: kd> !analyze -v
************************************************** *****************************
*
*
* Bugcheck Analysis
*
*
*
************************************************** *****************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by
try-except,
it must be protected by a Probe. Typically the address is just plain bad or
it
is pointing at freed memory.
Arguments:
Arg1: fffffa8804c21090, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff97fff0a7742, If non-zero, the instruction address which
referenced the bad memory
address.
Arg4: 0000000000000005, (reserved)

Debugging Details:
------------------

Could not read faulting driver name

READ_ADDRESS: fffffa8804c21090

FAULTING_IP:
win32k!HmgAllocateDcAttr+1b6
fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]

MM_INTERNAL_CODE: 5

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: bds.exe

CURRENT_IRQL: 0

TRAP_FRAME: fffffadfc478e990 -- (.trap fffffadfc478e990)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed.
rax=00000000ffffffff rbx=0000000000000888 rcx=fffffa8004c21080
rdx=fffffa8004c21080 rsi=fffffa80051f6280 rdi=fffff97fff0cda0e
rip=fffff97fff0a7742 rsp=fffffadfc478eb20 rbp=fffffadfc478ecf0
r8=fffffa8004b9b0c0 r9=5000984210000000 r10=500098421117001d
r11=00000000000007ff r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz ac po nc
win32k!HmgAllocateDcAttr+0x1b6:
fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]
ds:fffffa88`04c21090=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER: from fffff800010a5416 to fffff8000102e950

STACK_TEXT:
fffffadf`c478e8b8 fffff800`010a5416 : 00000000`00000050 fffffa88`04c21090
00000000`00000000 fffffadf`c478e990 : nt!KeBugCheckEx
fffffadf`c478e8c0 fffff800`0102d519 : fffffa80`00cad9e0 00000000`00000009
00000000`00000000 fffffa80`05009b50 : nt!MmAccessFault+0x395
fffffadf`c478e990 fffff97f`ff0a7742 : 00000000`00000000 fffff97f`ff0ce249
fffffa80`0445f780 fffffadf`c478ecf0 : nt!KiPageFault+0x119
fffffadf`c478eb20 fffff97f`ff0ce004 : 00000000`00000888 00000000`00000000
00000000`1e011591 fffffa80`051f6280 : win32k!HmgAllocateDcAttr+0x1b6
fffffadf`c478eb60 fffff97f`ff0cdf0e : fffffa80`051f6280 fffffa80`051f6280
fffffadf`cba85cd0 fffffa80`0133b000 : win32k!GreSetupDCAttributes+0x34
fffffadf`c478eba0 fffff97f`ff0a36c6 : fffffa80`01351010 fffff97f`ff0ced20
00000000`00000000 00000000`7efdb000 : win32k!GreCreateDisplayDC+0x1c4
fffffadf`c478ec30 fffff800`0102e3fd : 00000000`7d814cc6 fffff97f`ff0ced20
00000000`7d814cc6 00000000`7d814c30 : win32k!GreCreateCompatibleDC+0x77
fffffadf`c478ec70 00000000`78b842d9 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x3
00000000`0012edf8 00000000`00000000 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : 0x78b842d9

STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!HmgAllocateDcAttr+1b6
fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: win32k!HmgAllocateDcAttr+1b6

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 45e6f310

FAILURE_BUCKET_ID: X64_0x50_win32k!HmgAllocateDcAttr+1b6

BUCKET_ID: X64_0x50_win32k!HmgAllocateDcAttr+1b6

Followup: MachineOwner
---------

Bye,
Skybuck.

P.S.: I followed instructions on this link to setup WinDBG properly for
symbol support

http://forums.majorgeeks.com/showthread.php?t=35246

Simply add something like:

SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols

to symbol path.

Then symbols will be downloaded...

(I set mine to C:\Tools\WinDBG\WebSymbols

)

08-27-2007

Make that 28 !

System just crashed again while using internet explorer and surfing to the
weblog of the guy that wrote the themed delphi stuff ?!

The irony ?! Coincendence ?! or this guy one serious bug !?

Me think
coincedence !

Latest crash analysis:

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINDOWS\Minidump\Mini082707-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is:
SRV*c:\Tools\WinDbg\WebSymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs) Free
x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp2_rtm.070216-1710
Kernel base = 0xfffff800`01000000 PsLoadedModuleList = 0xfffff800`011d5100
Debug session time: Mon Aug 27 17:39:39.484 2007 (GMT+2)
System Uptime: 0 days 2:21:02.411
Loading Kernel Symbols
.................................................. .................................................. ........................................
Loading User Symbols
Loading unloaded module list
.................................................. .
************************************************** *****************************
*
*
* Bugcheck Analysis
*
*
*
************************************************** *****************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc0000005, fffff80001011ebd, fffffadfc9086a90,
fffffadfc90864a0}

Probably caused by : ntkrnlmp.exe ( nt!CmpDelayCloseWorker+494 )

Followup: MachineOwner
---------

1: kd> !analyze -v
************************************************** *****************************
*
*
* Bugcheck Analysis
*
*
*
************************************************** *****************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80001011ebd, The address that the exception occurred at
Arg3: fffffadfc9086a90, Exception Record Address
Arg4: fffffadfc90864a0, Context Record Address

Debugging Details:
------------------

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx"
referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
nt!CmpDelayCloseWorker+494
fffff800`01011ebd 488b4008 mov rax,qword ptr [rax+8]

EXCEPTION_RECORD: fffffadfc9086a90 -- (.exr fffffadfc9086a90)
ExceptionAddress: fffff80001011ebd
(nt!CmpDelayCloseWorker+0x0000000000000494)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 0000000000000008
Attempt to read from address 0000000000000008

CONTEXT: fffffadfc90864a0 -- (.cxr fffffadfc90864a0)
rax=0000000000000000 rbx=fffffa8003281c68 rcx=000000000000132f
rdx=0000000000000008 rsi=00000000ffffffff rdi=fffffa80028bd588
rip=fffff80001011ebd rsp=fffffadfc9086cb0 rbp=fffffa800412b920
r8=00000000da81d47a r9=fffffa80028bd590 r10=0000000000000000
r11=00000000000007ff r12=000000000000132f r13=00000000000001c1
r14=0000000000000000 r15=0000000000000001
iopl=0 nv up ei pl nz na pe cy
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b
efl=00010203
nt!CmpDelayCloseWorker+0x494:
fffff800`01011ebd 488b4008 mov rax,qword ptr [rax+8]
ds:002b:00000000`00000008=0000000000000000
Resetting default scope

CUSTOMER_CRASH_COUNT: 2

CURRENT_IRQL: 0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced
memory at "0x%08lx". The memory could not be "%s".

READ_ADDRESS: 0000000000000008

BUGCHECK_STR: 0x7E

DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE

EXCEPTION_STR: 0x0

LAST_CONTROL_TRANSFER: from fffff8000103768a to fffff80001011ebd

STACK_TEXT:
fffffadf`c9086cb0 fffff800`0103768a : 00000000`00000000 fffff800`011defe0
fffff800`01012070 fffffadf`cecd3bf0 : nt!CmpDelayCloseWorker+0x494
fffffadf`c9086d00 fffff800`0124b972 : fffffadf`cecd3bf0 00000000`00000080
fffffadf`cecd3bf0 fffffadf`c8c83680 : nt!ExpWorkerThread+0x13b
fffffadf`c9086d70 fffff800`010202d6 : fffffadf`c8c7b180 fffffadf`cecd3bf0
fffffadf`c8c83680 fffff800`011b5dc0 : nt!PspSystemThreadStartup+0x3e
fffffadf`c9086dd0 00000000`00000000 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16

FOLLOWUP_IP:
nt!CmpDelayCloseWorker+494
fffff800`01011ebd 488b4008 mov rax,qword ptr [rax+8]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 45d69ab4

SYMBOL_NAME: nt!CmpDelayCloseWorker+494

STACK_COMMAND: .cxr 0xfffffadfc90864a0 ; kb

FAILURE_BUCKET_ID: X64_0x7E_nt!CmpDelayCloseWorker+494

BUCKET_ID: X64_0x7E_nt!CmpDelayCloseWorker+494

Followup: MachineOwner
---------

1: kd> ml
*** WARNING: Unable to verify timestamp for nv4_disp.dll
*** ERROR: Module load completed but symbols could not be loaded for
nv4_disp.dll
*** WARNING: Unable to verify timestamp for CTEDSPSY.DLL
*** ERROR: Module load completed but symbols could not be loaded for
CTEDSPSY.DLL
*** WARNING: Unable to verify timestamp for dump_nvata64.sys
*** ERROR: Module load completed but symbols could not be loaded for
dump_nvata64.sys
*** WARNING: Unable to verify timestamp for vmm.sys
*** ERROR: Module load completed but symbols could not be loaded for vmm.sys
*** WARNING: Unable to verify timestamp for kl1.sys
*** ERROR: Module load completed but symbols could not be loaded for kl1.sys
*** WARNING: Unable to verify timestamp for klif.sys
*** ERROR: Module load completed but symbols could not be loaded for
klif.sys
*** WARNING: Unable to verify timestamp for CTEXFIFX.DLL
*** ERROR: Module load completed but symbols could not be loaded for
CTEXFIFX.DLL
*** WARNING: Unable to verify timestamp for CT20XUT.DLL
*** ERROR: Module load completed but symbols could not be loaded for
CT20XUT.DLL
*** WARNING: Unable to verify timestamp for ctac32k.sys
*** ERROR: Module load completed but symbols could not be loaded for
ctac32k.sys
*** WARNING: Unable to verify timestamp for ctsfm2k.sys
*** ERROR: Module load completed but symbols could not be loaded for
ctsfm2k.sys
*** WARNING: Unable to verify timestamp for emupia2k.sys
*** ERROR: Module load completed but symbols could not be loaded for
emupia2k.sys
*** WARNING: Unable to verify timestamp for ha20x2k.sys
*** ERROR: Module load completed but symbols could not be loaded for
ha20x2k.sys
*** WARNING: Unable to verify timestamp for AmdTools64.sys
*** ERROR: Module load completed but symbols could not be loaded for
AmdTools64.sys
*** WARNING: Unable to verify timestamp for usbccgp.sys
*** ERROR: Module load completed but symbols could not be loaded for
usbccgp.sys
*** WARNING: Unable to verify timestamp for dtscsi.sys
*** ERROR: Module load completed but symbols could not be loaded for
dtscsi.sys
*** WARNING: Unable to verify timestamp for NVSNPU.SYS
*** ERROR: Module load completed but symbols could not be loaded for
NVSNPU.SYS
*** WARNING: Unable to verify timestamp for NVNRM.SYS
*** ERROR: Module load completed but symbols could not be loaded for
NVNRM.SYS
*** WARNING: Unable to verify timestamp for ctoss2k.sys
*** ERROR: Module load completed but symbols could not be loaded for
ctoss2k.sys
*** WARNING: Unable to verify timestamp for ctaud2k.sys
*** ERROR: Module load completed but symbols could not be loaded for
ctaud2k.sys
*** WARNING: Unable to verify timestamp for nv4_mini.sys
*** ERROR: Module load completed but symbols could not be loaded for
nv4_mini.sys
*** WARNING: Unable to verify timestamp for yk51x64.sys
*** ERROR: Module load completed but symbols could not be loaded for
yk51x64.sys
*** WARNING: Unable to verify timestamp for speedfan.sys
*** ERROR: Module load completed but symbols could not be loaded for
speedfan.sys
*** WARNING: Unable to verify timestamp for nvata64.sys
*** ERROR: Module load completed but symbols could not be loaded for
nvata64.sys
*** WARNING: Unable to verify timestamp for SI3132.sys
*** ERROR: Module load completed but symbols could not be loaded for
SI3132.sys
*** WARNING: Unable to verify timestamp for Si3132r5.sys
*** ERROR: Module load completed but symbols could not be loaded for
Si3132r5.sys
*** WARNING: Unable to verify timestamp for SPTD2221.SYS
*** ERROR: Module load completed but symbols could not be loaded for
SPTD2221.SYS
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for
sptd.sys
*** WARNING: Unable to verify timestamp for amdk8.sys
*** ERROR: Module load completed but symbols could not be loaded for
amdk8.sys
*** WARNING: Unable to verify timestamp for LHidFilt.Sys
*** ERROR: Module load completed but symbols could not be loaded for
LHidFilt.Sys
*** WARNING: Unable to verify timestamp for LMouFilt.Sys
*** ERROR: Module load completed but symbols could not be loaded for
LMouFilt.Sys
*** WARNING: Unable to verify timestamp for SiWinAcc.sys
*** ERROR: Module load completed but symbols could not be loaded for
SiWinAcc.sys
*** WARNING: Unable to verify timestamp for ptilink.sys
*** ERROR: Module load completed but symbols could not be loaded for
ptilink.sys
*** WARNING: Unable to verify timestamp for NVENETFD.sys
*** ERROR: Module load completed but symbols could not be loaded for
NVENETFD.sys
*** WARNING: Unable to verify timestamp for nvnetbus.sys
*** ERROR: Module load completed but symbols could not be loaded for
nvnetbus.sys
*** WARNING: Unable to verify timestamp for klim5.sys
*** ERROR: Module load completed but symbols could not be loaded for
klim5.sys
*** WARNING: Unable to verify timestamp for SiRemFil.sys
*** ERROR: Module load completed but symbols could not be loaded for
SiRemFil.sys
*** WARNING: Unable to verify timestamp for CdaC15BA.sys
*** ERROR: Module load completed but symbols could not be loaded for
CdaC15BA.sys
*** WARNING: Unable to verify timestamp for secdrv.sys
*** ERROR: Module load completed but symbols could not be loaded for
secdrv.sys
*** WARNING: Unable to verify timestamp for CdaD10BA.sys
*** ERROR: Module load completed but symbols could not be loaded for
CdaD10BA.sys
*** WARNING: Unable to verify timestamp for ctprxy2k.sys
*** ERROR: Module load completed but symbols could not be loaded for
ctprxy2k.sys
*** WARNING: Unable to verify timestamp for ASACPI.sys
*** ERROR: Module load completed but symbols could not be loaded for
ASACPI.sys
*** WARNING: Unable to verify timestamp for FileDisk.SYS
*** ERROR: Module load completed but symbols could not be loaded for
FileDisk.SYS
*** WARNING: Unable to verify timestamp for AmdAcpi.sys
*** ERROR: Module load completed but symbols could not be loaded for
AmdAcpi.sys
*** WARNING: Unable to verify timestamp for PxHlpa64.sys
*** ERROR: Module load completed but symbols could not be loaded for
PxHlpa64.sys
*** WARNING: Unable to verify timestamp for AsIO.sys
*** ERROR: Module load completed but symbols could not be loaded for
AsIO.sys
*** WARNING: Unable to verify timestamp for LtcyCfgWDM.sys
*** ERROR: Module load completed but symbols could not be loaded for
LtcyCfgWDM.sys
Couldn't resolve error at 'l'
1: kd> lm nt
start end module name
fffff800`00800000 fffff800`0085e000 hal hal.dll Sat Feb 17
06:28:59 2007 (45D6929B)
fffff800`01000000 fffff800`01490000 nt ntkrnlmp.exe Sat Feb 17
07:03:32 2007 (45D69AB4)
fffff97f`ff000000 fffff97f`ff460000 win32k win32k.sys Thu Mar 01
16:36:48 2007 (45E6F310)
fffff97f`ff460000 fffff97f`ff488000 dxg dxg.sys Sat Feb 17
06:43:08 2007 (45D695EC)
fffff97f`ff488000 fffff97f`ffabe900 nv4_disp nv4_disp.dll Sun Oct 22
23:36:40 2006 (453BE468)
fffffadf`bf535000 fffffadf`bf56d000 kmixer kmixer.sys Fri Mar 25
01:43:18 2005 (42435EA6)
fffffadf`c34f5000 fffffadf`c3552000 CTEDSPSY CTEDSPSY.DLL Thu Aug 17
06:18:36 2006 (44E3EE1C)
fffffadf`c4a84000 fffffadf`c4ac5000 Fastfat Fastfat.SYS Sat Feb 17
06:29:41 2007 (45D692C5)
fffffadf`c4cda000 fffffadf`c4d05000 sysaudio sysaudio.sys Sat Feb 17
06:59:44 2007 (45D699D0)
fffffadf`c4d05000 fffffadf`c4d39000 wdmaud wdmaud.sys Sat Feb 17
07:00:21 2007 (45D699F5)
fffffadf`c6469000 fffffadf`c6496000 dump_nvata64 dump_nvata64.sys Tue Apr
25 02:59:58 2006 (444D748E)
fffffadf`c6526000 fffffadf`c652f000 dump_WMILIB dump_WMILIB.SYS Fri Mar 25
01:43:56 2005 (42435ECC)
fffffadf`c6536000 fffffadf`c6555000 Udfs Udfs.SYS Sat Feb 17
06:29:46 2007 (45D692CA)
fffffadf`c6555000 fffffadf`c6576000 Cdfs Cdfs.SYS Sat Feb 17
06:59:37 2007 (45D699C9)
fffffadf`c668e000 fffffadf`c675b000 mrxsmb mrxsmb.sys Sat Feb 17
07:01:41 2007 (45D69A45)
fffffadf`c675b000 fffffadf`c67ac000 rdbss rdbss.sys Sat Feb 17
07:02:30 2007 (45D69A76)
fffffadf`c67ac000 fffffadf`c67f9000 vmm vmm.sys Sun Feb 18
09:11:21 2007 (45D80A29)
fffffadf`c67f9000 fffffadf`c68cf000 Wdf01000 Wdf01000.sys Thu Nov 02
10:43:35 2006 (4549BDC7)
fffffadf`c68cf000 fffffadf`c691c000 afd afd.sys Sat Feb 17
06:59:33 2007 (45D699C5)
fffffadf`c691c000 fffffadf`c6976000 netbt netbt.sys Sat Feb 17
07:00:23 2007 (45D699F7)
fffffadf`c69bc000 fffffadf`c69d1000 HIDCLASS HIDCLASS.SYS Fri Mar 25
01:43:28 2005 (42435EB0)
fffffadf`c69d1000 fffffadf`c69f7000 kl1 kl1.sys Sat Mar 03
18:38:14 2007 (45E9B286)
fffffadf`c69f7000 fffffadf`c6aec000 tcpip tcpip.sys Sat Feb 17
06:58:59 2007 (45D699A3)
fffffadf`c6aec000 fffffadf`c6b17000 ipsec ipsec.sys Sat Feb 17
07:01:35 2007 (45D69A3F)
fffffadf`c6b17000 fffffadf`c6b2b000 Npfs Npfs.SYS Sat Feb 17
06:29:55 2007 (45D692D3)
fffffadf`c6beb000 fffffadf`c6c15000 klif klif.sys Mon Jan 29
13:59:26 2007 (45BDEFAE)
fffffadf`c6c15000 fffffadf`c6d78000 CTEXFIFX CTEXFIFX.DLL Thu Aug 17
06:19:01 2006 (44E3EE35)
fffffadf`c6d78000 fffffadf`c6db9000 CT20XUT CT20XUT.DLL Thu Aug 17
06:19:03 2006 (44E3EE37)
fffffadf`c6ddb000 fffffadf`c6e89000 ctac32k ctac32k.sys Thu Aug 17
06:15:29 2006 (44E3ED61)
fffffadf`c6e89000 fffffadf`c6ed3000 ctsfm2k ctsfm2k.sys Thu Aug 17
06:15:45 2006 (44E3ED71)
fffffadf`c6ed3000 fffffadf`c6f23000 emupia2k emupia2k.sys Thu Aug 17
06:15:40 2006 (44E3ED6C)
fffffadf`c6f23000 fffffadf`c7116000 ha20x2k ha20x2k.sys Thu Aug 17
06:17:10 2006 (44E3EDC6)
fffffadf`c7216000 fffffadf`c7236000 usbhub usbhub.sys Sat Feb 17
06:52:07 2007 (45D69807)
fffffadf`c737c000 fffffadf`c7390000 NDProxy NDProxy.SYS Sat Feb 17
06:31:37 2007 (45D69339)
fffffadf`c7390000 fffffadf`c73a5000 AmdTools64 AmdTools64.sys Tue Jun 27
21:24:21 2006 (44A185E5)
fffffadf`c73a5000 fffffadf`c73c0000 update update.sys Sat Feb 17
06:46:26 2007 (45D696B2)
fffffadf`c73c0000 fffffadf`c73d6000 termdd termdd.sys Sat Feb 17
06:33:42 2007 (45D693B6)
fffffadf`c73d6000 fffffadf`c742d000 rdpdr rdpdr.sys Sat Feb 17
06:30:39 2007 (45D692FF)
fffffadf`c743d000 fffffadf`c7449000 kbdhid kbdhid.sys Sat Feb 17
06:46:30 2007 (45D696B6)
fffffadf`c744d000 fffffadf`c7457000 mouhid mouhid.sys Fri Mar 25
01:38:12 2005 (42435D74)
fffffadf`c745d000 fffffadf`c746b000 WDFLDR WDFLDR.SYS Thu Nov 02
10:42:06 2006 (4549BD6E)
fffffadf`c748d000 fffffadf`c7497000 hidusb hidusb.sys Fri Mar 25
01:43:29 2005 (42435EB1)
fffffadf`c74ad000 fffffadf`c74b7700 usbccgp usbccgp.sys Sat Feb 17
06:52:10 2007 (45D6980A)
fffffadf`c74bd000 fffffadf`c74c7000 rasacd rasacd.sys Fri Mar 25
01:44:16 2005 (42435EE0)
fffffadf`c74cd000 fffffadf`c74e3000 msgpc msgpc.sys Sat Feb 17
06:31:07 2007 (45D6931B)
fffffadf`c74e3000 fffffadf`c7503000 psched psched.sys Sat Feb 17
06:31:10 2007 (45D6931E)
fffffadf`c7503000 fffffadf`c7526000 raspptp raspptp.sys Sat Feb 17
07:01:23 2007 (45D69A33)
fffffadf`c7526000 fffffadf`c753a000 raspppoe raspppoe.sys Sat Feb 17
06:31:42 2007 (45D6933E)
fffffadf`c753a000 fffffadf`c7566000 ndiswan ndiswan.sys Sat Feb 17
07:01:23 2007 (45D69A33)
fffffadf`c7566000 fffffadf`c758c000 rasl2tp rasl2tp.sys Sat Feb 17
07:00:35 2007 (45D69A03)
fffffadf`c758c000 fffffadf`c75e3000 dtscsi dtscsi.sys Sat Dec 10
16:06:04 2005 (439AEEDC)
fffffadf`c75e3000 fffffadf`c7630000 NVSNPU NVSNPU.SYS Sat Apr 15
05:09:50 2006 (444063FE)
fffffadf`c7630000 fffffadf`c769d400 NVNRM NVNRM.SYS Sat Apr 15
05:10:01 2006 (44406409)
fffffadf`c769e000 fffffadf`c76d8000 ctoss2k ctoss2k.sys Thu Aug 17
06:15:59 2006 (44E3ED7F)
fffffadf`c76d8000 fffffadf`c7721000 ks ks.sys Sat Feb 17
07:02:44 2007 (45D69A84)
fffffadf`c7721000 fffffadf`c7761000 portcls portcls.sys Sat Feb 17
07:00:14 2007 (45D699EE)
fffffadf`c7761000 fffffadf`c7831980 ctaud2k ctaud2k.sys Thu Aug 17
06:18:18 2006 (44E3EE0A)
fffffadf`c7832000 fffffadf`c784d000 cdrom cdrom.sys Fri Mar 25
01:39:39 2005 (42435DCB)
fffffadf`c784d000 fffffadf`c7887000 USBPORT USBPORT.SYS Sat Feb 17
06:52:00 2007 (45D69800)
fffffadf`c7887000 fffffadf`c78aa000 VIDEOPRT VIDEOPRT.SYS Sat Feb 17
06:50:17 2007 (45D69799)
fffffadf`c78aa000 fffffadf`c7db3d80 nv4_mini nv4_mini.sys Sun Oct 22
23:42:05 2006 (453BE5AD)
fffffadf`c7db4000 fffffadf`c7df9000 yk51x64 yk51x64.sys Thu Apr 28
10:10:15 2005 (42709A67)
fffffadf`c7eb6000 fffffadf`c7ebd000 speedfan speedfan.sys Sun Sep 24
15:26:48 2006 (45168798)
fffffadf`c7f6c000 fffffadf`c7f73000 Beep Beep.SYS Fri Mar 25
01:38:06 2005 (42435D6E)
fffffadf`c81d6000 fffffadf`c820a000 Mup Mup.sys Sat Feb 17
07:02:36 2007 (45D69A7C)
fffffadf`c820a000 fffffadf`c8270000 NDIS NDIS.sys Sat Feb 17
07:00:17 2007 (45D699F1)
fffffadf`c8270000 fffffadf`c8375000 Ntfs Ntfs.sys Sat Feb 17
07:00:15 2007 (45D699EF)
fffffadf`c8375000 fffffadf`c83a9000 KSecDD KSecDD.sys Sat Feb 17
06:36:10 2007 (45D6944A)
fffffadf`c83a9000 fffffadf`c83e7000 fltmgr fltmgr.sys Sat Feb 17
06:30:45 2007 (45D69305)
fffffadf`c83e7000 fffffadf`c8404000 CLASSPNP CLASSPNP.SYS Sat Feb 17
06:59:43 2007 (45D699CF)
fffffadf`c8404000 fffffadf`c8419000 disk disk.sys Sat Feb 17
06:47:52 2007 (45D69708)
fffffadf`c8419000 fffffadf`c8446000 nvata64 nvata64.sys Tue Apr 25
02:59:58 2006 (444D748E)
fffffadf`c8446000 fffffadf`c8464000 SI3132 SI3132.sys Fri Jan 26
00:17:31 2007 (45B93A8B)
fffffadf`c8464000 fffffadf`c8495000 SCSIPORT SCSIPORT.SYS Sat Feb 17
06:59:49 2007 (45D699D5)
fffffadf`c8495000 fffffadf`c84ea000 Si3132r5 Si3132r5.sys Tue Nov 28
00:11:19 2006 (456B7097)
fffffadf`c84ea000 fffffadf`c8517000 atapi atapi.sys Sat Feb 17
06:47:46 2007 (45D69702)
fffffadf`c8517000 fffffadf`c8562000 volsnap volsnap.sys Sat Feb 17
06:48:21 2007 (45D69725)
fffffadf`c8562000 fffffadf`c85a9000 dmio dmio.sys Sat Feb 17
06:50:25 2007 (45D697A1)
fffffadf`c85a9000 fffffadf`c85e9000 ftdisk ftdisk.sys Sat Feb 17
06:48:06 2007 (45D69716)
fffffadf`c85e9000 fffffadf`c85ff000 MountMgr MountMgr.sys Sat Feb 17
06:46:25 2007 (45D696B1)
fffffadf`c85ff000 fffffadf`c8612a00 1394BUS 1394BUS.SYS Sat Feb 17
06:52:29 2007 (45D6981D)
fffffadf`c8613000 fffffadf`c8629d00 ohci1394 ohci1394.sys Sat Feb 17
06:52:30 2007 (45D6981E)
fffffadf`c862a000 fffffadf`c864b000 pci pci.sys Sat Feb 17
06:38:11 2007 (45D694C3)
fffffadf`c864b000 fffffadf`c869f000 ACPI ACPI.sys Sat Feb 17
06:37:56 2007 (45D694B4)
fffffadf`c869f000 fffffadf`c86d0000 SPTD2221 SPTD2221.SYS Sat Feb 17
06:59:49 2007 (45D699D5)
fffffadf`c86d0000 fffffadf`c87f2000 sptd sptd.sys Fri Jun 23
23:55:14 2006 (449C6342)
fffffadf`c88f3000 fffffadf`c8905000 amdk8 amdk8.sys Mon Jul 03
08:55:17 2006 (44A8BF55)
fffffadf`c8906000 fffffadf`c8918000 wanarp wanarp.sys Sat Feb 17
06:31:35 2007 (45D69337)
fffffadf`c8919000 fffffadf`c892b000 LHidFilt LHidFilt.Sys Wed Jan 24
00:41:13 2007 (45B69D19)
fffffadf`c892c000 fffffadf`c893e000 netbios netbios.sys Sat Feb 17
06:31:02 2007 (45D69316)
fffffadf`c893f000 fffffadf`c8951000 LMouFilt LMouFilt.Sys Wed Jan 24
00:41:16 2007 (45B69D1C)
fffffadf`c8952000 fffffadf`c8964000 Fips Fips.SYS Sat Feb 17
06:38:28 2007 (45D694D4)
fffffadf`c8bfb000 fffffadf`c8c05000 kdcom kdcom.dll Fri Mar 25
04:54:15 2005 (42438B67)
fffffadf`c8c0b000 fffffadf`c8c14000 BOOTVID BOOTVID.dll Fri Mar 25
04:54:04 2005 (42438B5C)
fffffadf`c8c1b000 fffffadf`c8c24000 WMILIB WMILIB.SYS Fri Mar 25
01:43:56 2005 (42435ECC)
fffffadf`c8c2b000 fffffadf`c8c34000 isapnp isapnp.sys Sat Feb 17
06:38:08 2007 (45D694C0)
fffffadf`c8c3b000 fffffadf`c8c4b000 PCIIDEX PCIIDEX.SYS Sat Feb 17
06:47:39 2007 (45D696FB)
fffffadf`c8c4b000 fffffadf`c8c5b000 PartMgr PartMgr.sys Sat Feb 17
06:59:56 2007 (45D699DC)
fffffadf`c8c5b000 fffffadf`c8c65000 SiWinAcc SiWinAcc.sys Mon Nov 01
20:23:29 2004 (41868D31)
fffffadf`c8c6b000 fffffadf`c8c76000 crcdisk crcdisk.sys Fri Mar 25
01:42:06 2005 (42435E5E)
fffffadf`c8c8b000 fffffadf`c8c98000 ptilink ptilink.sys Fri Mar 25
01:38:44 2005 (42435D94)
fffffadf`c8ccb000 fffffadf`c8cd6000 raspti raspti.sys Fri Mar 25
01:44:11 2005 (42435EDB)
fffffadf`c8cdb000 fffffadf`c8ce9000 kbdclass kbdclass.sys Sat Feb 17
06:46:27 2007 (45D696B3)
fffffadf`c8ceb000 fffffadf`c8cf8000 mouclass mouclass.sys Fri Mar 25
01:38:09 2005 (42435D71)
fffffadf`c8cfb000 fffffadf`c8d08000 mssmbios mssmbios.sys Sat Feb 17
06:38:13 2007 (45D694C5)
fffffadf`c8d1b000 fffffadf`c8d27000 Dxapi Dxapi.sys Fri Mar 25
01:39:08 2005 (42435DAC)
fffffadf`c8d5b000 fffffadf`c8d67e00 NVENETFD NVENETFD.sys Sat Apr 15
05:10:14 2006 (44406416)
fffffadf`c8d6b000 fffffadf`c8d77000 flpydisk flpydisk.sys Fri Mar 25
01:39:10 2005 (42435DAE)
fffffadf`c8d8b000 fffffadf`c8d95000 Fs_Rec Fs_Rec.SYS Fri Mar 25
01:39:42 2005 (42435DCE)
fffffadf`c8dab000 fffffadf`c8db5200 HIDPARSE HIDPARSE.SYS Sat Feb 17
06:51:53 2007 (45D697F9)
fffffadf`c8dbb000 fffffadf`c8dc9000 vga vga.sys Fri Mar 25
01:42:24 2005 (42435E70)
fffffadf`c8dcb000 fffffadf`c8dd5000 mnmdd mnmdd.SYS Fri Mar 25
01:42:22 2005 (42435E6E)
fffffadf`c8ddb000 fffffadf`c8de5000 RDPCDD RDPCDD.sys Fri Mar 25
01:38:04 2005 (42435D6C)
fffffadf`c8deb000 fffffadf`c8df8000 Msfs Msfs.SYS Fri Mar 25
01:40:07 2005 (42435DE7)
fffffadf`c8dfb000 fffffadf`c8e04000 watchdog watchdog.sys Fri Mar 25
01:43:05 2005 (42435E99)
fffffadf`c8e0b000 fffffadf`c8e19000 fdc fdc.sys Sat Feb 17
06:47:27 2007 (45D696EF)
fffffadf`c8e1b000 fffffadf`c8e25c80 usbehci usbehci.sys Sat Feb 17
06:51:59 2007 (45D697FF)
fffffadf`c8e2b000 fffffadf`c8e36000 nvnetbus nvnetbus.sys Sat Apr 15
05:10:16 2006 (44406418)
fffffadf`c8e3b000 fffffadf`c8e45000 klim5 klim5.sys Mon Jan 22
17:37:43 2007 (45B4E857)
fffffadf`c8e4b000 fffffadf`c8e55000 ndistapi ndistapi.sys Fri Mar 25
01:44:06 2005 (42435ED6)
fffffadf`c8e5b000 fffffadf`c8e6a000 TDI TDI.SYS Sat Feb 17
06:33:32 2007 (45D693AC)
fffffadf`c8e6b000 fffffadf`c8e73000 SiRemFil SiRemFil.sys Thu Oct 19
00:20:39 2006 (4536A8B7)
fffffadf`c8e9b000 fffffadf`c8ea3000 CdaC15BA CdaC15BA.sys Wed Dec 10
16:11:51 2003 (3FD737B7)
fffffadf`c8ecb000 fffffadf`c8ed3000 secdrv secdrv.sys Thu Apr 01
13:26:05 2004 (406BFC4D)
fffffadf`c8ed3000 fffffadf`c8edb000 CdaD10BA CdaD10BA.sys Wed Dec 10
16:11:51 2003 (3FD737B7)
fffffadf`c8ee3000 fffffadf`c8eeb000 ctprxy2k ctprxy2k.sys Thu Aug 17
06:18:29 2006 (44E3EE15)
fffffadf`c8f03000 fffffadf`c8f0b000 ASACPI ASACPI.sys Mon Mar 28
04:30:36 2005 (42476C4C)
fffffadf`c8f0b000 fffffadf`c8f13000 FileDisk FileDisk.SYS Sat Jun 12
00:42:28 2004 (40CA3554)
fffffadf`c8f13000 fffffadf`c8f1b000 Null Null.SYS Fri Mar 25
01:38:07 2005 (42435D6F)
fffffadf`c8fe3000 fffffadf`c8feb000 audstub audstub.sys Fri Mar 25
01:43:08 2005 (42435E9C)
fffffadf`c8ffb000 fffffadf`c9000d00 AmdAcpi AmdAcpi.sys Mon Feb 14
18:54:15 2005 (4210E5C7)
fffffadf`c9002000 fffffadf`c9009000 pciide pciide.sys Fri Mar 25
01:39:26 2005 (42435DBE)
fffffadf`c9009000 fffffadf`c9010000 dmload dmload.sys Fri Mar 25
01:42:29 2005 (42435E75)
fffffadf`c9010000 fffffadf`c9016860 PxHlpa64 PxHlpa64.sys Mon Apr 25
21:48:21 2005 (426D4985)
fffffadf`c91b4000 fffffadf`c91ba000 AsIO AsIO.sys Thu Oct 14
11:53:21 2004 (416E4C91)
fffffadf`c91d0000 fffffadf`c91d6700 usbohci usbohci.sys Sat Feb 17
06:52:04 2007 (45D69804)
fffffadf`c920f000 fffffadf`c9214e80 ksthunk ksthunk.sys Sat Feb 17
06:46:33 2007 (45D696B9)
fffffadf`c93d3000 fffffadf`c93d4f00 LtcyCfgWDM LtcyCfgWDM.sys Mon Dec 26
00:23:17 2005 (43AF29E5)
fffffadf`c93ff000 fffffadf`c9400400 swenum swenum.sys Sat Feb 17
06:46:35 2007 (45D696BB)
fffffadf`c940d000 fffffadf`c940ed80 USBD USBD.SYS Fri Mar 25
01:43:30 2005 (42435EB2)

Unloaded modules:
fffffadf`bf7bb000 fffffadf`bf7f3000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`bf7bb000 fffffadf`bf7f3000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`bf879000 fffffadf`bf8b1000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c02cd000 fffffadf`c0305000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c0b05000 fffffadf`c0b3d000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c2a26000 fffffadf`c2a5e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c4c53000 fffffadf`c4c8b000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c4c8b000 fffffadf`c4ca5000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c4ca5000 fffffadf`c4cda000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c932f000 fffffadf`c9332000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c3552000 fffffadf`c357d000 COMMONFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c357d000 fffffadf`c35ac000 CTEDSPIO.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c35ac000 fffffadf`c35fe000 CTEDSPFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c35fe000 fffffadf`c362d000 CTEDSPIO.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c362d000 fffffadf`c367f000 CTEDSPFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c367f000 fffffadf`c36dc000 CTEDSPSY.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c36dc000 fffffadf`c3787000 CTSBLFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c3787000 fffffadf`c37d9000 CTEDSPFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c37d9000 fffffadf`c3808000 CTEDSPIO.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c372e000 fffffadf`c37d9000 CTSBLFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c37d9000 fffffadf`c3808000 CTEDSPIO.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c3519000 fffffadf`c3548000 CTEDSPIO.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c3548000 fffffadf`c35a5000 CTEDSPSY.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c35a5000 fffffadf`c3650000 CTSBLFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c3650000 fffffadf`c367f000 CTEDSPIO.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c367f000 fffffadf`c372a000 CTSBLFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c372a000 fffffadf`c37d9000 CTAUDFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c37d9000 fffffadf`c3808000 CTEDSPIO.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c33bb000 fffffadf`c33ea000 CTEDSPIO.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c33ea000 fffffadf`c3499000 CTAUDFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c3499000 fffffadf`c34eb000 CTEDSPFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c34eb000 fffffadf`c3596000 CTSBLFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c3596000 fffffadf`c35f3000 CTEDSPSY.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c35f3000 fffffadf`c369e000 CTSBLFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c369e000 fffffadf`c36f0000 CTEDSPFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c36f0000 fffffadf`c374d000 CTEDSPSY.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c374d000 fffffadf`c377c000 CTEDSPIO.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c377c000 fffffadf`c37d9000 CTEDSPSY.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c37d9000 fffffadf`c3808000 CTEDSPIO.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c37d9000 fffffadf`c3808000 CTEDSPIO.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c375d000 fffffadf`c3808000 CTSBLFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c36b1000 fffffadf`c3703000 CTEDSPFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c3703000 fffffadf`c3732000 CTEDSPIO.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c3732000 fffffadf`c37dd000 CTSBLFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c37dd000 fffffadf`c3808000 COMMONFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c36a2000 fffffadf`c36d1000 CTEDSPIO.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c36d1000 fffffadf`c372e000 CTEDSPSY.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c372e000 fffffadf`c37d9000 CTSBLFX.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c37d9000 fffffadf`c3808000 CTEDSPIO.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`c372e000 fffffadf`c375d000 CTEDSPIO.DLL
Timestamp: unavailable (00000000)
Checksum: 00000000

What does unloaded modules mean ? Did these modules not load properly ?

Lot's of creative labs stuff it seems...

Why were these unloaded ?

Bye,
Skybuck.

08-27-2007

Just for the record here is the link and the source of the website that
crashed my system (might be internet explorer 7 related, one internet
explorer didn't start quickly enough so I terminated it, then later the new
instance crashed):

The crash might have been caused by the internet explorere I terminated,
maybe it wasn't terminated properly

(No website was loaded for the terminated explorer, since I have blank by
default, but it still loaded slowly ? strange)

Still website full of crap:

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
<title>Delphi 2007 VCL Designer Theme Support</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="Content-Language" content="EN" />
<meta name="DC.title" content="The Blog of Steve Trefethen" />
<meta name="ICBM" content="37.0517349243164, -122.031608581543" />
<meta name="geo.position" content="37.0517349243164, -122.031608581543"
/>
<meta content="Delphi, ASP.NET, Google, Computer, .NET, C#, Trefethen,
Steve, Weblog, Scotts Valley, California, stevetrefethen.com - Steve
Trefethen's Weblog" name="KEYWORDS" />
<meta content="Blogging on development related topics particularly
internet applications, ASP.NET, C#, Delphi, Windows API, Win32 and other
items of personal interest" name="DESCRIPTION" />
<meta name="author" content="Steve Trefethen" />
<meta name="copyright" content="2006-2007 Steve Trefethen Creative
Commons Attribution 2.5 License Some rights reserved" />
<meta name="verify-v1"
content="4u+6jnGkp0dk/ers2rvpg9D+2Q6PbIYlEZ+9EgVvO5E=" />
<link rel="openid.server" href="http://www.myopenid.com/server" />
<link rel="openid.delegate" href="http://stevetrefethen.myopenid.com/"
/>
<link media="all" rel="stylesheet" type="text/css"
href="http://www.stevetrefethen.com/blog/themes/SteveWhite/allstyles.css"></link>
<link rel="shortcut icon" href="/favicon.ico" />
<link rel="meta" type="application/rdf+xml" title="FOAF"
href="/blog/foaf.rdf" />


<link rel="stylesheet" type="text/css"
href="http://www.google.com/uds/css/gsearch.css"></link>
<style type="text/css">
gs-result, gs-webResult {
width: 575px;
}
</style>

<script
src="http://www.google.com/uds/api?file=uds.js&v=1.0&key=ABQIAAAAxdzra1SU iRgCxlxV65C7ThQxZfWLYgQ1RrGbkJQBJQpJyHPXGRRLpHQp7S ERGgRo929bmsPGrg4zFw"
type="text/javascript"></script>
<script language="Javascript" type="text/javascript">
//<![CDATA[
function OnLoad() {
// Create a search control
var searchControl = new GSearchControl();
// Set options
var options = new GsearcherOptions();
options.setExpandMode(GSearchControl.EXPAND_MODE_O PEN);
options.setRoot(document.getElementById("search_re sults"));
// site restricted web search with custom label
// and class suffix
var siteSearch = new GwebSearch();
siteSearch.setUserDefinedLabel("stevetrefethen.com ");
siteSearch.setUserDefinedClassSuffix("siteSearch") ;
siteSearch.setSiteRestriction("stevetrefethen.com" );
searchControl.addSearcher(siteSearch, options);

// Tell the searcher to draw itself and tell it where to attach
searchControl.draw(document.getElementById("search control"));

// Execute an inital search
//searchControl.execute("Google");
}
GSearch.setOnLoadCallback(OnLoad);
//]]>
</script>
<base href="http://www.stevetrefethen.com/blog/"></base>
<link rel="alternate" type="application/rss+xml" title="Steve Trefethen's
Weblog" href="http://feeds.feedburner.com/SteveTrefethensWeblog" />
<link rel="alternate" type="application/atom+xml" title="Steve Trefethen's
Weblog" href="http://feeds.feedburner.com/SteveTrefethensWeblog" />
<link rel="EditURI" type="application/rsd+xml" title="RSD"
href="http://www.stevetrefethen.com/blog/EditService.asmx/GetRsd" /><link
rel="microsummary" type="application/x.microsummary+xml"
href="http://www.stevetrefethen.com/blog/Microsummary.ashx" /></head>
<body><form name="mainForm" method="post"
action="/blog/CommentView.aspx?title=Delphi2007VCLDesignerThemeS upport"
id="mainForm">
<input type="hidden" name="__EVENTTARGET" id="__EVENTTARGET" value="" />
<input type="hidden" name="__EVENTARGUMENT" id="__EVENTARGUMENT" value="" />
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE"
value="/wEPDwUKMTM2MTcxNzAwMA9kFgJmD2QWAgIFD2QWBAIFDzwrAAo BAA8WAh4KVG9kYXlzRGF0ZQYAgHdYVLbJCGRkAhUPZBYCZg8PF gIeB2VudHJ5SWQFJDEwYzQ1NGRhLTIyMTgtNDZlZi1hNjk1LTE 4NzBhNjc5MzVmYmQWAmYPZBYGAgMPFgIeB1Zpc2libGVnFgICA Q8PFgIeBFRleHQFFENvbW1lbnRzIGFyZSBjbG9zZWQuZGQCBA8 WAh8CaBYCAgEPDxYCHwMFS0FsbCBjb21tZW50cyByZXF1aXJlI HRoZSBhcHByb3ZhbCBvZiB0aGUgc2l0ZSBvd25lciBiZWZvcmU gYmVpbmcgZGlzcGxheWVkLmRkAgYPFgIfAmgWEGYPZBYCZg9kF gRmDw8WAh8DBQROYW1lZGQCAg8PFgIeDEVycm9yTWVzc2FnZQU xWW91IG11c3QgZW50ZXIgeW91ciBuYW1lIC0gb3IgYXQgbGVhc 3Qgc29tZSBuYW1lLmRkAgEPZBYEZg9kFgRmDw8WAh8DBQZFLW1 haWxkZAICDw8WAh8EBUpUaGUgZS1tYWlsIGFkZHJlc3MgaXMgb 3B0aW9uYWwsIGJ1dCBpZiB5b3UgcHJvdmlkZSBpdCwgaXQgc2h vdWxkIGJlIHZhbGlkLmRkAgEPZBYCAgMPFgIfAmgWAgIBDw8WA h8DBVQod2lsbCBzaG93IHlvdXIgPGEgaHJlZj0iaHR0cDovL3d 3dy5ncmF2YXRhci5jb20iIHRhcmdldD0iX2JsYW5rIj5ncmF2Y XRhcjwvYT4gaWNvbilkZAICD2QWAmYPZBYCZg8PFgIfAwUJSG9 tZSBwYWdlZGQCBA9kFgICAQ9kFgICAQ8QDxYCHwMFC1JlbWVtY mVyIE1lZGRkZAIFD2QWAmYPZBYGZg8PFgQfAwUaQ29tbWVudCA oSFRNTCBub3QgYWxsb3dlZCkfAmhkZAICDw8WAh8DBdMBQ29tb WVudCAoU29tZSBodG1sIGlzIGFsbG93ZWQ6IDxjb2RlPmFAaHJ lZkB0aXRsZSwgYiwgYmxvY2txdW90ZUBjaXRlLCBlbSwgaSwgc 3Ryb25nPC9jb2RlPikgd2hlcmUgdGhlIEAgbWVhbnMgImF0dHJ pYnV0ZS4iIEZvciBleGFtcGxlLCB5b3UgY2FuIHVzZSAmbHQ7Y SBocmVmPSIiIHRpdGxlPSIiJmd0OyBvciAmbHQ7YmxvY2txdW9 0ZSBjaXRlPSJTY290dCImZ3Q7LmRkAgQPDxYCHwQFHkVtcHR5I GNvbW1lbnRzIGFyZW4ndCBhbGxvd2VkLmRkAgYPZBYCZg9kFgI CBQ8PFgIfBAUbUGxlYXNlIGVudGVyIHRoZSBjb2RlIHNob3duZ GQCBw9kFgJmD2QWAmYPDxYCHwMFFExpdmUgQ29tbWVudCBQcmV 2aWV3ZGQCCQ9kFgJmD2QWAgIDDw8WAh8DBQxTYXZlIENvbW1lb nRkZGQ="
/>

<script type="text/javascript">

</script>

<script type="text/javascript">
var allowedHtmlTags = ['a', 'b', 'blockquote', 'em', 'i', 'strong'];
</script>
<script type="text/javascript" src="scripts/LiveCommentPreview.js"
defer="true"></script><script type="text/javascript" language="JavaScript">
function showReferral()
{
var elems = document.getElementsByTagName('*');
var count = 0;
for (var i=0;i<elems.length;i++) {
if ( elems[i].id.indexOf('referralSpanHidden') != -1 ) {
elems[i].style.display='inline';
count++;
}
else if ( elems[i].id.indexOf('referralMore') != -1 ) {
elems[i].style.display='none';
count++;
}
if (count == 2) {break;}
}
}
</script><script type="text/javascript">
var br_img_expanded =
'http://www.stevetrefethen.com/blog/images/outlinedown.gif';
var br_img_collapsed =
'http://www.stevetrefethen.com/blog/images/outlinearrow.gif';
(new Image(15,15)).src = br_img_expanded; // caching
(new Image(15,15)).src = br_img_collapsed; // caching

function br_Expand(htmlNode,imgNode) {

if (document.getElementById && document.getElementById(htmlNode) !=
null) {
document.getElementById(imgNode).src=br_img_expand ed;
document.getElementById(htmlNode).className='blogR ollExpanded';
}
}

function br_Collapse(htmlNode,imgNode) {

if (document.getElementById && document.getElementById(htmlNode) != null)
{
document.getElementById(imgNode).src=br_img_collap sed;
document.getElementById(htmlNode).className='blogR ollCollapsed';
}
}

function br_toggleExpansionStatus(htmlNode,imgNode) {
if (document.getElementById && document.getElementById(htmlNode) != null)
{
nodeState = document.getElementById(htmlNode).className;
}
if (nodeState == 'blogRollCollapsed') {
br_Expand(htmlNode,imgNode);
}
else {
br_Collapse(htmlNode,imgNode);
}
}
</script><style type="text/css">
/* Class for expanded nested outlines */
..blogRollExpanded
{
visibility: visible;
display: block;
}
/* Class for collapsed nested outlines */
..blogRollCollapsed
{
visibility: hidden;
display: none;
}
</style><script type="text/javascript">
/* http://www.kryogenix.org/code/browser/searchhi/ */
/* Modified 20021006 to fix query string parsing and add case insensitivity
*/
function highlightWord(node,word) {
// Iterate into this nodes childNodes
if (node.hasChildNodes) {
var hi_cn;
for (hi_cn=0;hi_cn<node.childNodes.length;hi_cn++) {
highlightWord(node.childNodes[hi_cn],word);
}
}

// And do this node itself
if (node.nodeType == 3) { // text node
tempNodeVal = node.nodeValue.toLowerCase();
tempWordVal = word.toLowerCase();
if (tempNodeVal.indexOf(tempWordVal) != -1) {
pn = node.parentNode;
if (pn.className != "searchword") {
// word has not already been highlighted!
nv = node.nodeValue;
ni = tempNodeVal.indexOf(tempWordVal);
// Create a load of replacement nodes
before = document.createTextNode(nv.substr(0,ni));
docWordVal = nv.substr(ni,word.length);
after = document.createTextNode(nv.substr(ni+word.length)) ;
hiwordtext = document.createTextNode(docWordVal);
hiword = document.createElement("span");
hiword.className = "searchword";
hiword.appendChild(hiwordtext);
pn.insertBefore(before,node);
pn.insertBefore(hiword,node);
pn.insertBefore(after,node);
pn.removeChild(node);
}
}
}
}

function googleSearchHighlight() {
if (!document.createElement) return;
ref = document.referrer;
if (ref.indexOf('?') == -1 ||
ref.indexOf('http://www.stevetrefethen.com/blog/') != -1)
{
if (document.location.href.indexOf('PermaLink') != -1) {
if (ref.indexOf('SearchView.aspx') == -1) return;
}
else {
//Added by Scott Hanselman
ref = document.location.href;
if (ref.indexOf('?') == -1) return;
}
}
qs = ref.substr(ref.indexOf('?')+1);
qsa = qs.split('&');
for (i=0;i<qsa.length;i++) {
qsip = qsa[i].split('=');
if (qsip.length == 1) continue;
if (qsip[0] == 'q' || qsip[0] == 'p') { // q= for Google, p= for
Yahoo
words = decodeURIComponent(qsip[1].replace(/\+/g,' ')).split(/\s+/);
for (w=0;w<words.length;w++) {
highlightWord(document.getElementsByTagName("body" )[0],words[w]);
}
}
}
}

//
// addLoadEvent()
// Adds event to window.onload without overwriting currently assigned onload
functions.
// Function found at Simon Willison's weblog - http://simon.incutio.com/
//
function addLoadEvent(func)
{
var oldonload = window.onload;
if (typeof window.onload != 'function')
{
window.onload = func;
}
else
{
window.onload = function()
{
oldonload();
func();
}
}
}

addLoadEvent(googleSearchHighlight);</script><style
type="text/css">.searchword {
background-color: yellow;
}</style>
<div id="header">
<div class="titletext" style="padding-left: 8px; padding-top: 5px;">
<a class="floatleft" href="/blog/">
<img alt="stevetrefethen.com/blog"
src="/blog/themes/SteveWhite/images/name.png" />
</a>
</div>
<div class="floatright" style="padding-right: 10px;">
<table cellpadding="0" cellspacing="0">
<tr>
<td>
<div id="searchcontrol"></div>
</td>
</tr>
</table>
</div>
<div style="clear: right"></div>
<div class="floatright" style="padding-right: 12px">
<a style="text-align: right"
href="http://feeds.stevetrefethen.com/SteveTrefethensWeblog" style="float:
left;">
<img alt="Steve's RSS Feed" style="padding-right: 5px; border:
none" src="http://www.stevetrefethen.com/blog/images/feed-button-32x32.png"
/>
</a>
<a style="text-align: right"
href="http://feeds.stevetrefethen.com/SteveTrefethensWeblog">
<img title="Subscriber count yesterday"
src="http://feeds.feedburner.com/~fc/SteveTrefethensWeblog?bg=FF9900&fg=000000& anim=0"
height="26" width="88" style="border:0" alt="Subscriber count" />
</a>
<a rel="license"
href="http://creativecommons.org/licenses/by-nc-sa/3.0/us/">
<img alt="Creative Commons License" style="border-width:0"
src="http://www.stevetrefethen.com/images/88x31.png" />
</a>
</div>
<div style="clear: both"></div>
</div>

<div class="headerlinks" style="width: 100%; text-align: center;
margin-bottom: 5px;">
<script type="text/javascript">

</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js"></script>
</div>

<div id="maincontent">
<div id="leftrightcolumncontainer">
<div id="leftcolumn">

<div class="content">
<img style="float: left; padding-right: 2px" alt="Steve
Trefethen" style="border: none" src="/images/stevetthumb.png" />
<a href="http://feeds.stevetrefethen.com/SteveTrefethensWeblog"
style="float: left;">
<img alt="Steve's RSS Feed" style="padding-right: 5px; border:
none" src="http://www.stevetrefethen.com/blog/images/rss_icon_glass32.png"
/>
</a>
<a
href="http://feeds.stevetrefethen.com/SteveTrefethensWeblog">Subscribe</a>
or <a
href="http://www.feedburner.com/fb/a/emailverifySubmit?feedId=526162">email</a>
<br />
<span style="font-size: smaller">
<a href="/blog/HowToSubscribeToMyBlog.aspx">What's this?</a>
</span>
<br />
<a href="/blog/email.aspx">Contact me</a> <a class="mailToStyle"
href="http://www.stevetrefethen.com/blog/Email.aspx"><img title="Send mail
to the author(s)" class="mailToImageStyle"
src="http://www.stevetrefethen.com/blog/images/mailTo.gif" alt="Send mail to
the author(s)" border="0" /></a>
<br />
<a href="/blog/profile.aspx?user=stref">About Me</a>
<br />
<a href="http://www.linkedin.com/in/stevetrefethen" ><img
src="http://www.stevetrefethen.com/images/btn_liprofile_blue_80x15.gif"
width="80" height="15" border="0" alt="View my LinkedIn profile"></a><br />
<br />
<a
href="http://fusion.google.com/add?feedurl=http%3A//feeds.stevetrefethen.com/stevetrefethensweblog"><img
src="http://buttons.googlesyndication.com/fusion/add.gif" width="104"
height="17" border="0" alt="Add to Google" /></a>
<br />
<a
href="http://www.bloglines.com/sub/http://feeds.stevetrefethen.com/stevetrefethensweblog">
<img src="http://www.stevetrefethen.com/images/sub_modern9.gif"
border="0" alt="Subscribe with Bloglines" />
</a>
<a
href="http://technorati.com/faves?sub=addfavbtn&add=http://www.stevetrefethen.com/blog"><img
style="border: none;"
src="http://www.stevetrefethen.com/images/tech-fav-1.png" alt="Add to
Technorati Favorites" /></a>
 <p />
<div style="text-align: center">
<script type="text/javascript">

</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js"></script>
<a
href="http://www.discountasp.net/index.aspx?refcode=SDTREF"><img
alt="Powered by discountASP.NET"
src="/images/dasp_logo_poweredby_100_30.gif" /></a><br />
<span style="font-size: smaller">referal ID: sdtref<br /><a
href="http://www.stevetrefethen.com/blog/articles.aspx?=discountasp">Why
recommend discountASP.NET?</a></span>
<p></p>

<div style="text-align: left">
<div class="sidetitle">
Archives
</div>
<div class="side">
<a href="/blog/timeline.aspx">Timeline</a> or <a
href="/blog/monthview.aspx">Calendar</a>

</div>
</div>
</div>

</div>
</div>
<div id="rightcolumn">
<div class="content">
<div class="sidetitle">
ActiveFocus by Falafel
</div>
<div style="text-align: center"><a
href="http://www.activefocus.net/" title="Falafel's ActiveFocus"><img
style="border: none"
src="http://www.stevetrefethen.com/images/falafel/af_logo.gif"
alt="ActiveFocus Project Management Solution by Falafel Software"
/></a></div>

<div class="sidetitle">
Blogroll
</div>
<div class="side">
<div class="blogRollContainerStyle"><table
class="blogRollTableStyle" border="0">
<tr>
<td class="blogRollCellStyle"><a class="blogRollXmlLinkStyle"
href="http://www.merchantcircle.com/business/BTSIV.LLC.831-438-2897/rss.xml"><img
src="http://www.stevetrefethen.com/blog/images/feedButton.gif" border="0"
/></a> <a class="blogRollLinkStyle"
href="http://www.merchantcircle.com/blogs/BTSIV.LLC.831-438-2897">Ben
Smith</a></td>
</tr><tr>
<td class="blogRollCellStyle"><a class="blogRollXmlLinkStyle"
href="http://distribucon.com/blog/Rss.aspx"><img
src="http://www.stevetrefethen.com/blog/images/feedButton.gif" border="0"
/></a> <a class="blogRollLinkStyle"
href="http://distribucon.com/blog/">Dan Miser</a></td>
</tr><tr>
<td class="blogRollCellStyle"><a class="blogRollXmlLinkStyle"
href="http://feeds.feedburner.com/LinoTadros"><img
src="http://www.stevetrefethen.com/blog/images/feedButton.gif" border="0"
/></a> <a class="blogRollLinkStyle"
href="http://www.linotadros.com/">Lino Tadros</a></td>
</tr><tr>
<td class="blogRollCellStyle"><a class="blogRollXmlLinkStyle"
href="http://feeds.feedburner.com/ScottHanselman"><img
src="http://www.stevetrefethen.com/blog/images/feedButton.gif" border="0"
/></a> <a class="blogRollLinkStyle"
href="http://www.hanselman.com/blog/">Scott Hanselman</a></td>
</tr><tr>
<td class="blogRollCellStyle"><a class="blogRollXmlLinkStyle"
href="http://feeds.feedburner.com/XavierPacheco"><img
src="http://www.stevetrefethen.com/blog/images/feedButton.gif" border="0"
/></a> <a class="blogRollLinkStyle"
href="http://www.xavierpacheco.com/">Xavier Pacheco</a></td>
</tr>
</table></div>
</div>
<div class="sidetitle">
Recent Comments
</div>
<div>
<div class="recentComments"><ul><li><div
class="recentNotSpamCommentsTitle"><a
href="http://www.stevetrefethen.com/blog/CommentView,guid,5226EB9C-33E4-4EDF-AB80-A74FF0BE226F.aspx#606d0c39-ebbc-4052-b44a-9b5833bea4df">RE:
Delphi Custom Search En...</a></div><div class="recentCommentsAuthor">by
Lars S</div></li><li><div class="recentNotCheckedCommentsTitle"><a
href="http://www.stevetrefethen.com/blog/CommentView,guid,5226EB9C-33E4-4EDF-AB80-A74FF0BE226F.aspx#44f1e3f8-5099-4303-abb5-e4f8506e15a9">RE:
Delphi Custom Search En...</a></div><div class="recentCommentsAuthor">by
Steve Trefet...</div></li><li><div class="recentNotSpamCommentsTitle"><a
href="http://www.stevetrefethen.com/blog/CommentView,guid,5226EB9C-33E4-4EDF-AB80-A74FF0BE226F.aspx#a9323ffa-dada-44e6-80fb-ba848a4783c4">RE:
Delphi Custom Search En...</a></div><div class="recentCommentsAuthor">by
Praveen</div></li><li><div class="recentNotCheckedCommentsTitle"><a
href="http://www.stevetrefethen.com/blog/CommentView,guid,8FB695F9-E57C-494F-A4AC-E7500FB581DE.aspx#f09a09b9-2235-4d86-96aa-ebd6f0c7affc">RE:
Working with new develo...</a></div><div class="recentCommentsAuthor">by
Steve Trefet...</div></li><li><div class="recentNotSpamCommentsTitle"><a
href="http://www.stevetrefethen.com/blog/CommentView,guid,8FB695F9-E57C-494F-A4AC-E7500FB581DE.aspx#a0796d54-3101-4a58-8d7f-dd6b2e9a0051">RE:
Working with new develo...</a></div><div class="recentCommentsAuthor">by Lex
Mark</div></li></ul></div>
</div>
<div class="sidetitle">
My Online Tools
</div>
<div class="side">
<a href="/delphisearch/">Delphi Search Engine</a><br />
<a href="/highlighter">Source Code Highlighter</a><br />
<a href="/wiki">Wiki</a><br />
</div>
<div class="sidetitle">
Stats
</div>
<div class="side">
<div class="blogStats">Total Posts: 346<br />This Year: 167<br
/>This Month: 8<br />This Week: 0<br />Comments: 1027<br /></div>
</div>
<div class="sidetitle">
<a
href="http://feeds.stevetrefethen.com/stevetrefethenslinkblog"><img
style="border: none" src="/blog/images/feed-icon-16x16.gif" /></a> My <a
href="http://www.stevetrefethen.com/linkblog">Linkblog</a>
</div>
<div>
<ul class="rssitems" id="linkblog"><li class="rssitem"><div
class="rsstitle"><a
href="http://feeds.stevetrefethen.com/~r/SteveTrefethensLinkBlog/~3/147602968/4486198.aspx">At
last you can turn off the USB 2.0 balloon</a></div><div
class="rssdate">Created 5 days, 22 hours ago</div></li><li
class="rssitem"><div class="rsstitle"><a
href="http://feeds.stevetrefethen.com/~r/SteveTrefethensLinkBlog/~3/146001110/preventing-not-find-schema-for-subsonic.html">Preventing
"Could not find schema..." for SubSonic in Visual Studio</a></div><div
class="rssdate">Created 1 week, 2 days ago</div></li><li
class="rssitem"><div class="rsstitle"><a
href="http://feeds.stevetrefethen.com/~r/SteveTrefethensLinkBlog/~3/145661974/adventures-installing-orcas-beta-2.aspx">Adventures
installing Orcas Beta 2</a></div><div class="rssdate">Created 1 week, 2 days
ago</div></li><li class="rssitem"><div class="rsstitle"><a
href="http://feeds.stevetrefethen.com/~r/SteveTrefethensLinkBlog/~3/143666797/ReadingToBeABetterDeveloperTheCoding4FunDevKit.asp x">Reading
to Be a Better Developer - The Coding4Fun DevKit</a></div><div
class="rssdate">Created 2 weeks, 14 hours ago</div></li><li
class="rssitem"><div class="rsstitle"><a
href="http://feeds.stevetrefethen.com/~r/SteveTrefethensLinkBlog/~3/142091049/remote-desktop-for-os-x">Remote
Desktop for OS X</a></div><div class="rssdate">Created 2 weeks, 5 days
ago</div></li></ul>
</div>

<div class="sidetitle">
Disclaimer
</div>
<div class="disclaimer">
The posts on this weblog are provided AS IS with no
warranties, and confer no rights. The opinions expressed herein are my own
personal opinions and do not represent my employers view in any way.
</div>
<script type="text/javascript">

</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js"></script>

</div>
</div>
<div id="centercolumn">
<div class="content">
<div id="search_results"></div>

<div id="_ctl8_content" class="bodyContentStyle">
<div id="_ctl8_commentViewContent">
<div class="blogdateheader"><a class="archiveLinkStyle"
href="http://www.stevetrefethen.com/blog/default,date,2007-03-19.aspx"><img
class="archiveLinkImageStyle"
src="http://www.stevetrefethen.com/blog/themes/SteveWhite/images/dayLink.gif"
border="0" /></a> Monday, March 19, 2007</div>
<a name="a10c454da-2218-46ef-a695-1870a67935fb"></a><a
href="http://www.stevetrefethen.com/blog/Delphi2007GoesGold.aspx">« Delphi
2007 goes Gold!</a> | <a
href="http://www.stevetrefethen.com/blog/default.aspx" rel="home">Main</a> |
<a
href="http://www.stevetrefethen.com/blog/AligningSizingAndSpacingCommandsInTheDelphi2007VCL Designer.aspx">Aligning,
sizing and spacing commands in... »</a>
<div class="itemBoxStyle">
<h1 class="itemTitleStyle"><a class="TitleLinkStyle" rel="bookmark"
href="http://www.stevetrefethen.com/blog/Delphi2007VCLDesignerThemeSupport.aspx">Delphi
2007 VCL Designer Theme Support</a></h1>
<div class="itemBodyStyle">
In the Delphi 2007 IDE, we enabled Windows theming which serves to upgrade
the appearance of the entire IDE leaving behind the more classic Windows
style. In fact, all new VCL applications in Delphi 2007 have themes enabled
by using the new "Enabled runtime themes" checkbox on the Applications page
of the Project Options dialog. This means you no longer have to add either
the XPMan unit to your uses clause nor drop a TXPManifest component to theme
a VCL applications.
<p>Unfortunately, theming your application isn't always a trivial task
because not all 3rd party or custom controls behave properly when themed not
to mention it can potentially really slow your application down if it wasn't
written with themes in mind. We recognize this and have built the Delphi
2007 VCL designer so that it will properly displays your controls depending
whether "Enable runtime themes" is checked for your project.</p>

<p>For example, here is a screenshot with a "Enabled runtime themes"
checked:</p>
<img src="http://www.stevetrefethen.com/images/D2007Themedsmall.jpg">
<p>
And the same application with themes disabled:</p>
<p>
<img src="http://www.stevetrefethen.com/images/D2007unthemedsmall.jpg">
</p>
<p>In addition, we've made numerous improvements to VCL to help reduce
flicker and improve performance particularly when DoubleBuffered is enabled.
Since this release is interface compatible with BDS 2006 there are
additional changes which have to that will have to wait for the next major
release.</p><p>[UPDATE: March 19, 2007] The IDE caption says "Highlander"
because this is my developer build which includes all personalities and HL
related bits.<br></p>

</div>
<div class="itemFooterStyle">
Posted at 3/19/2007 7:38AM by Steve Trefethen   <br />
<a class="commentLinkStyle"
href="http://www.stevetrefethen.com/blog/CommentView,guid,10c454da-2218-46ef-a695-1870a67935fb.aspx#commentstart">Comments
[5]</a> <a class="permalinkStyle" rel="bookmark"
href="http://www.stevetrefethen.com/blog/Delphi2007VCLDesignerThemeSupport.aspx"><img
title="Use the link of this item to make permanent references to this
entry." class="permalinkImageStyle"
src="http://www.stevetrefethen.com/blog/themes/SteveWhite/images/itemLink.gif"
alt="#" border="0" /></a> <a
href="http://www.stevetrefethen.com/blog/Delphi2007VCLDesignerThemeSupport.aspx">permalink</a><br
/>
<div class="itemTags"><a class="categoryLinkStyle" rel="tag"
href="http://www.technorati.com/tag/Delphi">Delphi</a> | <a
class="categoryLinkStyle" rel="tag"
href="http://www.technorati.com/tag/VCL">VCL</a></div><br />

<div class="feedflare">
<script
src="http://feeds.feedburner.com/~s/SteveTrefethensWeblog?i=http://www.stevetrefethen.com/blog/Delphi2007VCLDesignerThemeSupport.aspx"
type="text/javascript">
</script>
</div>
</div>
</div><a name="commentstart"></a><div class="commentBoxStyle"><div
class="commentDateStyle"><a
name="6d4c16d6-22c0-48cf-8c20-4613da1af02b"></a>Monday, March 19, 2007
7:29:13 AM (Pacific Standard Time, UTC-08:00)</div><div
class="commentBodyStyle">How do you enable doublebuffered? Is it a setting
in the options dialog or something you have to add to your code?</div><div
class="commentBoxFooterStyle"><span
class="commentPermalinkStyle">Tony</span></div></div><div
class="commentBoxStyle commentBoxAuthorStyle"><div
class="commentDateStyle"><a
name="6d21c909-1311-4fd6-b63b-307e7e7b2680"></a>Monday, March 19, 2007
8:02:35 AM (Pacific Standard Time, UTC-08:00)</div><div
class="commentBodyStyle commentBodyAuthorStyle">Tony,<br />DoubleBuffered is
a property on TWinControl that's not (currently) published. I've written a
few other posts that mention it which you can find by searching for
"DoubleBuffered" from the search box on the top right corner of my
blog.</div><div class="commentBoxFooterStyle"><a
class="commentPermalinkStyle" rel="nofollow"
href="http://www.stevetrefethen.com/blog">Steve
Trefethen</a></div></div><div class="commentBoxStyle"><div
class="commentDateStyle"><a
name="e457d52a-a4ab-442e-9cb9-dd8b402bca5b"></a>Monday, March 19, 2007
11:01:54 AM (Pacific Standard Time, UTC-08:00)</div><div
class="commentBodyStyle">How does 'Enable runtime themes' differ from using
the TXPManifest component?<br /><br />Does this strictly deal with controls,
or does it impact how windows themselves are rendered?<br /><br />Right now
I use (almost exclusively) DevExpress controls with theme support turned on.
I'm wondering what impact 'Enable runtime themes' will have (if any) on my
applications?<br /></div><div class="commentBoxFooterStyle"><span
class="commentPermalinkStyle">Bruce</span></div></div><div
class="commentBoxStyle commentBoxAuthorStyle"><div
class="commentDateStyle"><a
name="4ef1c78e-3a57-4c19-b526-a5c0241acad2"></a>Monday, March 19, 2007
12:15:48 PM (Pacific Standard Time, UTC-08:00)</div><div
class="commentBodyStyle commentBodyAuthorStyle">Bruce,<br /> I'm working on
a post which provides some more explanation but basically it's no different
from using TXPManifest or including XPMan in your application though we're
likely to deprecate both the component and that unit in the
future.</div><div class="commentBoxFooterStyle"><a
class="commentPermalinkStyle" rel="nofollow"
href="http://www.stevetrefethen.com/blog">Steve
Trefethen</a></div></div><div class="commentBoxStyle"><div
class="commentDateStyle"><a
name="fd902a33-7444-4b0a-9965-3280bc76d998"></a>Sunday, May 20, 2007 6:45:18
PM (Pacific Standard Time, UTC-08:00)</div><div
class="commentBodyStyle">Hi,<br /><br />I was wondering how to enable
"Theme Support" for application compiled by DCC32 ?</div><div
class="commentBoxFooterStyle"><span
class="commentPermalinkStyle">BC</span></div></div></div>
<div id="commentViewEntry" class="commentViewBoxStyle">
<span id="_ctl8_commentsClosed" style="TEXT-ALIGN: center">
<span id="_ctl8_labelCommentsClosed"
class="commentViewLabelStyle">Comments are closed.</span>
</span>

</div>
</div>


<div style="text-align: left; margin-top: 5px; margin-bottom:
10px;">
<script type="text/javascript">
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js"></script>
</div>
</div>
</div>
<div style="clear: both"></div>
</div>
</div>
<div id="footer">
Copyright © 2006-2007 Steve Trefethen. Some
rights reserved.
<div id="versioninfo">
Except where otherwise noted, content on this <span
xmlns:dc="http://purl.org/dc/elements/1.1/"
href="http://purl.org/dc/dcmitype/Text" rel="dc:type">work</span> is
licensed under a
<a rel="license"
href="http://creativecommons.org/licenses/by-nc-sa/3.0/us/">Creative Commons
Attribution-Noncommercial-Share Alike 3.0 United States License</a>.<br />
Powered by dasBlog version: newtelligence dasBlog 2.0.7226.0<br />
Theme designed by <a href="/blog/">Steve Trefethen</a>.
Page rendered at
 Monday, August 27, 2007 8:09:28 AM (Pacific Standard Time,
UTC-08:00)
</div>
</div>
<script src="http://www.google-analytics.com/urchin.js"
type="text/javascript">
</script>
<script type="text/javascript">
_uacct = "UA-799410-1";
urchinTracker();
</script>

<input type="hidden" name="__EVENTVALIDATION" id="__EVENTVALIDATION"
value="/wEWNwKQtfHUCwL4w/WLDwKFrvHYDgK96qzIDwK96pijBwK96pijBwK96sTLBQK96sTL BQK96rCvDQKSwcI3ApLBrusJApLBms4CApLBhqEKApLBhqEKAp LB8oQDApLB3v8MApLB3v8MApLBytIFApLBtrYNApLB4t4LApLB zrEDAqergvYJAqergvYJAqer7qkBAqer7qkBAqer2owKAqerxu cDAqerxucDAqerstsMAqerstsMAqernr4EAqeripENAqer9vQG Aqerop0DAqerjvAMApyCoNkPApyCjLwHApyCjLwHApyC+BcCnI LkygkCnILQrQECnILQrQECnIK8gQoCnIKo5AMCnIKU3wwCnILA 5wkCnIKs2wIC3+GtrAcC3+GZBwLf4YX6CQLf4fHdAgLf4d2wCg Lf4cnrAwLf4bXPDALf4aGiBA=="
/></form></body>
</html>

^^^ yup common these days, sigh, good luck figuring that **** out

Link:

http://www.stevetrefethen.com/blog/D...meSupport.aspx

Bye,
Skybuck.

08-27-2007

what is PROCESS_NAME: bds.exe

"Skybuck Flying" <> wrote in message
news:faumd8$2ae$...
>I am definetly no expert...
>
> Seems like something did a try except where that is not allowed, also
> seems resource related ????:
>
> Microsoft (R) Windows Debugger Version 6.6.0007.5
> Copyright (c) Microsoft Corporation. All rights reserved.
>
>
> Loading Dump File [C:\WINDOWS\Minidump\Mini082707-01.dmp]
> Mini Kernel Dump File: Only registers and stack trace are available
>
> Symbol search path is:
> SRV*c:\Tools\WinDbg\WebSymbols*http://msdl.microsoft.com/download/symbols
> Executable search path is:
> Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs) Free
> x64
> Product: WinNt, suite: TerminalServer SingleUserTS
> Built by: 3790.srv03_sp2_rtm.070216-1710
> Kernel base = 0xfffff800`01000000 PsLoadedModuleList = 0xfffff800`011d5100
> Debug session time: Mon Aug 27 15:17:04.640 2007 (GMT+2)
> System Uptime: 0 days 0:27:21.571
> Loading Kernel Symbols
> .................................................. .................................................. .......................................
> Loading User Symbols
> Loading unloaded module list
> ..................................................
> ************************************************** *****************************
> * *
> * Bugcheck Analysis *
> * *
> ************************************************** *****************************
>
> Use !analyze -v to get detailed debugging information.
>
> BugCheck 50, {fffffa8804c21090, 0, fffff97fff0a7742, 5}
>
>
> Could not read faulting driver name
> Probably caused by : win32k.sys ( win32k!HmgAllocateDcAttr+1b6 )
>
> Followup: MachineOwner
> ---------
>
> 1: kd> !analyze -v
> ************************************************** *****************************
> * *
> * Bugcheck Analysis *
> * *
> ************************************************** *****************************
>
> PAGE_FAULT_IN_NONPAGED_AREA (50)
> Invalid system memory was referenced. This cannot be protected by
> try-except,
> it must be protected by a Probe. Typically the address is just plain bad
> or it
> is pointing at freed memory.
> Arguments:
> Arg1: fffffa8804c21090, memory referenced.
> Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
> Arg3: fffff97fff0a7742, If non-zero, the instruction address which
> referenced the bad memory
> address.
> Arg4: 0000000000000005, (reserved)
>
> Debugging Details:
> ------------------
>
>
> Could not read faulting driver name
>
> READ_ADDRESS: fffffa8804c21090
>
> FAULTING_IP:
> win32k!HmgAllocateDcAttr+1b6
> fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]
>
> MM_INTERNAL_CODE: 5
>
> CUSTOMER_CRASH_COUNT: 1
>
> DEFAULT_BUCKET_ID: DRIVER_FAULT
>
> BUGCHECK_STR: 0x50
>
> PROCESS_NAME: bds.exe
>
> CURRENT_IRQL: 0
>
> TRAP_FRAME: fffffadfc478e990 -- (.trap fffffadfc478e990)
> NOTE: The trap frame does not contain all registers.
> Some register values may be zeroed.
> rax=00000000ffffffff rbx=0000000000000888 rcx=fffffa8004c21080
> rdx=fffffa8004c21080 rsi=fffffa80051f6280 rdi=fffff97fff0cda0e
> rip=fffff97fff0a7742 rsp=fffffadfc478eb20 rbp=fffffadfc478ecf0
> r8=fffffa8004b9b0c0 r9=5000984210000000 r10=500098421117001d
> r11=00000000000007ff r12=0000000000000000 r13=0000000000000000
> r14=0000000000000000 r15=0000000000000000
> iopl=0 nv up ei ng nz ac po nc
> win32k!HmgAllocateDcAttr+0x1b6:
> fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]
> ds:fffffa88`04c21090=????????????????
> Resetting default scope
>
> LAST_CONTROL_TRANSFER: from fffff800010a5416 to fffff8000102e950
>
> STACK_TEXT:
> fffffadf`c478e8b8 fffff800`010a5416 : 00000000`00000050 fffffa88`04c21090
> 00000000`00000000 fffffadf`c478e990 : nt!KeBugCheckEx
> fffffadf`c478e8c0 fffff800`0102d519 : fffffa80`00cad9e0 00000000`00000009
> 00000000`00000000 fffffa80`05009b50 : nt!MmAccessFault+0x395
> fffffadf`c478e990 fffff97f`ff0a7742 : 00000000`00000000 fffff97f`ff0ce249
> fffffa80`0445f780 fffffadf`c478ecf0 : nt!KiPageFault+0x119
> fffffadf`c478eb20 fffff97f`ff0ce004 : 00000000`00000888 00000000`00000000
> 00000000`1e011591 fffffa80`051f6280 : win32k!HmgAllocateDcAttr+0x1b6
> fffffadf`c478eb60 fffff97f`ff0cdf0e : fffffa80`051f6280 fffffa80`051f6280
> fffffadf`cba85cd0 fffffa80`0133b000 : win32k!GreSetupDCAttributes+0x34
> fffffadf`c478eba0 fffff97f`ff0a36c6 : fffffa80`01351010 fffff97f`ff0ced20
> 00000000`00000000 00000000`7efdb000 : win32k!GreCreateDisplayDC+0x1c4
> fffffadf`c478ec30 fffff800`0102e3fd : 00000000`7d814cc6 fffff97f`ff0ced20
> 00000000`7d814cc6 00000000`7d814c30 : win32k!GreCreateCompatibleDC+0x77
> fffffadf`c478ec70 00000000`78b842d9 : 00000000`00000000 00000000`00000000
> 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x3
> 00000000`0012edf8 00000000`00000000 : 00000000`00000000 00000000`00000000
> 00000000`00000000 00000000`00000000 : 0x78b842d9
>
>
> STACK_COMMAND: kb
>
> FOLLOWUP_IP:
> win32k!HmgAllocateDcAttr+1b6
> fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]
>
> SYMBOL_STACK_INDEX: 3
>
> SYMBOL_NAME: win32k!HmgAllocateDcAttr+1b6
>
> FOLLOWUP_NAME: MachineOwner
>
> MODULE_NAME: win32k
>
> IMAGE_NAME: win32k.sys
>
> DEBUG_FLR_IMAGE_TIMESTAMP: 45e6f310
>
> FAILURE_BUCKET_ID: X64_0x50_win32k!HmgAllocateDcAttr+1b6
>
> BUCKET_ID: X64_0x50_win32k!HmgAllocateDcAttr+1b6
>
> Followup: MachineOwner
> ---------
>
> Bye,
> Skybuck.
>
> P.S.: I followed instructions on this link to setup WinDBG properly for
> symbol support

>
> http://forums.majorgeeks.com/showthread.php?t=35246
>
> Simply add something like:
>
> SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
>
> to symbol path.
>
> Then symbols will be downloaded...
>
> (I set mine to C:\Tools\WinDBG\WebSymbols

)
>
>
>

08-27-2007

File purpose and description:
Bds.exe is a program file which you would have installed
yourself on your own computer. The exact disk location is
also shown below to verfiy it is not spyware, as many
spyware programs use similiar names and just locate them
elsewhere on your hard drive. Always check the proper disk
location of your programs if you are suspicious. Bds.exe is
a common name, short names like this can often be used by
many companies, this one is most often associated with
Borland Software (not Codegear software) and the Delphi
installation. The BDS.exe is for the Borland Database Engine
(as it used to be called), and this will be a running task
if you install Delphi software. This file is considered safe
and is not spyware. (See the details below for the actual
location of this file.)

Actual file or task name:
bds.exe

File type:
This is an executable program.

File or folder location:
This file will be found on your disk drive at C:\Documents
and Settings\All Users\Application
Data\{AB3EC276-D261-4943-A921-1CC1C6799AED}\corex\B2284239\1CC39CF2
and also at C:\Program Files\CodeGear\RAD Studio\5.0\bin

General information:
Be aware that many tasks will be similiar names to existing
tasks or processes. You can always view the running tasks on
your computer by pressing ctrl-alt-del to view the windows
"task manager", and then view the "processes" tab. This will
show you all tasks running or currently active on your PC.
Although this shows you all running tasks, it does not show
dll file thats are loaded, as they get loaded as part of
other processes. Many spyware writers attempt to hide their
files on your computer, for example, bds.exe may be
intentionally misspelled to look like a similiar task, or
spyware may be named very similiar to a Windows system task.
The reason they do this is so you cannot easily recognize
the name in your tasklist as I have mentioned above. Make
sure always check the location of the file if you are
concerned. You can always find the location of bds.exe on
your computer by using your Windows search options, but I
will also try to list the file location of every file
described on this website, so you can verify the correct
location. You can view the entire tasklist directory with
the link below.

Tasklist Directory Main Page
Software Downloads Page
Spyware and Adware Removal Tips

Lookup other processes below.
icq.exe icqlite.exe ie4uinit.exe iedkcs32.dll ieexplorer.exe
iegr32.exe iehelper.dll iehost.exe iel2cde8.dll iesdpb.dll
iesdsg.dll ietie.dll ieudinit.exe iexplore.exe iexplores.exe
ifrmewrk.exe igdctrl.exe igfxpers igfxtray.exe igowdkka.dll
ikeymain.exe imekrmig.exe imjpmig.exe imscinst.exe incd.exe
incdsrv.exe incmail.exe indexsearch.exe inicio.exe
inkmonitor.exe
intel32.exe intelmem.exe internat.exe intmonp.exe
iopengl.exe
iphsend.exe ipmon32.exe ipodwatcher.exe ipv6monl.dll
isadd.dll
isaddon.dll isamntr.exe isamonitor.exe issch.exe isstart.exe
isuspm.exe itouch.exe ituneshelper.exe jaaste.dll jawa32.exe

Paul Russell wrote:
> what is PROCESS_NAME: bds.exe
>
>
> "Skybuck Flying" <> wrote in message
> news:faumd8$2ae$...
>> I am definetly no expert...
>>
>> Seems like something did a try except where that is not allowed, also
>> seems resource related ????:
>>
>> Microsoft (R) Windows Debugger Version 6.6.0007.5
>> Copyright (c) Microsoft Corporation. All rights reserved.
>>
>>
>> Loading Dump File [C:\WINDOWS\Minidump\Mini082707-01.dmp]
>> Mini Kernel Dump File: Only registers and stack trace are available
>>
>> Symbol search path is:
>> SRV*c:\Tools\WinDbg\WebSymbols*http://msdl.microsoft.com/download/symbols
>> Executable search path is:
>> Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs)
>> Free x64
>> Product: WinNt, suite: TerminalServer SingleUserTS
>> Built by: 3790.srv03_sp2_rtm.070216-1710
>> Kernel base = 0xfffff800`01000000 PsLoadedModuleList =
>> 0xfffff800`011d5100
>> Debug session time: Mon Aug 27 15:17:04.640 2007 (GMT+2)
>> System Uptime: 0 days 0:27:21.571
>> Loading Kernel Symbols
>> .................................................. .................................................. .......................................
>>
>> Loading User Symbols
>> Loading unloaded module list
>> ..................................................
>> ************************************************** *****************************
>>
>> * *
>> * Bugcheck Analysis *
>> * *
>> ************************************************** *****************************
>>
>>
>> Use !analyze -v to get detailed debugging information.
>>
>> BugCheck 50, {fffffa8804c21090, 0, fffff97fff0a7742, 5}
>>
>>
>> Could not read faulting driver name
>> Probably caused by : win32k.sys ( win32k!HmgAllocateDcAttr+1b6 )
>>
>> Followup: MachineOwner
>> ---------
>>
>> 1: kd> !analyze -v
>> ************************************************** *****************************
>>
>> * *
>> * Bugcheck Analysis *
>> * *
>> ************************************************** *****************************
>>
>>
>> PAGE_FAULT_IN_NONPAGED_AREA (50)
>> Invalid system memory was referenced. This cannot be protected by
>> try-except,
>> it must be protected by a Probe. Typically the address is just plain
>> bad or it
>> is pointing at freed memory.
>> Arguments:
>> Arg1: fffffa8804c21090, memory referenced.
>> Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
>> Arg3: fffff97fff0a7742, If non-zero, the instruction address which
>> referenced the bad memory
>> address.
>> Arg4: 0000000000000005, (reserved)
>>
>> Debugging Details:
>> ------------------
>>
>>
>> Could not read faulting driver name
>>
>> READ_ADDRESS: fffffa8804c21090
>>
>> FAULTING_IP:
>> win32k!HmgAllocateDcAttr+1b6
>> fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]
>>
>> MM_INTERNAL_CODE: 5
>>
>> CUSTOMER_CRASH_COUNT: 1
>>
>> DEFAULT_BUCKET_ID: DRIVER_FAULT
>>
>> BUGCHECK_STR: 0x50
>>
>> PROCESS_NAME: bds.exe
>>
>> CURRENT_IRQL: 0
>>
>> TRAP_FRAME: fffffadfc478e990 -- (.trap fffffadfc478e990)
>> NOTE: The trap frame does not contain all registers.
>> Some register values may be zeroed.
>> rax=00000000ffffffff rbx=0000000000000888 rcx=fffffa8004c21080
>> rdx=fffffa8004c21080 rsi=fffffa80051f6280 rdi=fffff97fff0cda0e
>> rip=fffff97fff0a7742 rsp=fffffadfc478eb20 rbp=fffffadfc478ecf0
>> r8=fffffa8004b9b0c0 r9=5000984210000000 r10=500098421117001d
>> r11=00000000000007ff r12=0000000000000000 r13=0000000000000000
>> r14=0000000000000000 r15=0000000000000000
>> iopl=0 nv up ei ng nz ac po nc
>> win32k!HmgAllocateDcAttr+0x1b6:
>> fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr
>> [rcx+rax*8+18h] ds:fffffa88`04c21090=????????????????
>> Resetting default scope
>>
>> LAST_CONTROL_TRANSFER: from fffff800010a5416 to fffff8000102e950
>>
>> STACK_TEXT:
>> fffffadf`c478e8b8 fffff800`010a5416 : 00000000`00000050
>> fffffa88`04c21090 00000000`00000000 fffffadf`c478e990 : nt!KeBugCheckEx
>> fffffadf`c478e8c0 fffff800`0102d519 : fffffa80`00cad9e0
>> 00000000`00000009 00000000`00000000 fffffa80`05009b50 :
>> nt!MmAccessFault+0x395
>> fffffadf`c478e990 fffff97f`ff0a7742 : 00000000`00000000
>> fffff97f`ff0ce249 fffffa80`0445f780 fffffadf`c478ecf0 :
>> nt!KiPageFault+0x119
>> fffffadf`c478eb20 fffff97f`ff0ce004 : 00000000`00000888
>> 00000000`00000000 00000000`1e011591 fffffa80`051f6280 :
>> win32k!HmgAllocateDcAttr+0x1b6
>> fffffadf`c478eb60 fffff97f`ff0cdf0e : fffffa80`051f6280
>> fffffa80`051f6280 fffffadf`cba85cd0 fffffa80`0133b000 :
>> win32k!GreSetupDCAttributes+0x34
>> fffffadf`c478eba0 fffff97f`ff0a36c6 : fffffa80`01351010
>> fffff97f`ff0ced20 00000000`00000000 00000000`7efdb000 :
>> win32k!GreCreateDisplayDC+0x1c4
>> fffffadf`c478ec30 fffff800`0102e3fd : 00000000`7d814cc6
>> fffff97f`ff0ced20 00000000`7d814cc6 00000000`7d814c30 :
>> win32k!GreCreateCompatibleDC+0x77
>> fffffadf`c478ec70 00000000`78b842d9 : 00000000`00000000
>> 00000000`00000000 00000000`00000000 00000000`00000000 :
>> nt!KiSystemServiceCopyEnd+0x3
>> 00000000`0012edf8 00000000`00000000 : 00000000`00000000
>> 00000000`00000000 00000000`00000000 00000000`00000000 : 0x78b842d9
>>
>>
>> STACK_COMMAND: kb
>>
>> FOLLOWUP_IP:
>> win32k!HmgAllocateDcAttr+1b6
>> fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]
>>
>> SYMBOL_STACK_INDEX: 3
>>
>> SYMBOL_NAME: win32k!HmgAllocateDcAttr+1b6
>>
>> FOLLOWUP_NAME: MachineOwner
>>
>> MODULE_NAME: win32k
>>
>> IMAGE_NAME: win32k.sys
>>
>> DEBUG_FLR_IMAGE_TIMESTAMP: 45e6f310
>>
>> FAILURE_BUCKET_ID: X64_0x50_win32k!HmgAllocateDcAttr+1b6
>>
>> BUCKET_ID: X64_0x50_win32k!HmgAllocateDcAttr+1b6
>>
>> Followup: MachineOwner
>> ---------
>>
>> Bye,
>> Skybuck.
>>
>> P.S.: I followed instructions on this link to setup WinDBG properly
>> for symbol support

>>
>> http://forums.majorgeeks.com/showthread.php?t=35246
>>
>> Simply add something like:
>>
>> SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
>>
>> to symbol path.
>>
>> Then symbols will be downloaded...
>>
>> (I set mine to C:\Tools\WinDBG\WebSymbols

)
>>
>>
>>
>

08-28-2007

Hi,

It's Delphi 2007 from the file's description:

"CodeGear RAD Studio for Windows"

BDS.EXE is what I believe is the Delphi 2007 IDE.

Integrated Development Environment for Rapid Application Development for
Windows.

So far no more crashes, play with it a bit more...

Bye,
Skybuck.

"Paul Russell" <> wrote in message
news:4A21A8D0-6A4C-42DF-A0DF-...
> what is PROCESS_NAME: bds.exe
>
>
> "Skybuck Flying" <> wrote in message
> news:faumd8$2ae$...
>>I am definetly no expert...
>>
>> Seems like something did a try except where that is not allowed, also
>> seems resource related ????:
>>
>> Microsoft (R) Windows Debugger Version 6.6.0007.5
>> Copyright (c) Microsoft Corporation. All rights reserved.
>>
>>
>> Loading Dump File [C:\WINDOWS\Minidump\Mini082707-01.dmp]
>> Mini Kernel Dump File: Only registers and stack trace are available
>>
>> Symbol search path is:
>> SRV*c:\Tools\WinDbg\WebSymbols*http://msdl.microsoft.com/download/symbols
>> Executable search path is:
>> Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs)
>> Free x64
>> Product: WinNt, suite: TerminalServer SingleUserTS
>> Built by: 3790.srv03_sp2_rtm.070216-1710
>> Kernel base = 0xfffff800`01000000 PsLoadedModuleList =
>> 0xfffff800`011d5100
>> Debug session time: Mon Aug 27 15:17:04.640 2007 (GMT+2)
>> System Uptime: 0 days 0:27:21.571
>> Loading Kernel Symbols
>> .................................................. .................................................. .......................................
>> Loading User Symbols
>> Loading unloaded module list
>> ..................................................
>> ************************************************** *****************************
>> * *
>> * Bugcheck Analysis *
>> * *
>> ************************************************** *****************************
>>
>> Use !analyze -v to get detailed debugging information.
>>
>> BugCheck 50, {fffffa8804c21090, 0, fffff97fff0a7742, 5}
>>
>>
>> Could not read faulting driver name
>> Probably caused by : win32k.sys ( win32k!HmgAllocateDcAttr+1b6 )
>>
>> Followup: MachineOwner
>> ---------
>>
>> 1: kd> !analyze -v
>> ************************************************** *****************************
>> * *
>> * Bugcheck Analysis *
>> * *
>> ************************************************** *****************************
>>
>> PAGE_FAULT_IN_NONPAGED_AREA (50)
>> Invalid system memory was referenced. This cannot be protected by
>> try-except,
>> it must be protected by a Probe. Typically the address is just plain bad
>> or it
>> is pointing at freed memory.
>> Arguments:
>> Arg1: fffffa8804c21090, memory referenced.
>> Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
>> Arg3: fffff97fff0a7742, If non-zero, the instruction address which
>> referenced the bad memory
>> address.
>> Arg4: 0000000000000005, (reserved)
>>
>> Debugging Details:
>> ------------------
>>
>>
>> Could not read faulting driver name
>>
>> READ_ADDRESS: fffffa8804c21090
>>
>> FAULTING_IP:
>> win32k!HmgAllocateDcAttr+1b6
>> fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]
>>
>> MM_INTERNAL_CODE: 5
>>
>> CUSTOMER_CRASH_COUNT: 1
>>
>> DEFAULT_BUCKET_ID: DRIVER_FAULT
>>
>> BUGCHECK_STR: 0x50
>>
>> PROCESS_NAME: bds.exe
>>
>> CURRENT_IRQL: 0
>>
>> TRAP_FRAME: fffffadfc478e990 -- (.trap fffffadfc478e990)
>> NOTE: The trap frame does not contain all registers.
>> Some register values may be zeroed.
>> rax=00000000ffffffff rbx=0000000000000888 rcx=fffffa8004c21080
>> rdx=fffffa8004c21080 rsi=fffffa80051f6280 rdi=fffff97fff0cda0e
>> rip=fffff97fff0a7742 rsp=fffffadfc478eb20 rbp=fffffadfc478ecf0
>> r8=fffffa8004b9b0c0 r9=5000984210000000 r10=500098421117001d
>> r11=00000000000007ff r12=0000000000000000 r13=0000000000000000
>> r14=0000000000000000 r15=0000000000000000
>> iopl=0 nv up ei ng nz ac po nc
>> win32k!HmgAllocateDcAttr+0x1b6:
>> fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]
>> ds:fffffa88`04c21090=????????????????
>> Resetting default scope
>>
>> LAST_CONTROL_TRANSFER: from fffff800010a5416 to fffff8000102e950
>>
>> STACK_TEXT:
>> fffffadf`c478e8b8 fffff800`010a5416 : 00000000`00000050 fffffa88`04c21090
>> 00000000`00000000 fffffadf`c478e990 : nt!KeBugCheckEx
>> fffffadf`c478e8c0 fffff800`0102d519 : fffffa80`00cad9e0 00000000`00000009
>> 00000000`00000000 fffffa80`05009b50 : nt!MmAccessFault+0x395
>> fffffadf`c478e990 fffff97f`ff0a7742 : 00000000`00000000 fffff97f`ff0ce249
>> fffffa80`0445f780 fffffadf`c478ecf0 : nt!KiPageFault+0x119
>> fffffadf`c478eb20 fffff97f`ff0ce004 : 00000000`00000888 00000000`00000000
>> 00000000`1e011591 fffffa80`051f6280 : win32k!HmgAllocateDcAttr+0x1b6
>> fffffadf`c478eb60 fffff97f`ff0cdf0e : fffffa80`051f6280 fffffa80`051f6280
>> fffffadf`cba85cd0 fffffa80`0133b000 : win32k!GreSetupDCAttributes+0x34
>> fffffadf`c478eba0 fffff97f`ff0a36c6 : fffffa80`01351010 fffff97f`ff0ced20
>> 00000000`00000000 00000000`7efdb000 : win32k!GreCreateDisplayDC+0x1c4
>> fffffadf`c478ec30 fffff800`0102e3fd : 00000000`7d814cc6 fffff97f`ff0ced20
>> 00000000`7d814cc6 00000000`7d814c30 : win32k!GreCreateCompatibleDC+0x77
>> fffffadf`c478ec70 00000000`78b842d9 : 00000000`00000000 00000000`00000000
>> 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x3
>> 00000000`0012edf8 00000000`00000000 : 00000000`00000000 00000000`00000000
>> 00000000`00000000 00000000`00000000 : 0x78b842d9
>>
>>
>> STACK_COMMAND: kb
>>
>> FOLLOWUP_IP:
>> win32k!HmgAllocateDcAttr+1b6
>> fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]
>>
>> SYMBOL_STACK_INDEX: 3
>>
>> SYMBOL_NAME: win32k!HmgAllocateDcAttr+1b6
>>
>> FOLLOWUP_NAME: MachineOwner
>>
>> MODULE_NAME: win32k
>>
>> IMAGE_NAME: win32k.sys
>>
>> DEBUG_FLR_IMAGE_TIMESTAMP: 45e6f310
>>
>> FAILURE_BUCKET_ID: X64_0x50_win32k!HmgAllocateDcAttr+1b6
>>
>> BUCKET_ID: X64_0x50_win32k!HmgAllocateDcAttr+1b6
>>
>> Followup: MachineOwner
>> ---------
>>
>> Bye,
>> Skybuck.
>>
>> P.S.: I followed instructions on this link to setup WinDBG properly for
>> symbol support

>>
>> http://forums.majorgeeks.com/showthread.php?t=35246
>>
>> Simply add something like:
>>
>> SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
>>
>> to symbol path.
>>
>> Then symbols will be downloaded...
>>
>> (I set mine to C:\Tools\WinDBG\WebSymbols

)
>>
>>
>>
>

08-28-2007

I dunno. . .I notice this: PAGE_FAULT_IN_NONPAGED_AREA

perhaps you should read this article here:

http://www.osronline.com/article.cfm?id=335

it is (may be?) helpfull in many ways.

This amount of errors and warnings actually tells me there is one error that
is triggering most of all the rest. Otherwise that machine would NEVER have
booted. I think you have a bad installation of something or other, if the
'dumps' isn't teaching you anything, I would start un-installing things -
one at a time, until you find. . .whatever. I think that is much faster -
memory dumps are specialist info of the most extreme kind, most of us
ordinary mortals fall asleep while trying to read them. Things that are
listed by name, isn't automatically where the trouble is located, that is
just where the system finds the error or where the error surfaces, it may
well be happening somewhere else entirely - in fact, the more errors you
have, the less is the chance of the origin being named there.

Tony. . .

"Skybuck Flying" <> wrote in message
news:faumd8$2ae$...
> I am definetly no expert...
>
> Seems like something did a try except where that is not allowed, also
seems
> resource related ????:
>
> Microsoft (R) Windows Debugger Version 6.6.0007.5
> Copyright (c) Microsoft Corporation. All rights reserved.
>
>
> Loading Dump File [C:\WINDOWS\Minidump\Mini082707-01.dmp]
> Mini Kernel Dump File: Only registers and stack trace are available
>
> Symbol search path is:
> SRV*c:\Tools\WinDbg\WebSymbols*http://msdl.microsoft.com/download/symbols
> Executable search path is:
> Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs) Free
> x64
> Product: WinNt, suite: TerminalServer SingleUserTS
> Built by: 3790.srv03_sp2_rtm.070216-1710
> Kernel base = 0xfffff800`01000000 PsLoadedModuleList = 0xfffff800`011d5100
> Debug session time: Mon Aug 27 15:17:04.640 2007 (GMT+2)
> System Uptime: 0 days 0:27:21.571
> Loading Kernel Symbols
>
.................................................. ...........................
.................................................. ..............
> Loading User Symbols
> Loading unloaded module list
> ..................................................
>
************************************************** **************************
***
> *
> *
> * Bugcheck Analysis
> *
> *
> *
>
************************************************** **************************
***
>
> Use !analyze -v to get detailed debugging information.
>
> BugCheck 50, {fffffa8804c21090, 0, fffff97fff0a7742, 5}
>
>
> Could not read faulting driver name
> Probably caused by : win32k.sys ( win32k!HmgAllocateDcAttr+1b6 )
>
> Followup: MachineOwner
> ---------
>
> 1: kd> !analyze -v
>
************************************************** **************************
***
> *
> *
> * Bugcheck Analysis
> *
> *
> *
>
************************************************** **************************
***
>
> PAGE_FAULT_IN_NONPAGED_AREA (50)
> Invalid system memory was referenced. This cannot be protected by
> try-except,
> it must be protected by a Probe. Typically the address is just plain bad
or
> it
> is pointing at freed memory.
> Arguments:
> Arg1: fffffa8804c21090, memory referenced.
> Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
> Arg3: fffff97fff0a7742, If non-zero, the instruction address which
> referenced the bad memory
> address.
> Arg4: 0000000000000005, (reserved)
>
> Debugging Details:
> ------------------
>
>
> Could not read faulting driver name
>
> READ_ADDRESS: fffffa8804c21090
>
> FAULTING_IP:
> win32k!HmgAllocateDcAttr+1b6
> fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]
>
> MM_INTERNAL_CODE: 5
>
> CUSTOMER_CRASH_COUNT: 1
>
> DEFAULT_BUCKET_ID: DRIVER_FAULT
>
> BUGCHECK_STR: 0x50
>
> PROCESS_NAME: bds.exe
>
> CURRENT_IRQL: 0
>
> TRAP_FRAME: fffffadfc478e990 -- (.trap fffffadfc478e990)
> NOTE: The trap frame does not contain all registers.
> Some register values may be zeroed.
> rax=00000000ffffffff rbx=0000000000000888 rcx=fffffa8004c21080
> rdx=fffffa8004c21080 rsi=fffffa80051f6280 rdi=fffff97fff0cda0e
> rip=fffff97fff0a7742 rsp=fffffadfc478eb20 rbp=fffffadfc478ecf0
> r8=fffffa8004b9b0c0 r9=5000984210000000 r10=500098421117001d
> r11=00000000000007ff r12=0000000000000000 r13=0000000000000000
> r14=0000000000000000 r15=0000000000000000
> iopl=0 nv up ei ng nz ac po nc
> win32k!HmgAllocateDcAttr+0x1b6:
> fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]
> ds:fffffa88`04c21090=????????????????
> Resetting default scope
>
> LAST_CONTROL_TRANSFER: from fffff800010a5416 to fffff8000102e950
>
> STACK_TEXT:
> fffffadf`c478e8b8 fffff800`010a5416 : 00000000`00000050 fffffa88`04c21090
> 00000000`00000000 fffffadf`c478e990 : nt!KeBugCheckEx
> fffffadf`c478e8c0 fffff800`0102d519 : fffffa80`00cad9e0 00000000`00000009
> 00000000`00000000 fffffa80`05009b50 : nt!MmAccessFault+0x395
> fffffadf`c478e990 fffff97f`ff0a7742 : 00000000`00000000 fffff97f`ff0ce249
> fffffa80`0445f780 fffffadf`c478ecf0 : nt!KiPageFault+0x119
> fffffadf`c478eb20 fffff97f`ff0ce004 : 00000000`00000888 00000000`00000000
> 00000000`1e011591 fffffa80`051f6280 : win32k!HmgAllocateDcAttr+0x1b6
> fffffadf`c478eb60 fffff97f`ff0cdf0e : fffffa80`051f6280 fffffa80`051f6280
> fffffadf`cba85cd0 fffffa80`0133b000 : win32k!GreSetupDCAttributes+0x34
> fffffadf`c478eba0 fffff97f`ff0a36c6 : fffffa80`01351010 fffff97f`ff0ced20
> 00000000`00000000 00000000`7efdb000 : win32k!GreCreateDisplayDC+0x1c4
> fffffadf`c478ec30 fffff800`0102e3fd : 00000000`7d814cc6 fffff97f`ff0ced20
> 00000000`7d814cc6 00000000`7d814c30 : win32k!GreCreateCompatibleDC+0x77
> fffffadf`c478ec70 00000000`78b842d9 : 00000000`00000000 00000000`00000000
> 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x3
> 00000000`0012edf8 00000000`00000000 : 00000000`00000000 00000000`00000000
> 00000000`00000000 00000000`00000000 : 0x78b842d9
>
>
> STACK_COMMAND: kb
>
> FOLLOWUP_IP:
> win32k!HmgAllocateDcAttr+1b6
> fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]
>
> SYMBOL_STACK_INDEX: 3
>
> SYMBOL_NAME: win32k!HmgAllocateDcAttr+1b6
>
> FOLLOWUP_NAME: MachineOwner
>
> MODULE_NAME: win32k
>
> IMAGE_NAME: win32k.sys
>
> DEBUG_FLR_IMAGE_TIMESTAMP: 45e6f310
>
> FAILURE_BUCKET_ID: X64_0x50_win32k!HmgAllocateDcAttr+1b6
>
> BUCKET_ID: X64_0x50_win32k!HmgAllocateDcAttr+1b6
>
> Followup: MachineOwner
> ---------
>
> Bye,
> Skybuck.
>
> P.S.: I followed instructions on this link to setup WinDBG properly for
> symbol support

>
> http://forums.majorgeeks.com/showthread.php?t=35246
>
> Simply add something like:
>
> SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
>
> to symbol path.
>
> Then symbols will be downloaded...
>
> (I set mine to C:\Tools\WinDBG\WebSymbols

)
>
>
>

08-28-2007

what were you programming at the time of crash?

I have seen this kind of crash happen in some apps our test guys were doing
to stress GDI ...

"Skybuck Flying" <> wrote in message
news:favvsa$d2b$...
> Hi,
>
> It's Delphi 2007 from the file's description:
>
> "CodeGear RAD Studio for Windows"
>
> BDS.EXE is what I believe is the Delphi 2007 IDE.
>
> Integrated Development Environment for Rapid Application Development for
> Windows.
>
> So far no more crashes, play with it a bit more...
>
> Bye,
> Skybuck.
>
> "Paul Russell" <> wrote in message
> news:4A21A8D0-6A4C-42DF-A0DF-...
>> what is PROCESS_NAME: bds.exe
>>
>>
>> "Skybuck Flying" <> wrote in message
>> news:faumd8$2ae$...
>>>I am definetly no expert...
>>>
>>> Seems like something did a try except where that is not allowed, also
>>> seems resource related ????:
>>>
>>> Microsoft (R) Windows Debugger Version 6.6.0007.5
>>> Copyright (c) Microsoft Corporation. All rights reserved.
>>>
>>>
>>> Loading Dump File [C:\WINDOWS\Minidump\Mini082707-01.dmp]
>>> Mini Kernel Dump File: Only registers and stack trace are available
>>>
>>> Symbol search path is:
>>> SRV*c:\Tools\WinDbg\WebSymbols*http://msdl.microsoft.com/download/symbols
>>> Executable search path is:
>>> Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs)
>>> Free x64
>>> Product: WinNt, suite: TerminalServer SingleUserTS
>>> Built by: 3790.srv03_sp2_rtm.070216-1710
>>> Kernel base = 0xfffff800`01000000 PsLoadedModuleList =
>>> 0xfffff800`011d5100
>>> Debug session time: Mon Aug 27 15:17:04.640 2007 (GMT+2)
>>> System Uptime: 0 days 0:27:21.571
>>> Loading Kernel Symbols
>>> .................................................. .................................................. .......................................
>>> Loading User Symbols
>>> Loading unloaded module list
>>> ..................................................
>>> ************************************************** *****************************
>>> * *
>>> * Bugcheck Analysis *
>>> * *
>>> ************************************************** *****************************
>>>
>>> Use !analyze -v to get detailed debugging information.
>>>
>>> BugCheck 50, {fffffa8804c21090, 0, fffff97fff0a7742, 5}
>>>
>>>
>>> Could not read faulting driver name
>>> Probably caused by : win32k.sys ( win32k!HmgAllocateDcAttr+1b6 )
>>>
>>> Followup: MachineOwner
>>> ---------
>>>
>>> 1: kd> !analyze -v
>>> ************************************************** *****************************
>>> * *
>>> * Bugcheck Analysis *
>>> * *
>>> ************************************************** *****************************
>>>
>>> PAGE_FAULT_IN_NONPAGED_AREA (50)
>>> Invalid system memory was referenced. This cannot be protected by
>>> try-except,
>>> it must be protected by a Probe. Typically the address is just plain
>>> bad or it
>>> is pointing at freed memory.
>>> Arguments:
>>> Arg1: fffffa8804c21090, memory referenced.
>>> Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
>>> Arg3: fffff97fff0a7742, If non-zero, the instruction address which
>>> referenced the bad memory
>>> address.
>>> Arg4: 0000000000000005, (reserved)
>>>
>>> Debugging Details:
>>> ------------------
>>>
>>>
>>> Could not read faulting driver name
>>>
>>> READ_ADDRESS: fffffa8804c21090
>>>
>>> FAULTING_IP:
>>> win32k!HmgAllocateDcAttr+1b6
>>> fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]
>>>
>>> MM_INTERNAL_CODE: 5
>>>
>>> CUSTOMER_CRASH_COUNT: 1
>>>
>>> DEFAULT_BUCKET_ID: DRIVER_FAULT
>>>
>>> BUGCHECK_STR: 0x50
>>>
>>> PROCESS_NAME: bds.exe
>>>
>>> CURRENT_IRQL: 0
>>>
>>> TRAP_FRAME: fffffadfc478e990 -- (.trap fffffadfc478e990)
>>> NOTE: The trap frame does not contain all registers.
>>> Some register values may be zeroed.
>>> rax=00000000ffffffff rbx=0000000000000888 rcx=fffffa8004c21080
>>> rdx=fffffa8004c21080 rsi=fffffa80051f6280 rdi=fffff97fff0cda0e
>>> rip=fffff97fff0a7742 rsp=fffffadfc478eb20 rbp=fffffadfc478ecf0
>>> r8=fffffa8004b9b0c0 r9=5000984210000000 r10=500098421117001d
>>> r11=00000000000007ff r12=0000000000000000 r13=0000000000000000
>>> r14=0000000000000000 r15=0000000000000000
>>> iopl=0 nv up ei ng nz ac po nc
>>> win32k!HmgAllocateDcAttr+0x1b6:
>>> fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]
>>> ds:fffffa88`04c21090=????????????????
>>> Resetting default scope
>>>
>>> LAST_CONTROL_TRANSFER: from fffff800010a5416 to fffff8000102e950
>>>
>>> STACK_TEXT:
>>> fffffadf`c478e8b8 fffff800`010a5416 : 00000000`00000050
>>> fffffa88`04c21090 00000000`00000000 fffffadf`c478e990 : nt!KeBugCheckEx
>>> fffffadf`c478e8c0 fffff800`0102d519 : fffffa80`00cad9e0
>>> 00000000`00000009 00000000`00000000 fffffa80`05009b50 :
>>> nt!MmAccessFault+0x395
>>> fffffadf`c478e990 fffff97f`ff0a7742 : 00000000`00000000
>>> fffff97f`ff0ce249 fffffa80`0445f780 fffffadf`c478ecf0 :
>>> nt!KiPageFault+0x119
>>> fffffadf`c478eb20 fffff97f`ff0ce004 : 00000000`00000888
>>> 00000000`00000000 00000000`1e011591 fffffa80`051f6280 :
>>> win32k!HmgAllocateDcAttr+0x1b6
>>> fffffadf`c478eb60 fffff97f`ff0cdf0e : fffffa80`051f6280
>>> fffffa80`051f6280 fffffadf`cba85cd0 fffffa80`0133b000 :
>>> win32k!GreSetupDCAttributes+0x34
>>> fffffadf`c478eba0 fffff97f`ff0a36c6 : fffffa80`01351010
>>> fffff97f`ff0ced20 00000000`00000000 00000000`7efdb000 :
>>> win32k!GreCreateDisplayDC+0x1c4
>>> fffffadf`c478ec30 fffff800`0102e3fd : 00000000`7d814cc6
>>> fffff97f`ff0ced20 00000000`7d814cc6 00000000`7d814c30 :
>>> win32k!GreCreateCompatibleDC+0x77
>>> fffffadf`c478ec70 00000000`78b842d9 : 00000000`00000000
>>> 00000000`00000000 00000000`00000000 00000000`00000000 :
>>> nt!KiSystemServiceCopyEnd+0x3
>>> 00000000`0012edf8 00000000`00000000 : 00000000`00000000
>>> 00000000`00000000 00000000`00000000 00000000`00000000 : 0x78b842d9
>>>
>>>
>>> STACK_COMMAND: kb
>>>
>>> FOLLOWUP_IP:
>>> win32k!HmgAllocateDcAttr+1b6
>>> fffff97f`ff0a7742 488b4cc118 mov rcx,qword ptr [rcx+rax*8+18h]
>>>
>>> SYMBOL_STACK_INDEX: 3
>>>
>>> SYMBOL_NAME: win32k!HmgAllocateDcAttr+1b6
>>>
>>> FOLLOWUP_NAME: MachineOwner
>>>
>>> MODULE_NAME: win32k
>>>
>>> IMAGE_NAME: win32k.sys
>>>
>>> DEBUG_FLR_IMAGE_TIMESTAMP: 45e6f310
>>>
>>> FAILURE_BUCKET_ID: X64_0x50_win32k!HmgAllocateDcAttr+1b6
>>>
>>> BUCKET_ID: X64_0x50_win32k!HmgAllocateDcAttr+1b6
>>>
>>> Followup: MachineOwner
>>> ---------
>>>
>>> Bye,
>>> Skybuck.
>>>
>>> P.S.: I followed instructions on this link to setup WinDBG properly for
>>> symbol support

>>>
>>> http://forums.majorgeeks.com/showthread.php?t=35246
>>>
>>> Simply add something like:
>>>
>>> SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
>>>
>>> to symbol path.
>>>
>>> Then symbols will be downloaded...
>>>
>>> (I set mine to C:\Tools\WinDBG\WebSymbols

)
>>>
>>>
>>>
>>
>
>

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode