How can I fix these errors.....

Guest · Aug 15, 2007

Hello,

I need to know what I can do about fixing whatever is causing these
following errors (Shown in Event Viewer Application Log)..:

8/12/2007 3:56 PM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version 5.1.2600.2180,
fault address 0x000108df.

8/12/2007 4:03 PM Application Error Fault bucket 129280599.

8/12/2007 4:20 PM Application Error Faulting application mmc.exe, version
5.1.2600.2180, faulting module ntdll.dll, version 5.1.2600.2180, fault
address 0x00011e5a.

8/12/2007 4:22 PM Application Error Fault bucket 130061967.

8/12/2007 5:39 PM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version 5.1.2600.2180,
fault address 0x000108df.

8/12/2007 5:42 PM Application Error Fault bucket 129280599.

8/12/2007 8:44 AM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version 5.1.2600.2180,
fault address 0x000108df.

8/12/2007 8:44 AM Application Error Fault bucket 129280599.

8/14/2007 9:00 PM Application Error Faulting application mmc.exe, version
5.1.2600.2180, faulting module filemgmt.dll, version 5.1.2600.2180, fault
address 0x0000db07.

8/14/2007 9:01 PM Application Error Fault bucket 169289715.&#x000a

Each Error should have it's associated "Bucket" next to it.

To describe, I just installed XP Pro recentley on a new PC build, installed
all available updates as they were available up to 2 days ago, and had begun
to install Necessary Hardware Drivers. Chipset, onboard Raid and Network all
went fine. Nvidia Driver 158.22 and Viewsonic Monitor drivers also seemed to
go well.

Then I go to installing my Sound Driver (SoundMax ADI 1988B), and noticed
the first errors start to occur a little while later on, while doing and
checking certain things on the PC.

The Errors related to Rundll32.exe/ mmsys.cpl seemed to occur at random when
making adjustments to the Control Panel's sound settings (Both Windows
control panel, and on the SoundMax's panel.

The Errors Related to mmc.exe/ Ntdll.dll + mmc.exe/ filemgmt.dll occured
when using parts of the Administrative Tools like Component Servicees,
Computer Management, Etc. The Errors would happen when just ckicking thru the
tree-listings in those utility's open windows to view their info.

I would also add, that there is apparently a drwtsn32.txt file in
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson,
which also contains info related to the errors, but the kind of info inside
is pretty much indecipherable to me. I'm not sure that all of it would fit
here, but most of it is very similar in nature for each thread dump, so I'll
see if I can put at least a bit of it below, to show what it is listing. It
seems to state similar info for each thread/module down the list....

(part of drwtsn32.txt
----------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=972)
When: 8/12/2007 @ 02:01:07.484
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: WOLVES-DEN
User Name: Van
Terminal Session Id: 0
Number of Processors: 2
Processor Type: x86 Family 6 Model 15 Stepping 6
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Multiprocessor Free
Registered Organization:
Registered Owner: Scott

*----> Task List <----*
0 System Process
4 System
584 smss.exe
640 csrss.exe
664 winlogon.exe
708 services.exe
720 lsass.exe
880 svchost.exe
940 svchost.exe
1040 svchost.exe
1132 svchost.exe
1208 svchost.exe
1416 spoolsv.exe
1628 Explorer.EXE
1828 nvraidservice.exe
1860 RUNDLL32.EXE
1884 smax4pnp.exe
1892 Smax4.exe
1904 ctfmon.exe
212 nvsvc32.exe
516 nSvcAppFlt.exe
540 nSvcIp.exe
1032 wmiprvse.exe
1948 alg.exe
836 unsecapp.exe
324 wscntfy.exe
468 hh.exe
972 rundll32.exe
136 sndvol32.exe
1308 sndvol32.exe
1540 sndvol32.exe
480 dwwin.exe
472 drwtsn32.exe

*----> Module List <----*
(0000000001000000 - 000000000100b000: C:\WINDOWS\system32\rundll32.exe
(000000000ffd0000 - 000000000fff8000: C:\WINDOWS\system32\rsaenh.dll
(0000000010000000 - 0000000010023000: C:\WINDOWS\system32\nvappfilter.dll
(0000000020000000 - 00000000202c5000: C:\WINDOWS\system32\xpsp2res.dll
(00000000581a0000 - 00000000581d9000: C:\WINDOWS\system32\iac25_32.ax
(00000000582d0000 - 00000000582d4000: C:\WINDOWS\system32\tssoft32.acm
(00000000582e0000 - 00000000582fe000: C:\WINDOWS\system32\sl_anet.acm
(0000000058300000 - 0000000058308000: C:\WINDOWS\system32\msgsm32.acm
(0000000058310000 - 000000005832d000: C:\WINDOWS\system32\msg723.acm
(0000000058330000 - 0000000058335000: C:\WINDOWS\system32\msg711.acm
(0000000058340000 - 000000005838d000: C:\WINDOWS\system32\msaud32.acm
(0000000058390000 - 000000005841a000: C:\WINDOWS\system32\l3codeca.acm
(0000000058420000 - 0000000058427000: C:\WINDOWS\system32\imaadp32.acm
(00000000588a0000 - 000000005893f000: C:\WINDOWS\system32\mmsys.cpl
(000000005ad70000 - 000000005ada8000: C:\WINDOWS\system32\UxTheme.dll
(000000005b860000 - 000000005b8b4000: C:\WINDOWS\system32\netapi32.dll
(000000005cb70000 - 000000005cb96000: C:\WINDOWS\system32\ShimEng.dll
(000000005d090000 - 000000005d12a000: C:\WINDOWS\system32\comctl32.dll
(0000000060da0000 - 0000000060dff000: C:\WINDOWS\system32\dpnet.dll
(00000000662b0000 - 0000000066308000: C:\WINDOWS\system32\hnetcfg.dll
(000000006c5f0000 - 000000006c60f000: C:\WINDOWS\system32\dpvvox.dll
(000000006c610000 - 000000006c647000: C:\WINDOWS\system32\dpvoice.dll
(000000006c650000 - 000000006c658000: C:\WINDOWS\system32\dpvacm.dll
(000000006f880000 - 000000006fa4a000: C:\WINDOWS\AppPatch\AcGenral.DLL
(0000000071a50000 - 0000000071a8f000: C:\WINDOWS\system32\mswsock.dll
(0000000071a90000 - 0000000071a98000: C:\WINDOWS\System32\wshtcpip.dll
(0000000071aa0000 - 0000000071aa8000: C:\WINDOWS\system32\WS2HELP.dll
(0000000071ab0000 - 0000000071ac7000: C:\WINDOWS\system32\WS2_32.dll
(0000000071b20000 - 0000000071b32000: C:\WINDOWS\system32\MPR.dll
(0000000072a90000 - 0000000072ad8000: C:\WINDOWS\system32\DEVMGR.DLL
(0000000072cf0000 - 0000000072cf7000: C:\WINDOWS\system32\msadp32.acm
(0000000072d10000 - 0000000072d18000: C:\WINDOWS\system32\msacm32.drv
(0000000072d20000 - 0000000072d29000: C:\WINDOWS\system32\wdmaud.drv
(0000000073b70000 - 0000000073b77000: C:\WINDOWS\system32\tsd32.dll
(0000000073ee0000 - 0000000073ee4000: C:\WINDOWS\system32\KsUser.dll
(0000000073f10000 - 0000000073f6c000: C:\WINDOWS\system32\dsound.dll
(0000000074720000 - 000000007476b000: C:\WINDOWS\system32\MSCTF.dll
(0000000075150000 - 0000000075164000: C:\WINDOWS\system32\Cabinet.dll
(00000000755c0000 - 00000000755ee000: C:\WINDOWS\system32\msctfime.ime
(0000000075e90000 - 0000000075f40000: C:\WINDOWS\system32\SXS.DLL
(0000000076390000 - 00000000763ad000: C:\WINDOWS\system32\IMM32.DLL
(00000000763b0000 - 00000000763f9000: C:\WINDOWS\system32\Comdlg32.dll
(00000000769c0000 - 0000000076a73000: C:\WINDOWS\system32\USERENV.dll
(0000000076b40000 - 0000000076b6d000: C:\WINDOWS\system32\WINMM.dll
(0000000076bf0000 - 0000000076bfb000: C:\WINDOWS\system32\PSAPI.DLL
(0000000076c30000 - 0000000076c5e000: C:\WINDOWS\system32\WINTRUST.dll
(0000000076c90000 - 0000000076cb8000: C:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d30000 - 0000000076d34000: C:\WINDOWS\system32\WMI.dll
(0000000076f20000 - 0000000076f47000: C:\WINDOWS\system32\DNSAPI.dll
(0000000076f60000 - 0000000076f8c000: C:\WINDOWS\system32\WLDAP32.dll
(0000000076fb0000 - 0000000076fb8000: C:\WINDOWS\System32\winrnr.dll
(0000000076fc0000 - 0000000076fc6000: C:\WINDOWS\system32\rasadhlp.dll
(0000000076fd0000 - 000000007704f000: C:\WINDOWS\system32\CLBCATQ.DLL
(0000000077050000 - 0000000077115000: C:\WINDOWS\system32\COMRes.dll
(0000000077120000 - 00000000771ac000: C:\WINDOWS\system32\OLEAUT32.dll
(00000000773d0000 - 00000000774d3000:
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
(00000000774e0000 - 000000007761d000: C:\WINDOWS\system32\ole32.dll
(0000000077920000 - 0000000077a13000: C:\WINDOWS\system32\SETUPAPI.dll
(0000000077a80000 - 0000000077b14000: C:\WINDOWS\system32\CRYPT32.dll
(0000000077b20000 - 0000000077b32000: C:\WINDOWS\system32\MSASN1.dll
(0000000077b40000 - 0000000077b62000: C:\WINDOWS\system32\appHelp.dll
(0000000077bd0000 - 0000000077bd7000: C:\WINDOWS\system32\midimap.dll
(0000000077be0000 - 0000000077bf5000: C:\WINDOWS\system32\MSACM32.dll
(0000000077c00000 - 0000000077c08000: C:\WINDOWS\system32\VERSION.dll
(0000000077c10000 - 0000000077c68000: C:\WINDOWS\system32\msvcrt.dll
(0000000077dd0000 - 0000000077e6b000: C:\WINDOWS\system32\ADVAPI32.dll
(0000000077e70000 - 0000000077f01000: C:\WINDOWS\system32\RPCRT4.dll
(0000000077f10000 - 0000000077f57000: C:\WINDOWS\system32\GDI32.dll
(0000000077f60000 - 0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll
(0000000077fe0000 - 0000000077ff1000: C:\WINDOWS\system32\secur32.dll
(000000007c800000 - 000000007c8f5000: C:\WINDOWS\system32\kernel32.dll
(000000007c900000 - 000000007c9b0000: C:\WINDOWS\system32\ntdll.dll
(000000007c9c0000 - 000000007d1d5000: C:\WINDOWS\system32\SHELL32.dll
(000000007e410000 - 000000007e4a0000: C:\WINDOWS\system32\USER32.dll

*----> State Dump for Thread Id 0x1d0 <----*

eax=00000001 ebx=0013054e ecx=7ffdd000 edx=76b601c0 esi=00000000 edi=0007f218
eip=588b08df esp=0007f180 ebp=0007f184 iopl=0 nv up ei ng nz ac po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000296

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4 (588a14b4)]
588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call mmsys!DllCanUnloadNow+0x57bf
(588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480 (588a1480)]
588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call mmsys!DllCanUnloadNow+0x5835
(588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c (588a148c)]

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\USER32.dll -
*** ERROR: Module load completed but symbols could not be loaded for
C:\WINDOWS\system32\rundll32.exe
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0007f184 588b1109 00000000 0013054e 0007f218 mmsys!DllCanUnloadNow+0x5904
0007f1a0 588b1184 0013054e 588b1168 0007f1dc mmsys!DllCanUnloadNow+0x612e
0007f1b0 7e418734 000a0180 0000c09e 00000000 mmsys!DllCanUnloadNow+0x61a9
0007f1dc 7e418816 588b1168 000a0180 0000c09e USER32!GetDC+0x6d
0007f244 7e41c63f 00098af8 588b1168 000a0180 USER32!GetDC+0x14f
0007f274 7e41c665 588b1168 000a0180 0000c09e USER32!IsWindowUnicode+0xa1
0007f294 588c1037 588b1168 000a0180 0000c09e USER32!CallWindowProcW+0x1b
0007f2b4 7e418734 000a0180 0000c09e 00000000 mmsys+0x21037
0007f2e0 7e418816 588c1005 000a0180 0000c09e USER32!GetDC+0x6d
0007f348 7e41c63f 00098af8 588c1005 000a0180 USER32!GetDC+0x14f
0007f378 7e41c665 588c1005 000a0180 0000c09e USER32!IsWindowUnicode+0xa1
0007f398 588bf79e 588c1005 000a0180 0000c09e USER32!CallWindowProcW+0x1b
0007f3b8 7e418734 000a0180 0000c09e 00000000 mmsys+0x1f79e
0007f3e4 7e418816 588bf76c 000a0180 0000c09e USER32!GetDC+0x6d
0007f44c 7e4189cd 00098af8 588bf76c 000a0180 USER32!GetDC+0x14f
0007f4ac 7e418a10 0007f4d4 00000000 0007f4f4 USER32!GetWindowLongW+0x127
0007f4bc 7e42dbbf 0007f4d4 00000000 00000000 USER32!DispatchMessageW+0xf
0007f4f4 7e42593f 001c04e2 00000000 00000000 USER32!CallMsgFilterW+0x213
0007f51c 7e43a91e 7e410000 00149228 00000000 USER32!DrawStateW+0x1f2
0007f7dc 7e43a284 0007f938 01001100 00000000 USER32!SoftModalMessageBox+0x677
0007f92c 7e4661d3 0007f938 00000028 00000000 USER32!MessageBoxIndirectA+0x23a
0007f984 7e4505f3 00000000 0007f9e8 01001100 USER32!MessageBoxTimeoutW+0x7a
0007f9a4 7e46634f 00000000 0007f9e8 01001100 USER32!MessageBoxExW+0x1b
0007f9c0 0100154d 00000000 0007f9e8 01001100 USER32!MessageBoxW+0x45
0007ff14 01001ade 00000000 00000311 01001100 rundll32+0x154d
0007ff60 01001bcf 01000000 00000000 0002066a rundll32+0x1ade
0007ffc0 7c816fd7 80000001 0007ed80 7ffde000 rundll32+0x1bcf
0007fff0 00000000 01001bdc 00000000 78746341
kernel32!RegisterWaitForInputIdle+0x49

*----> Raw Stack Dump <----*
000000000007f180 00 00 00 00 a0 f1 07 00 - 09 11 8b 58 00 00 00 00
............X....
000000000007f190 4e 05 13 00 18 f2 07 00 - 9e c0 00 00 00 00 00 00
N...............
000000000007f1a0 b0 f1 07 00 84 11 8b 58 - 4e 05 13 00 68 11 8b 58
........XN...h..X
000000000007f1b0 dc f1 07 00 34 87 41 7e - 80 01 0a 00 9e c0 00 00
.....4.A~........
000000000007f1c0 00 00 00 00 00 00 00 00 - 68 11 8b 58 cd ab ba dc
.........h..X....
000000000007f1d0 00 00 00 00 18 f2 07 00 - 68 11 8b 58 44 f2 07 00
.........h..XD...
000000000007f1e0 16 88 41 7e 68 11 8b 58 - 80 01 0a 00 9e c0 00 00
...A~h..X........
000000000007f1f0 00 00 00 00 00 00 00 00 - 9e c0 00 00 68 11 8b 58
.............h..X
000000000007f200 00 00 00 00 14 00 00 00 - 01 00 00 00 00 00 00 00
.................
000000000007f210 00 00 00 00 10 00 00 00 - 00 00 00 00 01 00 00 00
.................
000000000007f220 01 00 00 00 00 00 00 00 - 00 00 00 00 f8 f1 07 00
.................
000000000007f230 a4 ed 07 00 38 f3 07 00 - 57 04 44 7e 30 88 41 7e
.....8...W.D~0.A~
000000000007f240 00 00 00 00 74 f2 07 00 - 3f c6 41 7e f8 8a 09 00
.....t...?.A~....
000000000007f250 68 11 8b 58 80 01 0a 00 - 9e c0 00 00 00 00 00 00
h..X............
000000000007f260 00 00 00 00 00 00 00 00 - 00 00 00 00 1c f3 07 00
.................
000000000007f270 9e c0 00 00 94 f2 07 00 - 65 c6 41 7e 68 11 8b 58
.........e.A~h..X
000000000007f280 80 01 0a 00 9e c0 00 00 - 00 00 00 00 00 00 00 00
.................
000000000007f290 00 00 00 00 b4 f2 07 00 - 37 10 8c 58 68 11 8b 58
.........7..Xh..X
000000000007f2a0 80 01 0a 00 9e c0 00 00 - 00 00 00 00 00 00 00 00
.................
000000000007f2b0 05 10 8c 58 e0 f2 07 00 - 34 87 41 7e 80 01 0a 00
....X....4.A~....

*----> State Dump for Thread Id 0x758 <----*

eax=72d230e8 ebx=00b3fef8 ecx=000000d8 edx=000bb500 esi=00000000 edi=7ffde000
eip=7c90eb94 esp=00b3fed0 ebp=00b3ff6c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\ntdll.dll -
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\wdmaud.drv -
ChildEBP RetAddr Args to Child
00b3ff6c 7c80a075 00000002 00b3ffa4 00000000 ntdll!KiFastSystemCallRet
00b3ff88 72d2312a 00000002 00b3ffa4 00000000
kernel32!WaitForMultipleObjects+0x18
00b3ffb4 7c80b683 00000000 00000008 00090000 wdmaud!midMessage+0x348
00b3ffec 00000000 72d230e8 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Raw Stack Dump <----*
0000000000b3fed0 ab e9 90 7c e2 94 80 7c - 02 00 00 00 f8 fe b3 00
....|...|........
0000000000b3fee0 01 00 00 00 00 00 00 00 - 00 00 00 00 08 00 00 00
.................
0000000000b3fef0 00 00 00 00 00 00 00 00 - e4 00 00 00 d8 00 00 00
.................
0000000000b3ff00 14 ff b3 00 f0 25 80 7c - 20 25 80 7c 18 bf 16 00
......%.| %.|....
0000000000b3ff10 b9 4c 83 7c 14 00 00 00 - 14 00 00 00 01 00 00 00
..L.|............
0000000000b3ff20 10 50 0a 00 00 00 00 00 - 00 00 00 00 10 57 15 00
..P...........W..
0000000000b3ff30 00 e0 fd 7f 00 c0 fd 7f - 00 e0 fd 7f 00 c0 fd 7f
.................
0000000000b3ff40 08 ff b3 00 00 00 00 00 - f8 fe b3 00 a8 9a 83 7c
................|
0000000000b3ff50 02 00 00 00 ec fe b3 00 - f0 25 80 7c dc ff b3 00
..........%.|....
0000000000b3ff60 a8 9a 83 7c d8 95 80 7c - 00 00 00 00 88 ff b3 00
....|...|........
0000000000b3ff70 75 a0 80 7c 02 00 00 00 - a4 ff b3 00 00 00 00 00
u..|............
0000000000b3ff80 ff ff ff ff 00 00 00 00 - b4 ff b3 00 2a 31 d2 72
.............*1.r
0000000000b3ff90 02 00 00 00 a4 ff b3 00 - 00 00 00 00 ff ff ff ff
.................
0000000000b3ffa0 00 00 09 00 e4 00 00 00 - d8 00 00 00 01 00 00 00
.................
0000000000b3ffb0 14 00 00 00 ec ff b3 00 - 83 b6 80 7c 00 00 00 00
............|....
0000000000b3ffc0 08 00 00 00 00 00 09 00 - 00 00 00 00 00 c0 fd 7f
.................
0000000000b3ffd0 00 16 db 89 c0 ff b3 00 - 28 9d 16 89 ff ff ff ff
.........(.......
0000000000b3ffe0 a8 9a 83 7c 90 b6 80 7c - 00 00 00 00 00 00 00 00
....|...|........
0000000000b3fff0 00 00 00 00 e8 30 d2 72 - 00 00 00 00 00 00 00 00
......0.r........
0000000000b40000 08 00 00 00 c0 60 00 00 - 00 00 00 00 ff ff ff ff
......`..........

*----> State Dump for Thread Id 0x7b8 <----*

eax=00000088 ebx=00151068 ecx=7c91094e edx=7c97e4c0 esi=7c90d850 edi=71ab40e6
eip=7c90eb94 esp=00dbfe88 ebp=00dbffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
ChildEBP RetAddr Args to Child
00dbffb4 7c80b683 00151068 71ab40e6 71ac0f0a ntdll!KiFastSystemCallRet
00dbffec 00000000 71aa2b11 00151068 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Raw Stack Dump <----*
0000000000dbfe88 5c d8 90 7c 87 2b aa 71 - 01 00 00 00 9c fe db 00
\..|.+.q........
0000000000dbfe98 0a 0f ac 71 00 00 00 00 - 00 00 00 80 28 fc 24 b1
....q........(.$.
0000000000dbfea8 27 44 6e 80 43 3a 5c 57 - 49 4e 44 4f 57 53 5c 73
'Dn.C:\WINDOWS\s
0000000000dbfeb8 79 73 74 65 6d 33 32 5c - 57 53 32 48 45 4c 50 2e
ystem32\WS2HELP.
0000000000dbfec8 64 6c 6c 00 30 29 7d 89 - db 5f 00 00 00 00 00 00
dll.0)}.._......
0000000000dbfed8 43 61 00 00 f0 d1 df 89 - 00 00 00 00 00 00 00 00
Ca..............
0000000000dbfee8 00 00 00 00 1f 00 00 00 - ff ff ff ff 40 85 b3 ba
.............@...
0000000000dbfef8 00 00 00 00 10 44 6e 80 - bc d1 c9 89 28 fc 24 b1
......Dn.....(.$.
0000000000dbff08 00 00 00 00 27 44 6e 80 - 08 00 00 00 46 02 00 00
.....'Dn.....F...
0000000000dbff18 48 2d 50 80 90 d0 c9 89 - 20 d0 c9 89 20 af 4f 80
H-P..... ... .O.
0000000000dbff28 8c d1 c9 89 20 d0 c9 89 - 54 d0 c9 89 a5 61 00 00 ....
....T....a..
0000000000dbff38 ac 18 64 80 a0 9d 1a 89 - 20 d0 c9 89 00 90 fd 7f
...d..... .......
0000000000dbff48 88 fc 24 b1 62 24 50 80 - 00 00 00 00 05 00 00 00
...$.b$P.........
0000000000dbff58 00 00 00 00 00 00 00 00 - 00 00 00 00 da ed 4f 80
...............O.
0000000000dbff68 60 fc 24 b1 54 d0 c9 89 - 96 ee 4f 80 27 44 6e 80
`.$.T.....O.'Dn.
0000000000dbff78 20 d0 c9 89 50 fd 24 b1 - 00 00 00 00 08 d1 c9 89
....P.$.........
0000000000dbff88 01 9c a7 88 00 00 00 00 - a0 9d 1a 89 42 24 50 80
.............B$P.
0000000000dbff98 00 00 00 00 00 00 00 00 - 00 00 00 00 4a 24 50 80
.............J$P.
0000000000dbffa8 a0 fc 24 b1 f2 4e 6e 80 - fa 8f 00 00 ec ff db 00
...$..Nn.........
0000000000dbffb8 83 b6 80 7c 68 10 15 00 - e6 40 ab 71 0a 0f ac 71
....|[email protected]

*----> State Dump for Thread Id 0x590 <----*

eax=77e76bf0 ebx=00000000 ecx=00000009 edx=7c910732 esi=001549c8 edi=00154a6c
eip=7c90eb94 esp=00f4fe1c ebp=00f4ff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
---------------------------------------------------------------------------------------------

I don't understand what that data means, but hopefully someone here might
get an idea of what is happening, and can tell me how to resolve the
problems. Changing Driver versions did not seem to help, and I have checked
extensivley thru MS, the motherboard + Sound card maker, web searched, Etc.
, but could not find anyplace where someone else was having the same kind of
problems. Memtest has shon no errors, and everything else has been running
just fine, even sound itself, actually. I am hoping it's just a matter of
something like needing to replace a bad file or setting that is affecting
these things.

I would appreciate any help or advice!

Gerry · Aug 15, 2007

A better way to post Event Viewer Error Reports.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

Are there any yellow question marks in Device Manager? Right click on
the My Computer icon on your Desktop and select Properties,
Hardware,Device Manager. If yes what is the Device Error code?

Try Start, Run, type "sigverif.exe" without quotes and hit OK. What
drivers are listed as unsigned? Disregard those which are not checked.

Is your Windows XP CD Retail or OEM? Is it pre or post SP2?

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:
Hello,

I need to know what I can do about fixing whatever is causing these
following errors (Shown in Event Viewer Application Log)..:

8/12/2007 3:56 PM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 4:03 PM Application Error Fault bucket 129280599.

8/12/2007 4:20 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module ntdll.dll, version 5.1.2600.2180, fault
address 0x00011e5a.

8/12/2007 4:22 PM Application Error Fault bucket 130061967.

8/12/2007 5:39 PM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 5:42 PM Application Error Fault bucket 129280599.

8/12/2007 8:44 AM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 8:44 AM Application Error Fault bucket 129280599.

8/14/2007 9:00 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module filemgmt.dll, version 5.1.2600.2180,
fault address 0x0000db07.

8/14/2007 9:01 PM Application Error Fault bucket 169289715.&#x000a

Each Error should have it's associated "Bucket" next to it.

To describe, I just installed XP Pro recentley on a new PC build,
installed all available updates as they were available up to 2 days
ago, and had begun to install Necessary Hardware Drivers. Chipset,
onboard Raid and Network all went fine. Nvidia Driver 158.22 and
Viewsonic Monitor drivers also seemed to go well.

Then I go to installing my Sound Driver (SoundMax ADI 1988B), and
noticed
the first errors start to occur a little while later on, while doing
and checking certain things on the PC.

The Errors related to Rundll32.exe/ mmsys.cpl seemed to occur at
random when making adjustments to the Control Panel's sound settings
(Both Windows control panel, and on the SoundMax's panel.

The Errors Related to mmc.exe/ Ntdll.dll + mmc.exe/ filemgmt.dll
occured
when using parts of the Administrative Tools like Component Servicees,
Computer Management, Etc. The Errors would happen when just ckicking
thru the tree-listings in those utility's open windows to view their
info.

I would also add, that there is apparently a drwtsn32.txt file in
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr
Watson, which also contains info related to the errors, but the kind
of info inside is pretty much indecipherable to me. I'm not sure that
all of it would fit here, but most of it is very similar in nature
for each thread dump, so I'll see if I can put at least a bit of it
below, to show what it is listing. It seems to state similar info for
each thread/module down the list....

(part of drwtsn32.txt)
----------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=972)
When: 8/12/2007 @ 02:01:07.484
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: WOLVES-DEN
User Name: Van
Terminal Session Id: 0
Number of Processors: 2
Processor Type: x86 Family 6 Model 15 Stepping 6
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Multiprocessor Free
Registered Organization:
Registered Owner: Scott

*----> Task List <----*
0 System Process
4 System
584 smss.exe
640 csrss.exe
664 winlogon.exe
708 services.exe
720 lsass.exe
880 svchost.exe
940 svchost.exe
1040 svchost.exe
1132 svchost.exe
1208 svchost.exe
1416 spoolsv.exe
1628 Explorer.EXE
1828 nvraidservice.exe
1860 RUNDLL32.EXE
1884 smax4pnp.exe
1892 Smax4.exe
1904 ctfmon.exe
212 nvsvc32.exe
516 nSvcAppFlt.exe
540 nSvcIp.exe
1032 wmiprvse.exe
1948 alg.exe
836 unsecapp.exe
324 wscntfy.exe
468 hh.exe
972 rundll32.exe
136 sndvol32.exe
1308 sndvol32.exe
1540 sndvol32.exe
480 dwwin.exe
472 drwtsn32.exe

*----> Module List <----*
(0000000001000000 - 000000000100b000: C:\WINDOWS\system32\rundll32.exe
(000000000ffd0000 - 000000000fff8000: C:\WINDOWS\system32\rsaenh.dll
(0000000010000000 - 0000000010023000:
C:\WINDOWS\system32\nvappfilter.dll (0000000020000000 -
00000000202c5000: C:\WINDOWS\system32\xpsp2res.dll (00000000581a0000
- 00000000581d9000: C:\WINDOWS\system32\iac25_32.ax (00000000582d0000
- 00000000582d4000: C:\WINDOWS\system32\tssoft32.acm
(00000000582e0000 - 00000000582fe000: C:\WINDOWS\system32\sl_anet.acm
(0000000058300000 - 0000000058308000: C:\WINDOWS\system32\msgsm32.acm
(0000000058310000 - 000000005832d000: C:\WINDOWS\system32\msg723.acm
(0000000058330000 - 0000000058335000: C:\WINDOWS\system32\msg711.acm
(0000000058340000 - 000000005838d000: C:\WINDOWS\system32\msaud32.acm
(0000000058390000 - 000000005841a000:
C:\WINDOWS\system32\l3codeca.acm (0000000058420000 -
0000000058427000: C:\WINDOWS\system32\imaadp32.acm (00000000588a0000
- 000000005893f000: C:\WINDOWS\system32\mmsys.cpl (000000005ad70000 -
000000005ada8000: C:\WINDOWS\system32\UxTheme.dll (000000005b860000 -
000000005b8b4000: C:\WINDOWS\system32\netapi32.dll (000000005cb70000
- 000000005cb96000: C:\WINDOWS\system32\ShimEng.dll (000000005d090000
- 000000005d12a000: C:\WINDOWS\system32\comctl32.dll
(0000000060da0000 - 0000000060dff000: C:\WINDOWS\system32\dpnet.dll
(00000000662b0000 - 0000000066308000: C:\WINDOWS\system32\hnetcfg.dll
(000000006c5f0000 - 000000006c60f000: C:\WINDOWS\system32\dpvvox.dll
(000000006c610000 - 000000006c647000: C:\WINDOWS\system32\dpvoice.dll
(000000006c650000 - 000000006c658000: C:\WINDOWS\system32\dpvacm.dll
(000000006f880000 - 000000006fa4a000:
C:\WINDOWS\AppPatch\AcGenral.DLL (0000000071a50000 -
0000000071a8f000: C:\WINDOWS\system32\mswsock.dll (0000000071a90000 -
0000000071a98000: C:\WINDOWS\System32\wshtcpip.dll (0000000071aa0000
- 0000000071aa8000: C:\WINDOWS\system32\WS2HELP.dll (0000000071ab0000
- 0000000071ac7000: C:\WINDOWS\system32\WS2_32.dll (0000000071b20000
- 0000000071b32000: C:\WINDOWS\system32\MPR.dll (0000000072a90000 -
0000000072ad8000: C:\WINDOWS\system32\DEVMGR.DLL (0000000072cf0000 -
0000000072cf7000: C:\WINDOWS\system32\msadp32.acm (0000000072d10000 -
0000000072d18000: C:\WINDOWS\system32\msacm32.drv (0000000072d20000 -
0000000072d29000: C:\WINDOWS\system32\wdmaud.drv (0000000073b70000 -
0000000073b77000: C:\WINDOWS\system32\tsd32.dll (0000000073ee0000 -
0000000073ee4000: C:\WINDOWS\system32\KsUser.dll (0000000073f10000 -
0000000073f6c000: C:\WINDOWS\system32\dsound.dll (0000000074720000 -
000000007476b000: C:\WINDOWS\system32\MSCTF.dll (0000000075150000 -
0000000075164000: C:\WINDOWS\system32\Cabinet.dll (00000000755c0000 -
00000000755ee000: C:\WINDOWS\system32\msctfime.ime (0000000075e90000
- 0000000075f40000: C:\WINDOWS\system32\SXS.DLL (0000000076390000 -
00000000763ad000: C:\WINDOWS\system32\IMM32.DLL (00000000763b0000 -
00000000763f9000: C:\WINDOWS\system32\Comdlg32.dll (00000000769c0000
- 0000000076a73000: C:\WINDOWS\system32\USERENV.dll (0000000076b40000
- 0000000076b6d000: C:\WINDOWS\system32\WINMM.dll (0000000076bf0000 -
0000000076bfb000: C:\WINDOWS\system32\PSAPI.DLL (0000000076c30000 -
0000000076c5e000: C:\WINDOWS\system32\WINTRUST.dll (0000000076c90000
- 0000000076cb8000: C:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d30000 - 0000000076d34000: C:\WINDOWS\system32\WMI.dll
(0000000076f20000 - 0000000076f47000: C:\WINDOWS\system32\DNSAPI.dll
(0000000076f60000 - 0000000076f8c000: C:\WINDOWS\system32\WLDAP32.dll
(0000000076fb0000 - 0000000076fb8000: C:\WINDOWS\System32\winrnr.dll
(0000000076fc0000 - 0000000076fc6000:
C:\WINDOWS\system32\rasadhlp.dll (0000000076fd0000 -
000000007704f000: C:\WINDOWS\system32\CLBCATQ.DLL (0000000077050000 -
0000000077115000: C:\WINDOWS\system32\COMRes.dll (0000000077120000 -
00000000771ac000: C:\WINDOWS\system32\OLEAUT32.dll (00000000773d0000
- 00000000774d3000:
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
(00000000774e0000 - 000000007761d000: C:\WINDOWS\system32\ole32.dll
(0000000077920000 - 0000000077a13000:
C:\WINDOWS\system32\SETUPAPI.dll (0000000077a80000 -
0000000077b14000: C:\WINDOWS\system32\CRYPT32.dll (0000000077b20000 -
0000000077b32000: C:\WINDOWS\system32\MSASN1.dll (0000000077b40000 -
0000000077b62000: C:\WINDOWS\system32\appHelp.dll (0000000077bd0000 -
0000000077bd7000: C:\WINDOWS\system32\midimap.dll (0000000077be0000 -
0000000077bf5000: C:\WINDOWS\system32\MSACM32.dll (0000000077c00000 -
0000000077c08000: C:\WINDOWS\system32\VERSION.dll (0000000077c10000 -
0000000077c68000: C:\WINDOWS\system32\msvcrt.dll (0000000077dd0000 -
0000000077e6b000: C:\WINDOWS\system32\ADVAPI32.dll (0000000077e70000
- 0000000077f01000: C:\WINDOWS\system32\RPCRT4.dll (0000000077f10000
- 0000000077f57000: C:\WINDOWS\system32\GDI32.dll (0000000077f60000 -
0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll (0000000077fe0000 -
0000000077ff1000: C:\WINDOWS\system32\secur32.dll (000000007c800000 -
000000007c8f5000: C:\WINDOWS\system32\kernel32.dll (000000007c900000
- 000000007c9b0000: C:\WINDOWS\system32\ntdll.dll (000000007c9c0000 -
000000007d1d5000: C:\WINDOWS\system32\SHELL32.dll (000000007e410000 -
000000007e4a0000: C:\WINDOWS\system32\USER32.dll

*----> State Dump for Thread Id 0x1d0 <----*

eax=00000001 ebx=0013054e ecx=7ffdd000 edx=76b601c0 esi=00000000
edi=0007f218 eip=588b08df esp=0007f180 ebp=0007f184 iopl=0 nv
up ei ng nz ac po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b
gs=0000 efl=00000296

*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4
(588a14b4)] 588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call mmsys!DllCanUnloadNow+0x57bf
(588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480
(588a1480)] 588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call mmsys!DllCanUnloadNow+0x5835
(588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c
(588a148c)]

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may
be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\USER32.dll -
*** ERROR: Module load completed but symbols could not be loaded for
C:\WINDOWS\system32\rundll32.exe
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0007f184 588b1109 00000000 0013054e 0007f218
mmsys!DllCanUnloadNow+0x5904 0007f1a0 588b1184 0013054e 588b1168
0007f1dc mmsys!DllCanUnloadNow+0x612e 0007f1b0 7e418734 000a0180
0000c09e 00000000 mmsys!DllCanUnloadNow+0x61a9 0007f1dc 7e418816
588b1168 000a0180 0000c09e USER32!GetDC+0x6d 0007f244 7e41c63f
00098af8 588b1168 000a0180 USER32!GetDC+0x14f 0007f274 7e41c665
588b1168 000a0180 0000c09e USER32!IsWindowUnicode+0xa1 0007f294
588c1037 588b1168 000a0180 0000c09e USER32!CallWindowProcW+0x1b
0007f2b4 7e418734 000a0180 0000c09e 00000000 mmsys+0x21037 0007f2e0
7e418816 588c1005 000a0180 0000c09e USER32!GetDC+0x6d 0007f348
7e41c63f 00098af8 588c1005 000a0180 USER32!GetDC+0x14f 0007f378
7e41c665 588c1005 000a0180 0000c09e USER32!IsWindowUnicode+0xa1
0007f398 588bf79e 588c1005 000a0180 0000c09e
USER32!CallWindowProcW+0x1b 0007f3b8 7e418734 000a0180 0000c09e
00000000 mmsys+0x1f79e 0007f3e4 7e418816 588bf76c 000a0180 0000c09e
USER32!GetDC+0x6d 0007f44c 7e4189cd 00098af8 588bf76c 000a0180
USER32!GetDC+0x14f 0007f4ac 7e418a10 0007f4d4 00000000 0007f4f4
USER32!GetWindowLongW+0x127 0007f4bc 7e42dbbf 0007f4d4 00000000
00000000 USER32!DispatchMessageW+0xf 0007f4f4 7e42593f 001c04e2
00000000 00000000 USER32!CallMsgFilterW+0x213 0007f51c 7e43a91e
7e410000 00149228 00000000 USER32!DrawStateW+0x1f2 0007f7dc 7e43a284
0007f938 01001100 00000000 USER32!SoftModalMessageBox+0x677 0007f92c
7e4661d3 0007f938 00000028 00000000 USER32!MessageBoxIndirectA+0x23a
0007f984 7e4505f3 00000000 0007f9e8 01001100
USER32!MessageBoxTimeoutW+0x7a 0007f9a4 7e46634f 00000000 0007f9e8
01001100 USER32!MessageBoxExW+0x1b 0007f9c0 0100154d 00000000
0007f9e8 01001100 USER32!MessageBoxW+0x45 0007ff14 01001ade 00000000
00000311 01001100 rundll32+0x154d 0007ff60 01001bcf 01000000 00000000
0002066a rundll32+0x1ade 0007ffc0 7c816fd7 80000001 0007ed80 7ffde000
rundll32+0x1bcf 0007fff0 00000000 01001bdc 00000000 78746341
kernel32!RegisterWaitForInputIdle+0x49

*----> Raw Stack Dump <----*
000000000007f180 00 00 00 00 a0 f1 07 00 - 09 11 8b 58 00 00 00 00
...........X....
000000000007f190 4e 05 13 00 18 f2 07 00 - 9e c0 00 00 00 00 00 00
N...............
000000000007f1a0 b0 f1 07 00 84 11 8b 58 - 4e 05 13 00 68 11 8b 58
.......XN...h..X
000000000007f1b0 dc f1 07 00 34 87 41 7e - 80 01 0a 00 9e c0 00 00
....4.A~........
000000000007f1c0 00 00 00 00 00 00 00 00 - 68 11 8b 58 cd ab ba dc
........h..X....
000000000007f1d0 00 00 00 00 18 f2 07 00 - 68 11 8b 58 44 f2 07 00
........h..XD...
000000000007f1e0 16 88 41 7e 68 11 8b 58 - 80 01 0a 00 9e c0 00 00
..A~h..X........
000000000007f1f0 00 00 00 00 00 00 00 00 - 9e c0 00 00 68 11 8b 58
............h..X
000000000007f200 00 00 00 00 14 00 00 00 - 01 00 00 00 00 00 00 00
................
000000000007f210 00 00 00 00 10 00 00 00 - 00 00 00 00 01 00 00 00
................
000000000007f220 01 00 00 00 00 00 00 00 - 00 00 00 00 f8 f1 07 00
................
000000000007f230 a4 ed 07 00 38 f3 07 00 - 57 04 44 7e 30 88 41 7e
....8...W.D~0.A~
000000000007f240 00 00 00 00 74 f2 07 00 - 3f c6 41 7e f8 8a 09 00
....t...?.A~....
000000000007f250 68 11 8b 58 80 01 0a 00 - 9e c0 00 00 00 00 00 00
h..X............
000000000007f260 00 00 00 00 00 00 00 00 - 00 00 00 00 1c f3 07 00
................
000000000007f270 9e c0 00 00 94 f2 07 00 - 65 c6 41 7e 68 11 8b 58
........e.A~h..X
000000000007f280 80 01 0a 00 9e c0 00 00 - 00 00 00 00 00 00 00 00
................
000000000007f290 00 00 00 00 b4 f2 07 00 - 37 10 8c 58 68 11 8b 58
........7..Xh..X
000000000007f2a0 80 01 0a 00 9e c0 00 00 - 00 00 00 00 00 00 00 00
................
000000000007f2b0 05 10 8c 58 e0 f2 07 00 - 34 87 41 7e 80 01 0a 00
...X....4.A~....

*----> State Dump for Thread Id 0x758 <----*

eax=72d230e8 ebx=00b3fef8 ecx=000000d8 edx=000bb500 esi=00000000
edi=7ffde000 eip=7c90eb94 esp=00b3fed0 ebp=00b3ff6c iopl=0 nv
up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b
gs=0000 efl=00000246

*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\ntdll.dll -
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may
be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\wdmaud.drv -
ChildEBP RetAddr Args to Child
00b3ff6c 7c80a075 00000002 00b3ffa4 00000000 ntdll!KiFastSystemCallRet
00b3ff88 72d2312a 00000002 00b3ffa4 00000000
kernel32!WaitForMultipleObjects+0x18
00b3ffb4 7c80b683 00000000 00000008 00090000 wdmaud!midMessage+0x348
00b3ffec 00000000 72d230e8 00000000 00000000
kernel32!GetModuleFileNameA+0x1b4

*----> Raw Stack Dump <----*
0000000000b3fed0 ab e9 90 7c e2 94 80 7c - 02 00 00 00 f8 fe b3 00
...|...|........
0000000000b3fee0 01 00 00 00 00 00 00 00 - 00 00 00 00 08 00 00 00
................
0000000000b3fef0 00 00 00 00 00 00 00 00 - e4 00 00 00 d8 00 00 00
................
0000000000b3ff00 14 ff b3 00 f0 25 80 7c - 20 25 80 7c 18 bf 16 00
.....%.| %.|....
0000000000b3ff10 b9 4c 83 7c 14 00 00 00 - 14 00 00 00 01 00 00 00
.L.|............
0000000000b3ff20 10 50 0a 00 00 00 00 00 - 00 00 00 00 10 57 15 00
.P...........W..
0000000000b3ff30 00 e0 fd 7f 00 c0 fd 7f - 00 e0 fd 7f 00 c0 fd 7f
................
0000000000b3ff40 08 ff b3 00 00 00 00 00 - f8 fe b3 00 a8 9a 83 7c
...............|
0000000000b3ff50 02 00 00 00 ec fe b3 00 - f0 25 80 7c dc ff b3 00
.........%.|....
0000000000b3ff60 a8 9a 83 7c d8 95 80 7c - 00 00 00 00 88 ff b3 00
...|...|........
0000000000b3ff70 75 a0 80 7c 02 00 00 00 - a4 ff b3 00 00 00 00 00
u..|............
0000000000b3ff80 ff ff ff ff 00 00 00 00 - b4 ff b3 00 2a 31 d2 72
............*1.r
0000000000b3ff90 02 00 00 00 a4 ff b3 00 - 00 00 00 00 ff ff ff ff
................
0000000000b3ffa0 00 00 09 00 e4 00 00 00 - d8 00 00 00 01 00 00 00
................
0000000000b3ffb0 14 00 00 00 ec ff b3 00 - 83 b6 80 7c 00 00 00 00
...........|....
0000000000b3ffc0 08 00 00 00 00 00 09 00 - 00 00 00 00 00 c0 fd 7f
................
0000000000b3ffd0 00 16 db 89 c0 ff b3 00 - 28 9d 16 89 ff ff ff ff
........(.......
0000000000b3ffe0 a8 9a 83 7c 90 b6 80 7c - 00 00 00 00 00 00 00 00
...|...|........
0000000000b3fff0 00 00 00 00 e8 30 d2 72 - 00 00 00 00 00 00 00 00
.....0.r........
0000000000b40000 08 00 00 00 c0 60 00 00 - 00 00 00 00 ff ff ff ff
.....`..........

*----> State Dump for Thread Id 0x7b8 <----*

eax=00000088 ebx=00151068 ecx=7c91094e edx=7c97e4c0 esi=7c90d850
edi=71ab40e6 eip=7c90eb94 esp=00dbfe88 ebp=00dbffb4 iopl=0 nv
up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b
gs=0000 efl=00000246

function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may
be wrong.
ChildEBP RetAddr Args to Child
00dbffb4 7c80b683 00151068 71ab40e6 71ac0f0a ntdll!KiFastSystemCallRet
00dbffec 00000000 71aa2b11 00151068 00000000
kernel32!GetModuleFileNameA+0x1b4

*----> Raw Stack Dump <----*
0000000000dbfe88 5c d8 90 7c 87 2b aa 71 - 01 00 00 00 9c fe db 00
\..|.+.q........
0000000000dbfe98 0a 0f ac 71 00 00 00 00 - 00 00 00 80 28 fc 24 b1
...q........(.$.
0000000000dbfea8 27 44 6e 80 43 3a 5c 57 - 49 4e 44 4f 57 53 5c 73
'Dn.C:\WINDOWS\s
0000000000dbfeb8 79 73 74 65 6d 33 32 5c - 57 53 32 48 45 4c 50 2e
ystem32\WS2HELP.
0000000000dbfec8 64 6c 6c 00 30 29 7d 89 - db 5f 00 00 00 00 00 00
dll.0)}.._......
0000000000dbfed8 43 61 00 00 f0 d1 df 89 - 00 00 00 00 00 00 00 00
Ca..............
0000000000dbfee8 00 00 00 00 1f 00 00 00 - ff ff ff ff 40 85 b3 ba
............@...
0000000000dbfef8 00 00 00 00 10 44 6e 80 - bc d1 c9 89 28 fc 24 b1
.....Dn.....(.$.
0000000000dbff08 00 00 00 00 27 44 6e 80 - 08 00 00 00 46 02 00 00
....'Dn.....F...
0000000000dbff18 48 2d 50 80 90 d0 c9 89 - 20 d0 c9 89 20 af 4f 80
H-P..... ... .O.
0000000000dbff28 8c d1 c9 89 20 d0 c9 89 - 54 d0 c9 89 a5 61 00 00
.... ...T....a..
0000000000dbff38 ac 18 64 80 a0 9d 1a 89 - 20 d0 c9 89 00 90 fd 7f
..d..... .......
0000000000dbff48 88 fc 24 b1 62 24 50 80 - 00 00 00 00 05 00 00 00
..$.b$P.........
0000000000dbff58 00 00 00 00 00 00 00 00 - 00 00 00 00 da ed 4f 80
..............O.
0000000000dbff68 60 fc 24 b1 54 d0 c9 89 - 96 ee 4f 80 27 44 6e 80
`.$.T.....O.'Dn.
0000000000dbff78 20 d0 c9 89 50 fd 24 b1 - 00 00 00 00 08 d1 c9 89
...P.$.........
0000000000dbff88 01 9c a7 88 00 00 00 00 - a0 9d 1a 89 42 24 50 80
............B$P.
0000000000dbff98 00 00 00 00 00 00 00 00 - 00 00 00 00 4a 24 50 80
............J$P.
0000000000dbffa8 a0 fc 24 b1 f2 4e 6e 80 - fa 8f 00 00 ec ff db 00
..$..Nn.........
0000000000dbffb8 83 b6 80 7c 68 10 15 00 - e6 40 ab 71 0a 0f ac 71
...|[email protected]

*----> State Dump for Thread Id 0x590 <----*

eax=77e76bf0 ebx=00000000 ecx=00000009 edx=7c910732 esi=001549c8
edi=00154a6c eip=7c90eb94 esp=00f4fe1c ebp=00f4ff80 iopl=0 nv
up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b
gs=0000 efl=00000246

function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
---------------------------------------------------------------------------------------------

I don't understand what that data means, but hopefully someone here
might
get an idea of what is happening, and can tell me how to resolve the
problems. Changing Driver versions did not seem to help, and I have
checked extensivley thru MS, the motherboard + Sound card maker, web
searched, Etc. , but could not find anyplace where someone else was
having the same kind of problems. Memtest has shon no errors, and
everything else has been running just fine, even sound itself,
actually. I am hoping it's just a matter of something like needing to
replace a bad file or setting that is affecting these things.

I would appreciate any help or advice!

Guest · Aug 15, 2007

Hello, and thank you for replying.

My Windows Disk/version is an OEM XP Pro CD WITH SP2. ( I just bought it a
month ago with rest of my PC build parts).

NORMAL view of Device Manager Shows NO Problem-type Devices (no Explanation
marks, etc.) HIDDEN Devices show a "Serial" entry with ywllow ! under Non
Plug and Play Drivers and a Parport entry under same area with similar yellow
!. Both have codes of (24). They are Root_Legacy_TCPIP + Root_Legacy_Parport,
Respectivley.

SigVerif shows only 1 unsigned item, an Icm entry for my Viewsonic A75s)
Monitor(for which that was the last file(s) they made for that monitor). File
is located in C:\Windows\System32\Spool\Drivers\color Folder.

While I was waiting earlier, I had uninstalled the SoundMax Driver, went in
Safe Mode, and used Driver Cleaner Pro to clear any remnants. Just a few mins
ago, I tried installing yet another SoundMax driver version, the most recent
WHQL listed from ASUS Support site v5.10.1.6110. There were NO errors the
whole time the driver was uninstalled, no matter how I tried to re-produce
them. Just now, the following Error was quick to reproduce (Just clicking
around different tree lines in the Admin. Tools' Computer Management Window
once the driver was reinstalled....
-----------------------------------------------------------------------------------------------
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 8/15/2007
Time: 5:23:17 AM
User: N/A
Computer: WOLVES-DEN
Description:
Faulting application mmc.exe, version 5.1.2600.2180, faulting module
ntdll.dll, version 5.1.2600.2180, fault address 0x0001201e.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 6d 6d 63 ure mmc
0018: 2e 65 78 65 20 35 2e 31 .exe 5.1
0020: 2e 32 36 30 30 2e 32 31 .2600.21
0028: 38 30 20 69 6e 20 6e 74 80 in nt
0030: 64 6c 6c 2e 64 6c 6c 20 dll.dll
0038: 35 2e 31 2e 32 36 30 30 5.1.2600
0040: 2e 32 31 38 30 20 61 74 .2180 at
0048: 20 6f 66 66 73 65 74 20 offset
0050: 30 30 30 31 32 30 31 65 0001201e
0058: 0d 0a ..

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 8/15/2007
Time: 5:23:21 AM
User: N/A
Computer: WOLVES-DEN
Description:
Fault bucket 170130483.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 37 30 31 33 30 34 38 17013048
0010: 33 0d 0a 3..

-----------------------------------------------------------------------------------------------

Gerry said:
A better way to post Event Viewer Error Reports.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

Are there any yellow question marks in Device Manager? Right click on
the My Computer icon on your Desktop and select Properties,
Hardware,Device Manager. If yes what is the Device Error code?

Try Start, Run, type "sigverif.exe" without quotes and hit OK. What
drivers are listed as unsigned? Disregard those which are not checked.

Is your Windows XP CD Retail or OEM? Is it pre or post SP2?

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:

Hello,

I need to know what I can do about fixing whatever is causing these
following errors (Shown in Event Viewer Application Log)..:

8/12/2007 3:56 PM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 4:03 PM Application Error Fault bucket 129280599.

8/12/2007 4:20 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module ntdll.dll, version 5.1.2600.2180, fault
address 0x00011e5a.

8/12/2007 4:22 PM Application Error Fault bucket 130061967.

8/12/2007 5:39 PM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 5:42 PM Application Error Fault bucket 129280599.

8/12/2007 8:44 AM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 8:44 AM Application Error Fault bucket 129280599.

8/14/2007 9:00 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module filemgmt.dll, version 5.1.2600.2180,
fault address 0x0000db07.

8/14/2007 9:01 PM Application Error Fault bucket 169289715.&#x000a

Each Error should have it's associated "Bucket" next to it.

To describe, I just installed XP Pro recentley on a new PC build,
installed all available updates as they were available up to 2 days
ago, and had begun to install Necessary Hardware Drivers. Chipset,
onboard Raid and Network all went fine. Nvidia Driver 158.22 and
Viewsonic Monitor drivers also seemed to go well.

Then I go to installing my Sound Driver (SoundMax ADI 1988B), and
noticed
the first errors start to occur a little while later on, while doing
and checking certain things on the PC.

The Errors related to Rundll32.exe/ mmsys.cpl seemed to occur at
random when making adjustments to the Control Panel's sound settings
(Both Windows control panel, and on the SoundMax's panel.

The Errors Related to mmc.exe/ Ntdll.dll + mmc.exe/ filemgmt.dll
occured
when using parts of the Administrative Tools like Component Servicees,
Computer Management, Etc. The Errors would happen when just ckicking
thru the tree-listings in those utility's open windows to view their
info.

I would also add, that there is apparently a drwtsn32.txt file in
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr
Watson, which also contains info related to the errors, but the kind
of info inside is pretty much indecipherable to me. I'm not sure that
all of it would fit here, but most of it is very similar in nature
for each thread dump, so I'll see if I can put at least a bit of it
below, to show what it is listing. It seems to state similar info for
each thread/module down the list....

(part of drwtsn32.txt)
----------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=972)
When: 8/12/2007 @ 02:01:07.484
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: WOLVES-DEN
User Name: Van
Terminal Session Id: 0
Number of Processors: 2
Processor Type: x86 Family 6 Model 15 Stepping 6
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Multiprocessor Free
Registered Organization:
Registered Owner: Scott

*----> Task List <----*
0 System Process
4 System
584 smss.exe
640 csrss.exe
664 winlogon.exe
708 services.exe
720 lsass.exe
880 svchost.exe
940 svchost.exe
1040 svchost.exe
1132 svchost.exe
1208 svchost.exe
1416 spoolsv.exe
1628 Explorer.EXE
1828 nvraidservice.exe
1860 RUNDLL32.EXE
1884 smax4pnp.exe
1892 Smax4.exe
1904 ctfmon.exe
212 nvsvc32.exe
516 nSvcAppFlt.exe
540 nSvcIp.exe
1032 wmiprvse.exe
1948 alg.exe
836 unsecapp.exe
324 wscntfy.exe
468 hh.exe
972 rundll32.exe
136 sndvol32.exe
1308 sndvol32.exe
1540 sndvol32.exe
480 dwwin.exe
472 drwtsn32.exe

*----> Module List <----*
(0000000001000000 - 000000000100b000: C:\WINDOWS\system32\rundll32.exe
(000000000ffd0000 - 000000000fff8000: C:\WINDOWS\system32\rsaenh.dll
(0000000010000000 - 0000000010023000:
C:\WINDOWS\system32\nvappfilter.dll (0000000020000000 -
00000000202c5000: C:\WINDOWS\system32\xpsp2res.dll (00000000581a0000
- 00000000581d9000: C:\WINDOWS\system32\iac25_32.ax (00000000582d0000
- 00000000582d4000: C:\WINDOWS\system32\tssoft32.acm
(00000000582e0000 - 00000000582fe000: C:\WINDOWS\system32\sl_anet.acm
(0000000058300000 - 0000000058308000: C:\WINDOWS\system32\msgsm32.acm
(0000000058310000 - 000000005832d000: C:\WINDOWS\system32\msg723.acm
(0000000058330000 - 0000000058335000: C:\WINDOWS\system32\msg711.acm
(0000000058340000 - 000000005838d000: C:\WINDOWS\system32\msaud32.acm
(0000000058390000 - 000000005841a000:
C:\WINDOWS\system32\l3codeca.acm (0000000058420000 -
0000000058427000: C:\WINDOWS\system32\imaadp32.acm (00000000588a0000
- 000000005893f000: C:\WINDOWS\system32\mmsys.cpl (000000005ad70000 -
000000005ada8000: C:\WINDOWS\system32\UxTheme.dll (000000005b860000 -
000000005b8b4000: C:\WINDOWS\system32\netapi32.dll (000000005cb70000
- 000000005cb96000: C:\WINDOWS\system32\ShimEng.dll (000000005d090000
- 000000005d12a000: C:\WINDOWS\system32\comctl32.dll
(0000000060da0000 - 0000000060dff000: C:\WINDOWS\system32\dpnet.dll
(00000000662b0000 - 0000000066308000: C:\WINDOWS\system32\hnetcfg.dll
(000000006c5f0000 - 000000006c60f000: C:\WINDOWS\system32\dpvvox.dll
(000000006c610000 - 000000006c647000: C:\WINDOWS\system32\dpvoice.dll
(000000006c650000 - 000000006c658000: C:\WINDOWS\system32\dpvacm.dll
(000000006f880000 - 000000006fa4a000:
C:\WINDOWS\AppPatch\AcGenral.DLL (0000000071a50000 -
0000000071a8f000: C:\WINDOWS\system32\mswsock.dll (0000000071a90000 -
0000000071a98000: C:\WINDOWS\System32\wshtcpip.dll (0000000071aa0000
- 0000000071aa8000: C:\WINDOWS\system32\WS2HELP.dll (0000000071ab0000
- 0000000071ac7000: C:\WINDOWS\system32\WS2_32.dll (0000000071b20000
- 0000000071b32000: C:\WINDOWS\system32\MPR.dll (0000000072a90000 -
0000000072ad8000: C:\WINDOWS\system32\DEVMGR.DLL (0000000072cf0000 -
0000000072cf7000: C:\WINDOWS\system32\msadp32.acm (0000000072d10000 -
0000000072d18000: C:\WINDOWS\system32\msacm32.drv (0000000072d20000 -
0000000072d29000: C:\WINDOWS\system32\wdmaud.drv (0000000073b70000 -
0000000073b77000: C:\WINDOWS\system32\tsd32.dll (0000000073ee0000 -
0000000073ee4000: C:\WINDOWS\system32\KsUser.dll (0000000073f10000 -
0000000073f6c000: C:\WINDOWS\system32\dsound.dll (0000000074720000 -
000000007476b000: C:\WINDOWS\system32\MSCTF.dll (0000000075150000 -
0000000075164000: C:\WINDOWS\system32\Cabinet.dll (00000000755c0000 -
00000000755ee000: C:\WINDOWS\system32\msctfime.ime (0000000075e90000
- 0000000075f40000: C:\WINDOWS\system32\SXS.DLL (0000000076390000 -
00000000763ad000: C:\WINDOWS\system32\IMM32.DLL (00000000763b0000 -
00000000763f9000: C:\WINDOWS\system32\Comdlg32.dll (00000000769c0000
- 0000000076a73000: C:\WINDOWS\system32\USERENV.dll (0000000076b40000
- 0000000076b6d000: C:\WINDOWS\system32\WINMM.dll (0000000076bf0000 -
0000000076bfb000: C:\WINDOWS\system32\PSAPI.DLL (0000000076c30000 -
0000000076c5e000: C:\WINDOWS\system32\WINTRUST.dll (0000000076c90000
- 0000000076cb8000: C:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d30000 - 0000000076d34000: C:\WINDOWS\system32\WMI.dll
(0000000076f20000 - 0000000076f47000: C:\WINDOWS\system32\DNSAPI.dll
(0000000076f60000 - 0000000076f8c000: C:\WINDOWS\system32\WLDAP32.dll
(0000000076fb0000 - 0000000076fb8000: C:\WINDOWS\System32\winrnr.dll
(0000000076fc0000 - 0000000076fc6000:
C:\WINDOWS\system32\rasadhlp.dll (0000000076fd0000 -
000000007704f000: C:\WINDOWS\system32\CLBCATQ.DLL (0000000077050000 -
0000000077115000: C:\WINDOWS\system32\COMRes.dll (0000000077120000 -
00000000771ac000: C:\WINDOWS\system32\OLEAUT32.dll (00000000773d0000
- 00000000774d3000:
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
(00000000774e0000 - 000000007761d000: C:\WINDOWS\system32\ole32.dll
(0000000077920000 - 0000000077a13000:
C:\WINDOWS\system32\SETUPAPI.dll (0000000077a80000 -
0000000077b14000: C:\WINDOWS\system32\CRYPT32.dll (0000000077b20000 -
0000000077b32000: C:\WINDOWS\system32\MSASN1.dll (0000000077b40000 -
0000000077b62000: C:\WINDOWS\system32\appHelp.dll (0000000077bd0000 -
0000000077bd7000: C:\WINDOWS\system32\midimap.dll (0000000077be0000 -
0000000077bf5000: C:\WINDOWS\system32\MSACM32.dll (0000000077c00000 -
0000000077c08000: C:\WINDOWS\system32\VERSION.dll (0000000077c10000 -
0000000077c68000: C:\WINDOWS\system32\msvcrt.dll (0000000077dd0000 -
0000000077e6b000: C:\WINDOWS\system32\ADVAPI32.dll (0000000077e70000
- 0000000077f01000: C:\WINDOWS\system32\RPCRT4.dll (0000000077f10000
- 0000000077f57000: C:\WINDOWS\system32\GDI32.dll (0000000077f60000 -
0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll (0000000077fe0000 -
0000000077ff1000: C:\WINDOWS\system32\secur32.dll (000000007c800000 -
000000007c8f5000: C:\WINDOWS\system32\kernel32.dll (000000007c900000
- 000000007c9b0000: C:\WINDOWS\system32\ntdll.dll (000000007c9c0000 -
000000007d1d5000: C:\WINDOWS\system32\SHELL32.dll (000000007e410000 -
000000007e4a0000: C:\WINDOWS\system32\USER32.dll

*----> State Dump for Thread Id 0x1d0 <----*

eax=00000001 ebx=0013054e ecx=7ffdd000 edx=76b601c0 esi=00000000
edi=0007f218 eip=588b08df esp=0007f180 ebp=0007f184 iopl=0 nv
up ei ng nz ac po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b
gs=0000 efl=00000296

*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4
(588a14b4)] 588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call mmsys!DllCanUnloadNow+0x57bf
(588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480
(588a1480)] 588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call mmsys!DllCanUnloadNow+0x5835
(588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c
(588a148c)]

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may
be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\USER32.dll -
*** ERROR: Module load completed but symbols could not be loaded for
C:\WINDOWS\system32\rundll32.exe
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0007f184 588b1109 00000000 0013054e 0007f218
mmsys!DllCanUnloadNow+0x5904 0007f1a0 588b1184 0013054e 588b1168
0007f1dc mmsys!DllCanUnloadNow+0x612e 0007f1b0 7e418734 000a0180
0000c09e 00000000 mmsys!DllCanUnloadNow+0x61a9 0007f1dc 7e418816
588b1168 000a0180 0000c09e USER32!GetDC+0x6d 0007f244 7e41c63f
00098af8 588b1168 000a0180 USER32!GetDC+0x14f 0007f274 7e41c665
588b1168 000a0180 0000c09e USER32!IsWindowUnicode+0xa1 0007f294
588c1037 588b1168 000a0180 0000c09e USER32!CallWindowProcW+0x1b
0007f2b4 7e418734 000a0180 0000c09e 00000000 mmsys+0x21037 0007f2e0
7e418816 588c1005 000a0180 0000c09e USER32!GetDC+0x6d 0007f348
7e41c63f 00098af8 588c1005 000a0180 USER32!GetDC+0x14f 0007f378
7e41c665 588c1005 000a0180 0000c09e USER32!IsWindowUnicode+0xa1
0007f398 588bf79e 588c1005 000a0180 0000c09e
USER32!CallWindowProcW+0x1b 0007f3b8 7e418734 000a0180 0000c09e

Click to expand...

Gerry · Aug 15, 2007

I would try Start, Run, type "sfc /scannow" without quotes
and hit Enter.

Description of Windows XP and Windows Server 2003 System
File Checker (Sfc.exe)
http://support.microsoft.com/default.aspx?scid=kb;en-us;310747

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:
Hello, and thank you for replying.

My Windows Disk/version is an OEM XP Pro CD WITH SP2. ( I just bought
it a month ago with rest of my PC build parts).

NORMAL view of Device Manager Shows NO Problem-type Devices (no
Explanation marks, etc.) HIDDEN Devices show a "Serial" entry with
ywllow ! under Non Plug and Play Drivers and a Parport entry under
same area with similar yellow !. Both have codes of (24). They are
Root_Legacy_TCPIP + Root_Legacy_Parport, Respectivley.

SigVerif shows only 1 unsigned item, an Icm entry for my Viewsonic
A75s) Monitor(for which that was the last file(s) they made for that
monitor). File is located in C:\Windows\System32\Spool\Drivers\color
Folder.

While I was waiting earlier, I had uninstalled the SoundMax Driver,
went in Safe Mode, and used Driver Cleaner Pro to clear any remnants.
Just a few mins ago, I tried installing yet another SoundMax driver
version, the most recent WHQL listed from ASUS Support site
v5.10.1.6110. There were NO errors the whole time the driver was
uninstalled, no matter how I tried to re-produce them. Just now, the
following Error was quick to reproduce (Just clicking around
different tree lines in the Admin. Tools' Computer Management Window
once the driver was reinstalled....:
-----------------------------------------------------------------------------------------------
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 8/15/2007
Time: 5:23:17 AM
User: N/A
Computer: WOLVES-DEN
Description:
Faulting application mmc.exe, version 5.1.2600.2180, faulting module
ntdll.dll, version 5.1.2600.2180, fault address 0x0001201e.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 6d 6d 63 ure mmc
0018: 2e 65 78 65 20 35 2e 31 .exe 5.1
0020: 2e 32 36 30 30 2e 32 31 .2600.21
0028: 38 30 20 69 6e 20 6e 74 80 in nt
0030: 64 6c 6c 2e 64 6c 6c 20 dll.dll
0038: 35 2e 31 2e 32 36 30 30 5.1.2600
0040: 2e 32 31 38 30 20 61 74 .2180 at
0048: 20 6f 66 66 73 65 74 20 offset
0050: 30 30 30 31 32 30 31 65 0001201e
0058: 0d 0a ..

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 8/15/2007
Time: 5:23:21 AM
User: N/A
Computer: WOLVES-DEN
Description:
Fault bucket 170130483.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 37 30 31 33 30 34 38 17013048
0010: 33 0d 0a 3..

-----------------------------------------------------------------------------------------------

Gerry said:

A better way to post Event Viewer Error Reports.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and close
Event Viewer.Now start your message (email) and do a paste into the
body of the message. Make sure this is the first paste after exiting
from Event Viewer.

Are there any yellow question marks in Device Manager? Right click on
the My Computer icon on your Desktop and select Properties,
Hardware,Device Manager. If yes what is the Device Error code?

Try Start, Run, type "sigverif.exe" without quotes and hit OK. What
drivers are listed as unsigned? Disregard those which are not
checked.

Is your Windows XP CD Retail or OEM? Is it pre or post SP2?

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:

Hello,

I need to know what I can do about fixing whatever is causing these
following errors (Shown in Event Viewer Application Log)..:

8/12/2007 3:56 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 4:03 PM Application Error Fault bucket 129280599.

8/12/2007 4:20 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module ntdll.dll, version 5.1.2600.2180,
fault address 0x00011e5a.

8/12/2007 4:22 PM Application Error Fault bucket 130061967.

8/12/2007 5:39 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 5:42 PM Application Error Fault bucket 129280599.

8/12/2007 8:44 AM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 8:44 AM Application Error Fault bucket 129280599.

8/14/2007 9:00 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module filemgmt.dll, version 5.1.2600.2180,
fault address 0x0000db07.

8/14/2007 9:01 PM Application Error Fault bucket 169289715.&#x000a

Each Error should have it's associated "Bucket" next to it.

To describe, I just installed XP Pro recentley on a new PC build,
installed all available updates as they were available up to 2 days
ago, and had begun to install Necessary Hardware Drivers. Chipset,
onboard Raid and Network all went fine. Nvidia Driver 158.22 and
Viewsonic Monitor drivers also seemed to go well.

Then I go to installing my Sound Driver (SoundMax ADI 1988B), and
noticed
the first errors start to occur a little while later on, while doing
and checking certain things on the PC.

The Errors related to Rundll32.exe/ mmsys.cpl seemed to occur at
random when making adjustments to the Control Panel's sound settings
(Both Windows control panel, and on the SoundMax's panel.

The Errors Related to mmc.exe/ Ntdll.dll + mmc.exe/ filemgmt.dll
occured
when using parts of the Administrative Tools like Component
Servicees, Computer Management, Etc. The Errors would happen when
just ckicking thru the tree-listings in those utility's open
windows to view their info.

I would also add, that there is apparently a drwtsn32.txt file in
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr
Watson, which also contains info related to the errors, but the kind
of info inside is pretty much indecipherable to me. I'm not sure
that all of it would fit here, but most of it is very similar in
nature for each thread dump, so I'll see if I can put at least a
bit of it below, to show what it is listing. It seems to state
similar info for each thread/module down the list....

(part of drwtsn32.txt)
----------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=972)
When: 8/12/2007 @ 02:01:07.484
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: WOLVES-DEN
User Name: Van
Terminal Session Id: 0
Number of Processors: 2
Processor Type: x86 Family 6 Model 15 Stepping 6
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Multiprocessor Free
Registered Organization:
Registered Owner: Scott

*----> Task List <----*
0 System Process
4 System
584 smss.exe
640 csrss.exe
664 winlogon.exe
708 services.exe
720 lsass.exe
880 svchost.exe
940 svchost.exe
1040 svchost.exe
1132 svchost.exe
1208 svchost.exe
1416 spoolsv.exe
1628 Explorer.EXE
1828 nvraidservice.exe
1860 RUNDLL32.EXE
1884 smax4pnp.exe
1892 Smax4.exe
1904 ctfmon.exe
212 nvsvc32.exe
516 nSvcAppFlt.exe
540 nSvcIp.exe
1032 wmiprvse.exe
1948 alg.exe
836 unsecapp.exe
324 wscntfy.exe
468 hh.exe
972 rundll32.exe
136 sndvol32.exe
1308 sndvol32.exe
1540 sndvol32.exe
480 dwwin.exe
472 drwtsn32.exe

*----> Module List <----*
(0000000001000000 - 000000000100b000:
C:\WINDOWS\system32\rundll32.exe (000000000ffd0000 -
000000000fff8000: C:\WINDOWS\system32\rsaenh.dll (0000000010000000
- 0000000010023000: C:\WINDOWS\system32\nvappfilter.dll
(0000000020000000 - 00000000202c5000:
C:\WINDOWS\system32\xpsp2res.dll (00000000581a0000
- 00000000581d9000: C:\WINDOWS\system32\iac25_32.ax
(00000000582d0000
- 00000000582d4000: C:\WINDOWS\system32\tssoft32.acm
(00000000582e0000 - 00000000582fe000:
C:\WINDOWS\system32\sl_anet.acm (0000000058300000 -
0000000058308000: C:\WINDOWS\system32\msgsm32.acm (0000000058310000
- 000000005832d000: C:\WINDOWS\system32\msg723.acm
(0000000058330000 - 0000000058335000:
C:\WINDOWS\system32\msg711.acm (0000000058340000 -
000000005838d000: C:\WINDOWS\system32\msaud32.acm (0000000058390000
- 000000005841a000: C:\WINDOWS\system32\l3codeca.acm
(0000000058420000 - 0000000058427000:
C:\WINDOWS\system32\imaadp32.acm (00000000588a0000 -
000000005893f000: C:\WINDOWS\system32\mmsys.cpl (000000005ad70000 -
000000005ada8000: C:\WINDOWS\system32\UxTheme.dll (000000005b860000
- 000000005b8b4000: C:\WINDOWS\system32\netapi32.dll
(000000005cb70000
- 000000005cb96000: C:\WINDOWS\system32\ShimEng.dll
(000000005d090000
- 000000005d12a000: C:\WINDOWS\system32\comctl32.dll
(0000000060da0000 - 0000000060dff000: C:\WINDOWS\system32\dpnet.dll
(00000000662b0000 - 0000000066308000:
C:\WINDOWS\system32\hnetcfg.dll (000000006c5f0000 -
000000006c60f000: C:\WINDOWS\system32\dpvvox.dll (000000006c610000
- 000000006c647000: C:\WINDOWS\system32\dpvoice.dll
(000000006c650000 - 000000006c658000:
C:\WINDOWS\system32\dpvacm.dll (000000006f880000 -
000000006fa4a000: C:\WINDOWS\AppPatch\AcGenral.DLL
(0000000071a50000 - 0000000071a8f000:
C:\WINDOWS\system32\mswsock.dll (0000000071a90000 -
0000000071a98000: C:\WINDOWS\System32\wshtcpip.dll
(0000000071aa0000
- 0000000071aa8000: C:\WINDOWS\system32\WS2HELP.dll
(0000000071ab0000
- 0000000071ac7000: C:\WINDOWS\system32\WS2_32.dll (0000000071b20000
- 0000000071b32000: C:\WINDOWS\system32\MPR.dll (0000000072a90000 -
0000000072ad8000: C:\WINDOWS\system32\DEVMGR.DLL (0000000072cf0000 -
0000000072cf7000: C:\WINDOWS\system32\msadp32.acm (0000000072d10000
- 0000000072d18000: C:\WINDOWS\system32\msacm32.drv
(0000000072d20000 - 0000000072d29000:
C:\WINDOWS\system32\wdmaud.drv (0000000073b70000 -
0000000073b77000: C:\WINDOWS\system32\tsd32.dll (0000000073ee0000 -
0000000073ee4000: C:\WINDOWS\system32\KsUser.dll (0000000073f10000
- 0000000073f6c000: C:\WINDOWS\system32\dsound.dll
(0000000074720000 - 000000007476b000: C:\WINDOWS\system32\MSCTF.dll
(0000000075150000 - 0000000075164000:
C:\WINDOWS\system32\Cabinet.dll (00000000755c0000 -
00000000755ee000: C:\WINDOWS\system32\msctfime.ime
(0000000075e90000 - 0000000075f40000: C:\WINDOWS\system32\SXS.DLL
(0000000076390000 - 00000000763ad000: C:\WINDOWS\system32\IMM32.DLL
(00000000763b0000 - 00000000763f9000:
C:\WINDOWS\system32\Comdlg32.dll (00000000769c0000
- 0000000076a73000: C:\WINDOWS\system32\USERENV.dll
(0000000076b40000
- 0000000076b6d000: C:\WINDOWS\system32\WINMM.dll (0000000076bf0000
- 0000000076bfb000: C:\WINDOWS\system32\PSAPI.DLL (0000000076c30000
- 0000000076c5e000: C:\WINDOWS\system32\WINTRUST.dll
(0000000076c90000 - 0000000076cb8000:
C:\WINDOWS\system32\IMAGEHLP.dll (0000000076d30000 -
0000000076d34000: C:\WINDOWS\system32\WMI.dll (0000000076f20000 -
0000000076f47000: C:\WINDOWS\system32\DNSAPI.dll (0000000076f60000
- 0000000076f8c000: C:\WINDOWS\system32\WLDAP32.dll
(0000000076fb0000 - 0000000076fb8000:
C:\WINDOWS\System32\winrnr.dll (0000000076fc0000 -
0000000076fc6000: C:\WINDOWS\system32\rasadhlp.dll
(0000000076fd0000 - 000000007704f000:
C:\WINDOWS\system32\CLBCATQ.DLL (0000000077050000 -
0000000077115000: C:\WINDOWS\system32\COMRes.dll (0000000077120000
- 00000000771ac000: C:\WINDOWS\system32\OLEAUT32.dll
(00000000773d0000 - 00000000774d3000:
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
(00000000774e0000 - 000000007761d000: C:\WINDOWS\system32\ole32.dll
(0000000077920000 - 0000000077a13000:
C:\WINDOWS\system32\SETUPAPI.dll (0000000077a80000 -
0000000077b14000: C:\WINDOWS\system32\CRYPT32.dll (0000000077b20000
- 0000000077b32000: C:\WINDOWS\system32\MSASN1.dll
(0000000077b40000 - 0000000077b62000:
C:\WINDOWS\system32\appHelp.dll (0000000077bd0000 -
0000000077bd7000: C:\WINDOWS\system32\midimap.dll (0000000077be0000
- 0000000077bf5000: C:\WINDOWS\system32\MSACM32.dll
(0000000077c00000 - 0000000077c08000:
C:\WINDOWS\system32\VERSION.dll (0000000077c10000 -
0000000077c68000: C:\WINDOWS\system32\msvcrt.dll (0000000077dd0000
- 0000000077e6b000: C:\WINDOWS\system32\ADVAPI32.dll
(0000000077e70000
- 0000000077f01000: C:\WINDOWS\system32\RPCRT4.dll (0000000077f10000
- 0000000077f57000: C:\WINDOWS\system32\GDI32.dll (0000000077f60000
- 0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll
(0000000077fe0000 - 0000000077ff1000:
C:\WINDOWS\system32\secur32.dll (000000007c800000 -
000000007c8f5000: C:\WINDOWS\system32\kernel32.dll
(000000007c900000 - 000000007c9b0000: C:\WINDOWS\system32\ntdll.dll
(000000007c9c0000 - 000000007d1d5000:
C:\WINDOWS\system32\SHELL32.dll (000000007e410000 -
000000007e4a0000: C:\WINDOWS\system32\USER32.dll

*----> State Dump for Thread Id 0x1d0 <----*

eax=00000001 ebx=0013054e ecx=7ffdd000 edx=76b601c0 esi=00000000
edi=0007f218 eip=588b08df esp=0007f180 ebp=0007f184 iopl=0
nv up ei ng nz ac po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b
gs=0000 efl=00000296

*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4
(588a14b4)] 588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call
mmsys!DllCanUnloadNow+0x57bf (588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480
(588a1480)] 588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call
mmsys!DllCanUnloadNow+0x5835 (588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c
(588a148c)]

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames
may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\USER32.dll -
*** ERROR: Module load completed but symbols could not be loaded for
C:\WINDOWS\system32\rundll32.exe
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0007f184 588b1109 00000000 0013054e 0007f218
mmsys!DllCanUnloadNow+0x5904 0007f1a0 588b1184 0013054e 588b1168
0007f1dc mmsys!DllCanUnloadNow+0x612e 0007f1b0 7e418734 000a0180
0000c09e 00000000 mmsys!DllCanUnloadNow+0x61a9 0007f1dc 7e418816
588b1168 000a0180 0000c09e USER32!GetDC+0x6d 0007f244 7e41c63f
00098af8 588b1168 000a0180 USER32!GetDC+0x14f 0007f274 7e41c665
588b1168 000a0180 0000c09e USER32!IsWindowUnicode+0xa1 0007f294
588c1037 588b1168 000a0180 0000c09e USER32!CallWindowProcW+0x1b
0007f2b4 7e418734 000a0180 0000c09e 00000000 mmsys+0x21037 0007f2e0
7e418816 588c1005 000a0180 0000c09e USER32!GetDC+0x6d 0007f348
7e41c63f 00098af8 588c1005 000a0180 USER32!GetDC+0x14f 0007f378
7e41c665 588c1005 000a0180 0000c09e USER32!IsWindowUnicode+0xa1
0007f398 588bf79e 588c1005 000a0180 0000c09e
USER32!CallWindowProcW+0x1b 0007f3b8 7e418734 000a0180 0000c09e

Click to expand...

Click to expand...

Guest · Aug 15, 2007

Not sure if this matters, but I might as well add, that while waiting for
further help, I tried running the SFC /SCANNOW. (I had tried this before,
too, after uninstalling the Sound Driver when I mentioned in previous reply.
Obviously, it did not help, since the Error I just posted with my last reply
had occured after re-installing the Sound Driver version I mentioned Above.

I did notice that in the Event Viewer-System Report, There was an
"INFORMATION" Event listing as follows:

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64021
Date: 8/15/2007
Time: 6:10:54 AM
User: N/A
Computer: WOLVES-DEN
Description:
The system file c:\windows\system32\plugin.ocx could not be copied into the
DLL cache. The specific error code is 0x00000000 [The operation completed
successfully.
]. This file is necessary to maintain system stability.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp

Gerry · Aug 15, 2007

What version of Internet Explorer are you using?

Check your Windows Update History for KB928090. An uninstall folder for
KB928090 is the only reference to plugin.ocx on my computer, which has
IE7 installed.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:
Not sure if this matters, but I might as well add, that while waiting
for further help, I tried running the SFC /SCANNOW. (I had tried this
before, too, after uninstalling the Sound Driver when I mentioned in
previous reply. Obviously, it did not help, since the Error I just
posted with my last reply had occured after re-installing the Sound
Driver version I mentioned Above.

I did notice that in the Event Viewer-System Report, There was an
"INFORMATION" Event listing as follows:

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64021
Date: 8/15/2007
Time: 6:10:54 AM
User: N/A
Computer: WOLVES-DEN
Description:
The system file c:\windows\system32\plugin.ocx could not be copied
into the DLL cache. The specific error code is 0x00000000 [The
operation completed successfully.
]. This file is necessary to maintain system stability.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
--------------------------------------------------------------------------------------------
This same entry was also made the first time I ran the SFC Scan
earlier, too. That was the only other listing, aside from the lines
noting the successful Start + Stop of the SFC scan.

werewolf_359 said:

Hello, and thank you for replying.

My Windows Disk/version is an OEM XP Pro CD WITH SP2. ( I just
bought it a month ago with rest of my PC build parts).

NORMAL view of Device Manager Shows NO Problem-type Devices (no
Explanation marks, etc.) HIDDEN Devices show a "Serial" entry with
ywllow ! under Non Plug and Play Drivers and a Parport entry under
same area with similar yellow !. Both have codes of (24). They are
Root_Legacy_TCPIP + Root_Legacy_Parport, Respectivley.

SigVerif shows only 1 unsigned item, an Icm entry for my Viewsonic
A75s) Monitor(for which that was the last file(s) they made for that
monitor). File is located in C:\Windows\System32\Spool\Drivers\color
Folder.

While I was waiting earlier, I had uninstalled the SoundMax Driver,
went in Safe Mode, and used Driver Cleaner Pro to clear any
remnants. Just a few mins ago, I tried installing yet another
SoundMax driver version, the most recent WHQL listed from ASUS
Support site v5.10.1.6110. There were NO errors the whole time the
driver was uninstalled, no matter how I tried to re-produce them.
Just now, the following Error was quick to reproduce (Just clicking
around different tree lines in the Admin. Tools' Computer Management
Window once the driver was reinstalled....:
-----------------------------------------------------------------------------------------------
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 8/15/2007
Time: 5:23:17 AM
User: N/A
Computer: WOLVES-DEN
Description:
Faulting application mmc.exe, version 5.1.2600.2180, faulting module
ntdll.dll, version 5.1.2600.2180, fault address 0x0001201e.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 6d 6d 63 ure mmc
0018: 2e 65 78 65 20 35 2e 31 .exe 5.1
0020: 2e 32 36 30 30 2e 32 31 .2600.21
0028: 38 30 20 69 6e 20 6e 74 80 in nt
0030: 64 6c 6c 2e 64 6c 6c 20 dll.dll
0038: 35 2e 31 2e 32 36 30 30 5.1.2600
0040: 2e 32 31 38 30 20 61 74 .2180 at
0048: 20 6f 66 66 73 65 74 20 offset
0050: 30 30 30 31 32 30 31 65 0001201e
0058: 0d 0a ..

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 8/15/2007
Time: 5:23:21 AM
User: N/A
Computer: WOLVES-DEN
Description:
Fault bucket 170130483.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 37 30 31 33 30 34 38 17013048
0010: 33 0d 0a 3..

Click to expand...

Guest · Aug 15, 2007

I'm using IE 7 (7.0.5730.11). There is no reference to an update numbered
928090 ON the PC or in Windows Update History. A Search of the C: Drive only
showed references to 32 IE temporary files that point to
www.microsoft/windowsxp/expertzo at the end of the line. They begin with
msgget.aspx?mid= (and then long strings of letter+numbers, ending with the
www.microsoft/windowsxp/expertzo I just mentioned..

Gerry said:
What version of Internet Explorer are you using?

Check your Windows Update History for KB928090. An uninstall folder for
KB928090 is the only reference to plugin.ocx on my computer, which has
IE7 installed.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:

Not sure if this matters, but I might as well add, that while waiting
for further help, I tried running the SFC /SCANNOW. (I had tried this
before, too, after uninstalling the Sound Driver when I mentioned in
previous reply. Obviously, it did not help, since the Error I just
posted with my last reply had occured after re-installing the Sound
Driver version I mentioned Above.

I did notice that in the Event Viewer-System Report, There was an
"INFORMATION" Event listing as follows:

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64021
Date: 8/15/2007
Time: 6:10:54 AM
User: N/A
Computer: WOLVES-DEN
Description:
The system file c:\windows\system32\plugin.ocx could not be copied
into the DLL cache. The specific error code is 0x00000000 [The
operation completed successfully.
]. This file is necessary to maintain system stability.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
--------------------------------------------------------------------------------------------
This same entry was also made the first time I ran the SFC Scan
earlier, too. That was the only other listing, aside from the lines
noting the successful Start + Stop of the SFC scan.

werewolf_359 said:

Hello, and thank you for replying.

My Windows Disk/version is an OEM XP Pro CD WITH SP2. ( I just
bought it a month ago with rest of my PC build parts).

NORMAL view of Device Manager Shows NO Problem-type Devices (no
Explanation marks, etc.) HIDDEN Devices show a "Serial" entry with
ywllow ! under Non Plug and Play Drivers and a Parport entry under
same area with similar yellow !. Both have codes of (24). They are
Root_Legacy_TCPIP + Root_Legacy_Parport, Respectivley.

SigVerif shows only 1 unsigned item, an Icm entry for my Viewsonic
A75s) Monitor(for which that was the last file(s) they made for that
monitor). File is located in C:\Windows\System32\Spool\Drivers\color
Folder.

While I was waiting earlier, I had uninstalled the SoundMax Driver,
went in Safe Mode, and used Driver Cleaner Pro to clear any
remnants. Just a few mins ago, I tried installing yet another
SoundMax driver version, the most recent WHQL listed from ASUS
Support site v5.10.1.6110. There were NO errors the whole time the
driver was uninstalled, no matter how I tried to re-produce them.
Just now, the following Error was quick to reproduce (Just clicking
around different tree lines in the Admin. Tools' Computer Management
Window once the driver was reinstalled....:
-----------------------------------------------------------------------------------------------
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 8/15/2007
Time: 5:23:17 AM
User: N/A
Computer: WOLVES-DEN
Description:
Faulting application mmc.exe, version 5.1.2600.2180, faulting module
ntdll.dll, version 5.1.2600.2180, fault address 0x0001201e.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 6d 6d 63 ure mmc
0018: 2e 65 78 65 20 35 2e 31 .exe 5.1
0020: 2e 32 36 30 30 2e 32 31 .2600.21
0028: 38 30 20 69 6e 20 6e 74 80 in nt
0030: 64 6c 6c 2e 64 6c 6c 20 dll.dll
0038: 35 2e 31 2e 32 36 30 30 5.1.2600
0040: 2e 32 31 38 30 20 61 74 .2180 at
0048: 20 6f 66 66 73 65 74 20 offset
0050: 30 30 30 31 32 30 31 65 0001201e
0058: 0d 0a ..

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 8/15/2007
Time: 5:23:21 AM
User: N/A
Computer: WOLVES-DEN
Description:
Fault bucket 170130483.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 37 30 31 33 30 34 38 17013048
0010: 33 0d 0a 3..

-----------------------------------------------------------------------------------------------

:

A better way to post Event Viewer Error Reports.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and
close Event Viewer.Now start your message (email) and do a paste
into the body of the message. Make sure this is the first paste
after exiting from Event Viewer.

Are there any yellow question marks in Device Manager? Right click
on the My Computer icon on your Desktop and select Properties,
Hardware,Device Manager. If yes what is the Device Error code?

Try Start, Run, type "sigverif.exe" without quotes and hit OK. What
drivers are listed as unsigned? Disregard those which are not
checked.

Is your Windows XP CD Retail or OEM? Is it pre or post SP2?

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 wrote:
Hello,

I need to know what I can do about fixing whatever is causing these
following errors (Shown in Event Viewer Application Log)..:

8/12/2007 3:56 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 4:03 PM Application Error Fault bucket 129280599.

8/12/2007 4:20 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module ntdll.dll, version 5.1.2600.2180,
fault address 0x00011e5a.

8/12/2007 4:22 PM Application Error Fault bucket 130061967.

8/12/2007 5:39 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 5:42 PM Application Error Fault bucket 129280599.

8/12/2007 8:44 AM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 8:44 AM Application Error Fault bucket 129280599.

8/14/2007 9:00 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module filemgmt.dll, version 5.1.2600.2180,
fault address 0x0000db07.

8/14/2007 9:01 PM Application Error Fault bucket 169289715.&#x000a

Each Error should have it's associated "Bucket" next to it.

To describe, I just installed XP Pro recentley on a new PC build,
installed all available updates as they were available up to 2 days
ago, and had begun to install Necessary Hardware Drivers. Chipset,
onboard Raid and Network all went fine. Nvidia Driver 158.22 and
Viewsonic Monitor drivers also seemed to go well.

Then I go to installing my Sound Driver (SoundMax ADI 1988B), and
noticed
the first errors start to occur a little while later on, while
doing and checking certain things on the PC.

The Errors related to Rundll32.exe/ mmsys.cpl seemed to occur at
random when making adjustments to the Control Panel's sound
settings (Both Windows control panel, and on the SoundMax's panel.

The Errors Related to mmc.exe/ Ntdll.dll + mmc.exe/ filemgmt.dll
occured
when using parts of the Administrative Tools like Component
Servicees, Computer Management, Etc. The Errors would happen when
just ckicking thru the tree-listings in those utility's open
windows to view their info.

I would also add, that there is apparently a drwtsn32.txt file in
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr
Watson, which also contains info related to the errors, but the
kind of info inside is pretty much indecipherable to me. I'm not
sure that all of it would fit here, but most of it is very similar
in nature for each thread dump, so I'll see if I can put at least
a bit of it below, to show what it is listing. It seems to state
similar info for each thread/module down the list....

(part of drwtsn32.txt)
----------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=972)
When: 8/12/2007 @ 02:01:07.484
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: WOLVES-DEN
User Name: Van
Terminal Session Id: 0
Number of Processors: 2
Processor Type: x86 Family 6 Model 15 Stepping 6
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Multiprocessor Free
Registered Organization:
Registered Owner: Scott

*----> Task List <----*
0 System Process
4 System
584 smss.exe
640 csrss.exe
664 winlogon.exe
708 services.exe
720 lsass.exe
880 svchost.exe
940 svchost.exe
1040 svchost.exe
1132 svchost.exe
1208 svchost.exe
1416 spoolsv.exe
1628 Explorer.EXE
1828 nvraidservice.exe
1860 RUNDLL32.EXE
1884 smax4pnp.exe
1892 Smax4.exe
1904 ctfmon.exe
212 nvsvc32.exe
516 nSvcAppFlt.exe
540 nSvcIp.exe
1032 wmiprvse.exe
1948 alg.exe
836 unsecapp.exe
324 wscntfy.exe
468 hh.exe
972 rundll32.exe
136 sndvol32.exe
1308 sndvol32.exe
1540 sndvol32.exe
480 dwwin.exe
472 drwtsn32.exe

*----> Module List <----*
(0000000001000000 - 000000000100b000:
C:\WINDOWS\system32\rundll32.exe (000000000ffd0000 -
000000000fff8000: C:\WINDOWS\system32\rsaenh.dll (0000000010000000
- 0000000010023000: C:\WINDOWS\system32\nvappfilter.dll
(0000000020000000 - 00000000202c5000:
C:\WINDOWS\system32\xpsp2res.dll (00000000581a0000
- 00000000581d9000: C:\WINDOWS\system32\iac25_32.ax
(00000000582d0000

Click to expand...

Click to expand...

Gerry · Aug 15, 2007

With regard to Windows Updates are you using Automatic Update or a
procedure where the user exercises more control over what goes on?

I think 928090 should feature in your History! The question is if this
is missing what else is missing?

In Start, Control Panel, Automatic Updates I have Automatic not
checked and have checked "Notify me but don't automatically download
or install". When notified I always commence the process by selecting
Start, Help and Support, Keep your computer up-to-date with Windows
Update and opt for a Custom install. You might try this first and
observe for effect.

Try the Custom install.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:
I'm using IE 7 (7.0.5730.11). There is no reference to an update
numbered 928090 ON the PC or in Windows Update History. A Search of
the C: Drive only showed references to 32 IE temporary files that
point to www.microsoft/windowsxp/expertzo at the end of the line.
They begin with msgget.aspx?mid= (and then long strings of
letter+numbers, ending with the www.microsoft/windowsxp/expertzo I
just mentioned..

Gerry said:

What version of Internet Explorer are you using?

Check your Windows Update History for KB928090. An uninstall folder
for KB928090 is the only reference to plugin.ocx on my computer,
which has IE7 installed.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:

Not sure if this matters, but I might as well add, that while
waiting for further help, I tried running the SFC /SCANNOW. (I had
tried this before, too, after uninstalling the Sound Driver when I
mentioned in previous reply. Obviously, it did not help, since the
Error I just posted with my last reply had occured after
re-installing the Sound Driver version I mentioned Above.

I did notice that in the Event Viewer-System Report, There was an
"INFORMATION" Event listing as follows:

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64021
Date: 8/15/2007
Time: 6:10:54 AM
User: N/A
Computer: WOLVES-DEN
Description:
The system file c:\windows\system32\plugin.ocx could not be copied
into the DLL cache. The specific error code is 0x00000000 [The
operation completed successfully.
]. This file is necessary to maintain system stability.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
--------------------------------------------------------------------------------------------
This same entry was also made the first time I ran the SFC Scan
earlier, too. That was the only other listing, aside from the lines
noting the successful Start + Stop of the SFC scan.

:

Hello, and thank you for replying.

My Windows Disk/version is an OEM XP Pro CD WITH SP2. ( I just
bought it a month ago with rest of my PC build parts).

NORMAL view of Device Manager Shows NO Problem-type Devices (no
Explanation marks, etc.) HIDDEN Devices show a "Serial" entry with
ywllow ! under Non Plug and Play Drivers and a Parport entry under
same area with similar yellow !. Both have codes of (24). They are
Root_Legacy_TCPIP + Root_Legacy_Parport, Respectivley.

SigVerif shows only 1 unsigned item, an Icm entry for my Viewsonic
A75s) Monitor(for which that was the last file(s) they made for
that monitor). File is located in
C:\Windows\System32\Spool\Drivers\color Folder.

While I was waiting earlier, I had uninstalled the SoundMax Driver,
went in Safe Mode, and used Driver Cleaner Pro to clear any
remnants. Just a few mins ago, I tried installing yet another
SoundMax driver version, the most recent WHQL listed from ASUS
Support site v5.10.1.6110. There were NO errors the whole time the
driver was uninstalled, no matter how I tried to re-produce them.
Just now, the following Error was quick to reproduce (Just clicking
around different tree lines in the Admin. Tools' Computer
Management Window once the driver was reinstalled....:
-----------------------------------------------------------------------------------------------
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 8/15/2007
Time: 5:23:17 AM
User: N/A
Computer: WOLVES-DEN
Description:
Faulting application mmc.exe, version 5.1.2600.2180, faulting
module ntdll.dll, version 5.1.2600.2180, fault address 0x0001201e.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 6d 6d 63 ure mmc
0018: 2e 65 78 65 20 35 2e 31 .exe 5.1
0020: 2e 32 36 30 30 2e 32 31 .2600.21
0028: 38 30 20 69 6e 20 6e 74 80 in nt
0030: 64 6c 6c 2e 64 6c 6c 20 dll.dll
0038: 35 2e 31 2e 32 36 30 30 5.1.2600
0040: 2e 32 31 38 30 20 61 74 .2180 at
0048: 20 6f 66 66 73 65 74 20 offset
0050: 30 30 30 31 32 30 31 65 0001201e
0058: 0d 0a ..

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 8/15/2007
Time: 5:23:21 AM
User: N/A
Computer: WOLVES-DEN
Description:
Fault bucket 170130483.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 37 30 31 33 30 34 38 17013048
0010: 33 0d 0a 3..

-----------------------------------------------------------------------------------------------

:

A better way to post Event Viewer Error Reports.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and
close Event Viewer.Now start your message (email) and do a paste
into the body of the message. Make sure this is the first paste
after exiting from Event Viewer.

Are there any yellow question marks in Device Manager? Right click
on the My Computer icon on your Desktop and select Properties,
Hardware,Device Manager. If yes what is the Device Error code?

Try Start, Run, type "sigverif.exe" without quotes and hit OK.
What drivers are listed as unsigned? Disregard those which are not
checked.

Is your Windows XP CD Retail or OEM? Is it pre or post SP2?

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 wrote:
Hello,

I need to know what I can do about fixing whatever is causing
these following errors (Shown in Event Viewer Application Log)..:

8/12/2007 3:56 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 4:03 PM Application Error Fault bucket 129280599.

8/12/2007 4:20 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module ntdll.dll, version 5.1.2600.2180,
fault address 0x00011e5a.

8/12/2007 4:22 PM Application Error Fault bucket 130061967.

8/12/2007 5:39 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 5:42 PM Application Error Fault bucket 129280599.

8/12/2007 8:44 AM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 8:44 AM Application Error Fault bucket 129280599.

8/14/2007 9:00 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module filemgmt.dll, version
5.1.2600.2180, fault address 0x0000db07.

8/14/2007 9:01 PM Application Error Fault bucket
169289715.&#x000a

Each Error should have it's associated "Bucket" next to it.

To describe, I just installed XP Pro recentley on a new PC build,
installed all available updates as they were available up to 2
days ago, and had begun to install Necessary Hardware Drivers.
Chipset, onboard Raid and Network all went fine. Nvidia Driver
158.22 and Viewsonic Monitor drivers also seemed to go well.

Then I go to installing my Sound Driver (SoundMax ADI 1988B), and
noticed
the first errors start to occur a little while later on, while
doing and checking certain things on the PC.

The Errors related to Rundll32.exe/ mmsys.cpl seemed to occur at
random when making adjustments to the Control Panel's sound
settings (Both Windows control panel, and on the SoundMax's
panel.

The Errors Related to mmc.exe/ Ntdll.dll + mmc.exe/ filemgmt.dll
occured
when using parts of the Administrative Tools like Component
Servicees, Computer Management, Etc. The Errors would happen when
just ckicking thru the tree-listings in those utility's open
windows to view their info.

I would also add, that there is apparently a drwtsn32.txt file in
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr
Watson, which also contains info related to the errors, but the
kind of info inside is pretty much indecipherable to me. I'm not
sure that all of it would fit here, but most of it is very
similar in nature for each thread dump, so I'll see if I can put
at least a bit of it below, to show what it is listing. It seems
to state similar info for each thread/module down the list....

(part of drwtsn32.txt)
----------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=972)
When: 8/12/2007 @ 02:01:07.484
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: WOLVES-DEN
User Name: Van
Terminal Session Id: 0
Number of Processors: 2
Processor Type: x86 Family 6 Model 15 Stepping 6
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Multiprocessor Free
Registered Organization:
Registered Owner: Scott

*----> Task List <----*
0 System Process
4 System
584 smss.exe
640 csrss.exe
664 winlogon.exe
708 services.exe
720 lsass.exe
880 svchost.exe
940 svchost.exe
1040 svchost.exe
1132 svchost.exe
1208 svchost.exe
1416 spoolsv.exe
1628 Explorer.EXE
1828 nvraidservice.exe
1860 RUNDLL32.EXE
1884 smax4pnp.exe
1892 Smax4.exe
1904 ctfmon.exe
212 nvsvc32.exe
516 nSvcAppFlt.exe
540 nSvcIp.exe
1032 wmiprvse.exe
1948 alg.exe
836 unsecapp.exe
324 wscntfy.exe
468 hh.exe
972 rundll32.exe
136 sndvol32.exe
1308 sndvol32.exe
1540 sndvol32.exe
480 dwwin.exe
472 drwtsn32.exe

*----> Module List <----*
(0000000001000000 - 000000000100b000:
C:\WINDOWS\system32\rundll32.exe (000000000ffd0000 -
000000000fff8000: C:\WINDOWS\system32\rsaenh.dll
(0000000010000000 - 0000000010023000:
C:\WINDOWS\system32\nvappfilter.dll (0000000020000000 -
00000000202c5000: C:\WINDOWS\system32\xpsp2res.dll
(00000000581a0000 - 00000000581d9000:
C:\WINDOWS\system32\iac25_32.ax (00000000582d0000

Click to expand...

Click to expand...

Guest · Aug 15, 2007

I have windows Update set to "notify me only", and let me know when there are
Downloads available. As soon as I see there are any shown, I go ahead and
Download/Install them. I always use "Custom Install", and Download/Install
any+ all possible updates.

I'm not sure if that specific update should be listed or not. Some of the
checking I did, sais something about it being included as part of any further
"Cumulative IE Updates" in the future. That specific update was 1 year ago,
and there's been several "Cumulative" updates since.

Also, there were older KB articles stating that the Plugin.ocx was actually
supposed to be first disabled, and/or Removed, as it had potential
vulnerabilities.

All in all, I've looked thru many related articles, and anything that could
have been causing Errors, were not any of the type that have been occurring
for me..and seem basicly centered around IE usage/components. When I have
those errors, I am not using IE at the time nor have any IE windows open. IF
it is related to IE, I cannot see how at this time.

The Drwatson log keep refering to "Symbol files not found", and "Stack
unwind information not available. Following frames may be wrong." in one or
more modules listed in each Raw stack Dump and/or Stack Back Trace.

Problem is, I have no idea what any of those things mean in the Watson log.

Gerry said:
With regard to Windows Updates are you using Automatic Update or a
procedure where the user exercises more control over what goes on?

I think 928090 should feature in your History! The question is if this
is missing what else is missing?

In Start, Control Panel, Automatic Updates I have Automatic not
checked and have checked "Notify me but don't automatically download
or install". When notified I always commence the process by selecting
Start, Help and Support, Keep your computer up-to-date with Windows
Update and opt for a Custom install. You might try this first and
observe for effect.

Try the Custom install.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:

I'm using IE 7 (7.0.5730.11). There is no reference to an update
numbered 928090 ON the PC or in Windows Update History. A Search of
the C: Drive only showed references to 32 IE temporary files that
point to www.microsoft/windowsxp/expertzo at the end of the line.
They begin with msgget.aspx?mid= (and then long strings of
letter+numbers, ending with the www.microsoft/windowsxp/expertzo I
just mentioned..

Gerry said:

What version of Internet Explorer are you using?

Check your Windows Update History for KB928090. An uninstall folder
for KB928090 is the only reference to plugin.ocx on my computer,
which has IE7 installed.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 wrote:
Not sure if this matters, but I might as well add, that while
waiting for further help, I tried running the SFC /SCANNOW. (I had
tried this before, too, after uninstalling the Sound Driver when I
mentioned in previous reply. Obviously, it did not help, since the
Error I just posted with my last reply had occured after
re-installing the Sound Driver version I mentioned Above.

I did notice that in the Event Viewer-System Report, There was an
"INFORMATION" Event listing as follows:

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64021
Date: 8/15/2007
Time: 6:10:54 AM
User: N/A
Computer: WOLVES-DEN
Description:
The system file c:\windows\system32\plugin.ocx could not be copied
into the DLL cache. The specific error code is 0x00000000 [The
operation completed successfully.
]. This file is necessary to maintain system stability.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
--------------------------------------------------------------------------------------------
This same entry was also made the first time I ran the SFC Scan
earlier, too. That was the only other listing, aside from the lines
noting the successful Start + Stop of the SFC scan.

:

Hello, and thank you for replying.

My Windows Disk/version is an OEM XP Pro CD WITH SP2. ( I just
bought it a month ago with rest of my PC build parts).

NORMAL view of Device Manager Shows NO Problem-type Devices (no
Explanation marks, etc.) HIDDEN Devices show a "Serial" entry with
ywllow ! under Non Plug and Play Drivers and a Parport entry under
same area with similar yellow !. Both have codes of (24). They are
Root_Legacy_TCPIP + Root_Legacy_Parport, Respectivley.

SigVerif shows only 1 unsigned item, an Icm entry for my Viewsonic
A75s) Monitor(for which that was the last file(s) they made for
that monitor). File is located in
C:\Windows\System32\Spool\Drivers\color Folder.

While I was waiting earlier, I had uninstalled the SoundMax Driver,
went in Safe Mode, and used Driver Cleaner Pro to clear any
remnants. Just a few mins ago, I tried installing yet another
SoundMax driver version, the most recent WHQL listed from ASUS
Support site v5.10.1.6110. There were NO errors the whole time the
driver was uninstalled, no matter how I tried to re-produce them.
Just now, the following Error was quick to reproduce (Just clicking
around different tree lines in the Admin. Tools' Computer
Management Window once the driver was reinstalled....:
-----------------------------------------------------------------------------------------------
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 8/15/2007
Time: 5:23:17 AM
User: N/A
Computer: WOLVES-DEN
Description:
Faulting application mmc.exe, version 5.1.2600.2180, faulting
module ntdll.dll, version 5.1.2600.2180, fault address 0x0001201e.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 6d 6d 63 ure mmc
0018: 2e 65 78 65 20 35 2e 31 .exe 5.1
0020: 2e 32 36 30 30 2e 32 31 .2600.21
0028: 38 30 20 69 6e 20 6e 74 80 in nt
0030: 64 6c 6c 2e 64 6c 6c 20 dll.dll
0038: 35 2e 31 2e 32 36 30 30 5.1.2600
0040: 2e 32 31 38 30 20 61 74 .2180 at
0048: 20 6f 66 66 73 65 74 20 offset
0050: 30 30 30 31 32 30 31 65 0001201e
0058: 0d 0a ..

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 8/15/2007
Time: 5:23:21 AM
User: N/A
Computer: WOLVES-DEN
Description:
Fault bucket 170130483.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 37 30 31 33 30 34 38 17013048
0010: 33 0d 0a 3..

-----------------------------------------------------------------------------------------------

:

A better way to post Event Viewer Error Reports.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and
close Event Viewer.Now start your message (email) and do a paste
into the body of the message. Make sure this is the first paste
after exiting from Event Viewer.

Are there any yellow question marks in Device Manager? Right click
on the My Computer icon on your Desktop and select Properties,
Hardware,Device Manager. If yes what is the Device Error code?

Try Start, Run, type "sigverif.exe" without quotes and hit OK.
What drivers are listed as unsigned? Disregard those which are not
checked.

Is your Windows XP CD Retail or OEM? Is it pre or post SP2?

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 wrote:
Hello,

I need to know what I can do about fixing whatever is causing
these following errors (Shown in Event Viewer Application Log)..:

8/12/2007 3:56 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 4:03 PM Application Error Fault bucket 129280599.

8/12/2007 4:20 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module ntdll.dll, version 5.1.2600.2180,
fault address 0x00011e5a.

8/12/2007 4:22 PM Application Error Fault bucket 130061967.

8/12/2007 5:39 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 5:42 PM Application Error Fault bucket 129280599.

8/12/2007 8:44 AM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 8:44 AM Application Error Fault bucket 129280599.

8/14/2007 9:00 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module filemgmt.dll, version
5.1.2600.2180, fault address 0x0000db07.

8/14/2007 9:01 PM Application Error Fault bucket
169289715.&#x000a

Each Error should have it's associated "Bucket" next to it.

To describe, I just installed XP Pro recentley on a new PC build,
installed all available updates as they were available up to 2
days ago, and had begun to install Necessary Hardware Drivers.
Chipset, onboard Raid and Network all went fine. Nvidia Driver
158.22 and Viewsonic Monitor drivers also seemed to go well.

Then I go to installing my Sound Driver (SoundMax ADI 1988B), and
noticed
the first errors start to occur a little while later on, while
doing and checking certain things on the PC.

The Errors related to Rundll32.exe/ mmsys.cpl seemed to occur at
random when making adjustments to the Control Panel's sound
settings (Both Windows control panel, and on the SoundMax's
panel.

The Errors Related to mmc.exe/ Ntdll.dll + mmc.exe/ filemgmt.dll
occured
when using parts of the Administrative Tools like Component
Servicees, Computer Management, Etc. The Errors would happen when
just ckicking thru the tree-listings in those utility's open
windows to view their info.

I would also add, that there is apparently a drwtsn32.txt file in
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr
Watson, which also contains info related to the errors, but the
kind of info inside is pretty much indecipherable to me. I'm not
sure that all of it would fit here, but most of it is very
similar in nature for each thread dump, so I'll see if I can put
at least a bit of it below, to show what it is listing. It seems
to state similar info for each thread/module down the list....

(part of drwtsn32.txt)
----------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=972)
When: 8/12/2007 @ 02:01:07.484
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: WOLVES-DEN
User Name: Van
Terminal Session Id: 0
Number of Processors: 2
Processor Type: x86 Family 6 Model 15 Stepping 6
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Multiprocessor Free
Registered Organization:
Registered Owner: Scott

*----> Task List <----*
0 System Process
4 System
584 smss.exe

Click to expand...

Click to expand...

Gerry · Aug 15, 2007

c:\windows\system32\plugin.ocx

Is plugin.ocx present at the location indicated? It's not on my
computer.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:
I have windows Update set to "notify me only", and let me know when
there are Downloads available. As soon as I see there are any shown,
I go ahead and Download/Install them. I always use "Custom Install",
and Download/Install any+ all possible updates.

I'm not sure if that specific update should be listed or not. Some of
the checking I did, sais something about it being included as part of
any further "Cumulative IE Updates" in the future. That specific
update was 1 year ago, and there's been several "Cumulative" updates
since.

Also, there were older KB articles stating that the Plugin.ocx was
actually supposed to be first disabled, and/or Removed, as it had
potential vulnerabilities.

All in all, I've looked thru many related articles, and anything that
could have been causing Errors, were not any of the type that have
been occurring for me..and seem basicly centered around IE
usage/components. When I have those errors, I am not using IE at the
time nor have any IE windows open. IF it is related to IE, I cannot
see how at this time.

The Drwatson log keep refering to "Symbol files not found", and "Stack
unwind information not available. Following frames may be wrong." in
one or more modules listed in each Raw stack Dump and/or Stack Back
Trace.

Problem is, I have no idea what any of those things mean in the
Watson log.

Gerry said:

With regard to Windows Updates are you using Automatic Update or a
procedure where the user exercises more control over what goes on?

I think 928090 should feature in your History! The question is if
this is missing what else is missing?

In Start, Control Panel, Automatic Updates I have Automatic not
checked and have checked "Notify me but don't automatically download
or install". When notified I always commence the process by selecting
Start, Help and Support, Keep your computer up-to-date with Windows
Update and opt for a Custom install. You might try this first and
observe for effect.

Try the Custom install.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:

I'm using IE 7 (7.0.5730.11). There is no reference to an update
numbered 928090 ON the PC or in Windows Update History. A Search of
the C: Drive only showed references to 32 IE temporary files that
point to www.microsoft/windowsxp/expertzo at the end of the line.
They begin with msgget.aspx?mid= (and then long strings of
letter+numbers, ending with the www.microsoft/windowsxp/expertzo I
just mentioned..

:

What version of Internet Explorer are you using?

Check your Windows Update History for KB928090. An uninstall folder
for KB928090 is the only reference to plugin.ocx on my computer,
which has IE7 installed.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 wrote:
Not sure if this matters, but I might as well add, that while
waiting for further help, I tried running the SFC /SCANNOW. (I had
tried this before, too, after uninstalling the Sound Driver when I
mentioned in previous reply. Obviously, it did not help, since the
Error I just posted with my last reply had occured after
re-installing the Sound Driver version I mentioned Above.

I did notice that in the Event Viewer-System Report, There was an
"INFORMATION" Event listing as follows:

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64021
Date: 8/15/2007
Time: 6:10:54 AM
User: N/A
Computer: WOLVES-DEN
Description:
The system file c:\windows\system32\plugin.ocx could not be copied
into the DLL cache. The specific error code is 0x00000000 [The
operation completed successfully.
]. This file is necessary to maintain system stability.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
--------------------------------------------------------------------------------------------
This same entry was also made the first time I ran the SFC Scan
earlier, too. That was the only other listing, aside from the
lines noting the successful Start + Stop of the SFC scan.

:

Hello, and thank you for replying.

My Windows Disk/version is an OEM XP Pro CD WITH SP2. ( I just
bought it a month ago with rest of my PC build parts).

NORMAL view of Device Manager Shows NO Problem-type Devices (no
Explanation marks, etc.) HIDDEN Devices show a "Serial" entry
with ywllow ! under Non Plug and Play Drivers and a Parport
entry under same area with similar yellow !. Both have codes of
(24). They are Root_Legacy_TCPIP + Root_Legacy_Parport,
Respectivley.

SigVerif shows only 1 unsigned item, an Icm entry for my
Viewsonic A75s) Monitor(for which that was the last file(s) they
made for that monitor). File is located in
C:\Windows\System32\Spool\Drivers\color Folder.

While I was waiting earlier, I had uninstalled the SoundMax
Driver, went in Safe Mode, and used Driver Cleaner Pro to clear
any remnants. Just a few mins ago, I tried installing yet another
SoundMax driver version, the most recent WHQL listed from ASUS
Support site v5.10.1.6110. There were NO errors the whole time
the driver was uninstalled, no matter how I tried to re-produce
them. Just now, the following Error was quick to reproduce (Just
clicking around different tree lines in the Admin. Tools'
Computer Management Window once the driver was reinstalled....:
-----------------------------------------------------------------------------------------------
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 8/15/2007
Time: 5:23:17 AM
User: N/A
Computer: WOLVES-DEN
Description:
Faulting application mmc.exe, version 5.1.2600.2180, faulting
module ntdll.dll, version 5.1.2600.2180, fault address
0x0001201e.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 6d 6d 63 ure mmc
0018: 2e 65 78 65 20 35 2e 31 .exe 5.1
0020: 2e 32 36 30 30 2e 32 31 .2600.21
0028: 38 30 20 69 6e 20 6e 74 80 in nt
0030: 64 6c 6c 2e 64 6c 6c 20 dll.dll
0038: 35 2e 31 2e 32 36 30 30 5.1.2600
0040: 2e 32 31 38 30 20 61 74 .2180 at
0048: 20 6f 66 66 73 65 74 20 offset
0050: 30 30 30 31 32 30 31 65 0001201e
0058: 0d 0a ..

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 8/15/2007
Time: 5:23:21 AM
User: N/A
Computer: WOLVES-DEN
Description:
Fault bucket 170130483.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 37 30 31 33 30 34 38 17013048
0010: 33 0d 0a 3..

-----------------------------------------------------------------------------------------------

:

A better way to post Event Viewer Error Reports.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and
close Event Viewer.Now start your message (email) and do a paste
into the body of the message. Make sure this is the first paste
after exiting from Event Viewer.

Are there any yellow question marks in Device Manager? Right
click on the My Computer icon on your Desktop and select
Properties, Hardware,Device Manager. If yes what is the Device
Error code?

Try Start, Run, type "sigverif.exe" without quotes and hit OK.
What drivers are listed as unsigned? Disregard those which are
not checked.

Is your Windows XP CD Retail or OEM? Is it pre or post SP2?

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 wrote:
Hello,

I need to know what I can do about fixing whatever is causing
these following errors (Shown in Event Viewer Application
Log)..:

8/12/2007 3:56 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 4:03 PM Application Error Fault bucket 129280599.

8/12/2007 4:20 PM Application Error Faulting application
mmc.exe, version
5.1.2600.2180, faulting module ntdll.dll, version
5.1.2600.2180, fault address 0x00011e5a.

8/12/2007 4:22 PM Application Error Fault bucket 130061967.

8/12/2007 5:39 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 5:42 PM Application Error Fault bucket 129280599.

8/12/2007 8:44 AM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 8:44 AM Application Error Fault bucket 129280599.

8/14/2007 9:00 PM Application Error Faulting application
mmc.exe, version
5.1.2600.2180, faulting module filemgmt.dll, version
5.1.2600.2180, fault address 0x0000db07.

8/14/2007 9:01 PM Application Error Fault bucket
169289715.&#x000a

Each Error should have it's associated "Bucket" next to it.

To describe, I just installed XP Pro recentley on a new PC
build, installed all available updates as they were available
up to 2 days ago, and had begun to install Necessary Hardware
Drivers. Chipset, onboard Raid and Network all went fine.
Nvidia Driver 158.22 and Viewsonic Monitor drivers also seemed
to go well.

Then I go to installing my Sound Driver (SoundMax ADI 1988B),
and noticed
the first errors start to occur a little while later on, while
doing and checking certain things on the PC.

The Errors related to Rundll32.exe/ mmsys.cpl seemed to occur
at random when making adjustments to the Control Panel's sound
settings (Both Windows control panel, and on the SoundMax's
panel.

The Errors Related to mmc.exe/ Ntdll.dll + mmc.exe/
filemgmt.dll occured
when using parts of the Administrative Tools like Component
Servicees, Computer Management, Etc. The Errors would happen
when just ckicking thru the tree-listings in those utility's
open windows to view their info.

I would also add, that there is apparently a drwtsn32.txt file
in C:\Documents and Settings\All Users\Application
Data\Microsoft\Dr Watson, which also contains info related to
the errors, but the kind of info inside is pretty much
indecipherable to me. I'm not sure that all of it would fit
here, but most of it is very similar in nature for each thread
dump, so I'll see if I can put at least a bit of it below, to
show what it is listing. It seems to state similar info for
each thread/module down the list....

(part of drwtsn32.txt)
----------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=972)
When: 8/12/2007 @ 02:01:07.484
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: WOLVES-DEN
User Name: Van
Terminal Session Id: 0
Number of Processors: 2
Processor Type: x86 Family 6 Model 15 Stepping 6
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Multiprocessor Free
Registered Organization:
Registered Owner: Scott

*----> Task List <----*
0 System Process
4 System
584 smss.exe

Click to expand...

Click to expand...

Guest · Aug 15, 2007

No, it is not on mine, either. That's what I think was being referred to in
the KB Articles I saw earlier about it having been removed in past updates
due to vulnerabilities. It's not supposed to be in the Dll Cache, either
anymore, if I understood them correctly. The "reference" you saw on your PC
was probabally an update you did at the time the update came out, which
removed it at that point....and could be why there was a reference to it.
(Just a guess???).

Gerry said:
c:\windows\system32\plugin.ocx

Is plugin.ocx present at the location indicated? It's not on my
computer.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:

I have windows Update set to "notify me only", and let me know when
there are Downloads available. As soon as I see there are any shown,
I go ahead and Download/Install them. I always use "Custom Install",
and Download/Install any+ all possible updates.

I'm not sure if that specific update should be listed or not. Some of
the checking I did, sais something about it being included as part of
any further "Cumulative IE Updates" in the future. That specific
update was 1 year ago, and there's been several "Cumulative" updates
since.

Also, there were older KB articles stating that the Plugin.ocx was
actually supposed to be first disabled, and/or Removed, as it had
potential vulnerabilities.

All in all, I've looked thru many related articles, and anything that
could have been causing Errors, were not any of the type that have
been occurring for me..and seem basicly centered around IE
usage/components. When I have those errors, I am not using IE at the
time nor have any IE windows open. IF it is related to IE, I cannot
see how at this time.

The Drwatson log keep refering to "Symbol files not found", and "Stack
unwind information not available. Following frames may be wrong." in
one or more modules listed in each Raw stack Dump and/or Stack Back
Trace.

Problem is, I have no idea what any of those things mean in the
Watson log.

Gerry said:

With regard to Windows Updates are you using Automatic Update or a
procedure where the user exercises more control over what goes on?

I think 928090 should feature in your History! The question is if
this is missing what else is missing?

In Start, Control Panel, Automatic Updates I have Automatic not
checked and have checked "Notify me but don't automatically download
or install". When notified I always commence the process by selecting
Start, Help and Support, Keep your computer up-to-date with Windows
Update and opt for a Custom install. You might try this first and
observe for effect.

Try the Custom install.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 wrote:
I'm using IE 7 (7.0.5730.11). There is no reference to an update
numbered 928090 ON the PC or in Windows Update History. A Search of
the C: Drive only showed references to 32 IE temporary files that
point to www.microsoft/windowsxp/expertzo at the end of the line.
They begin with msgget.aspx?mid= (and then long strings of
letter+numbers, ending with the www.microsoft/windowsxp/expertzo I
just mentioned..

:

What version of Internet Explorer are you using?

Check your Windows Update History for KB928090. An uninstall folder
for KB928090 is the only reference to plugin.ocx on my computer,
which has IE7 installed.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 wrote:
Not sure if this matters, but I might as well add, that while
waiting for further help, I tried running the SFC /SCANNOW. (I had
tried this before, too, after uninstalling the Sound Driver when I
mentioned in previous reply. Obviously, it did not help, since the
Error I just posted with my last reply had occured after
re-installing the Sound Driver version I mentioned Above.

I did notice that in the Event Viewer-System Report, There was an
"INFORMATION" Event listing as follows:

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64021
Date: 8/15/2007
Time: 6:10:54 AM
User: N/A
Computer: WOLVES-DEN
Description:
The system file c:\windows\system32\plugin.ocx could not be copied
into the DLL cache. The specific error code is 0x00000000 [The
operation completed successfully.
]. This file is necessary to maintain system stability.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
--------------------------------------------------------------------------------------------
This same entry was also made the first time I ran the SFC Scan
earlier, too. That was the only other listing, aside from the
lines noting the successful Start + Stop of the SFC scan.

:

Hello, and thank you for replying.

My Windows Disk/version is an OEM XP Pro CD WITH SP2. ( I just
bought it a month ago with rest of my PC build parts).

NORMAL view of Device Manager Shows NO Problem-type Devices (no
Explanation marks, etc.) HIDDEN Devices show a "Serial" entry
with ywllow ! under Non Plug and Play Drivers and a Parport
entry under same area with similar yellow !. Both have codes of
(24). They are Root_Legacy_TCPIP + Root_Legacy_Parport,
Respectivley.

SigVerif shows only 1 unsigned item, an Icm entry for my
Viewsonic A75s) Monitor(for which that was the last file(s) they
made for that monitor). File is located in
C:\Windows\System32\Spool\Drivers\color Folder.

While I was waiting earlier, I had uninstalled the SoundMax
Driver, went in Safe Mode, and used Driver Cleaner Pro to clear
any remnants. Just a few mins ago, I tried installing yet another
SoundMax driver version, the most recent WHQL listed from ASUS
Support site v5.10.1.6110. There were NO errors the whole time
the driver was uninstalled, no matter how I tried to re-produce
them. Just now, the following Error was quick to reproduce (Just
clicking around different tree lines in the Admin. Tools'
Computer Management Window once the driver was reinstalled....:
-----------------------------------------------------------------------------------------------
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 8/15/2007
Time: 5:23:17 AM
User: N/A
Computer: WOLVES-DEN
Description:
Faulting application mmc.exe, version 5.1.2600.2180, faulting
module ntdll.dll, version 5.1.2600.2180, fault address
0x0001201e.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 6d 6d 63 ure mmc
0018: 2e 65 78 65 20 35 2e 31 .exe 5.1
0020: 2e 32 36 30 30 2e 32 31 .2600.21
0028: 38 30 20 69 6e 20 6e 74 80 in nt
0030: 64 6c 6c 2e 64 6c 6c 20 dll.dll
0038: 35 2e 31 2e 32 36 30 30 5.1.2600
0040: 2e 32 31 38 30 20 61 74 .2180 at
0048: 20 6f 66 66 73 65 74 20 offset
0050: 30 30 30 31 32 30 31 65 0001201e
0058: 0d 0a ..

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 8/15/2007
Time: 5:23:21 AM
User: N/A
Computer: WOLVES-DEN
Description:
Fault bucket 170130483.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 37 30 31 33 30 34 38 17013048
0010: 33 0d 0a 3..

-----------------------------------------------------------------------------------------------

:

A better way to post Event Viewer Error Reports.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and
close Event Viewer.Now start your message (email) and do a paste
into the body of the message. Make sure this is the first paste
after exiting from Event Viewer.

Are there any yellow question marks in Device Manager? Right
click on the My Computer icon on your Desktop and select
Properties, Hardware,Device Manager. If yes what is the Device
Error code?

Try Start, Run, type "sigverif.exe" without quotes and hit OK.
What drivers are listed as unsigned? Disregard those which are
not checked.

Is your Windows XP CD Retail or OEM? Is it pre or post SP2?

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 wrote:
Hello,

I need to know what I can do about fixing whatever is causing
these following errors (Shown in Event Viewer Application
Log)..:

8/12/2007 3:56 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 4:03 PM Application Error Fault bucket 129280599.

8/12/2007 4:20 PM Application Error Faulting application
mmc.exe, version
5.1.2600.2180, faulting module ntdll.dll, version
5.1.2600.2180, fault address 0x00011e5a.

8/12/2007 4:22 PM Application Error Fault bucket 130061967.

8/12/2007 5:39 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 5:42 PM Application Error Fault bucket 129280599.

8/12/2007 8:44 AM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 8:44 AM Application Error Fault bucket 129280599.

8/14/2007 9:00 PM Application Error Faulting application
mmc.exe, version
5.1.2600.2180, faulting module filemgmt.dll, version
5.1.2600.2180, fault address 0x0000db07.

8/14/2007 9:01 PM Application Error Fault bucket
169289715.&#x000a

Each Error should have it's associated "Bucket" next to it.

Click to expand...

Click to expand...

Guest · Aug 15, 2007

Here is a summarized version of the drwtsn32 log, showing just the Faulting
item and the actual Fault line in the "dump" in case it helps anyone to help
me figure what is going on or how to fix Remember, the Event Viewer log items
were displayed in the beginning post(s)/replies....
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=972)
When: 8/12/2007 @ 02:01:07.484
Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4 (588a14b4)]
588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call mmsys!DllCanUnloadNow+0x57bf
(588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480 (588a1480)]
588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call mmsys!DllCanUnloadNow+0x5835
(588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c (588a148c)]

---------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=1516)
When: 8/12/2007 @ 08:44:51.406
Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4 (588a14b4)]
588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call mmsys!DllCanUnloadNow+0x57bf
(588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480 (588a1480)]
588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call mmsys!DllCanUnloadNow+0x5835
(588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c (588a148c)]
----------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=500)
When: 8/12/2007 @ 16:03:48.062
Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4 (588a14b4)]
588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call mmsys!DllCanUnloadNow+0x57bf
(588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480 (588a1480)]
588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call mmsys!DllCanUnloadNow+0x5835
(588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c (588a148c)]
-----------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\mmc.exe (pid=2388)
When: 8/12/2007 @ 16:22:05.562
Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\ntdll.dll -
function: ntdll!RtlInitializeCriticalSection
7c911e3f ee out dx,al
7c911e40 ed in eax,dx
7c911e41 ffff ???
7c911e43 807d1400 cmp byte ptr [ebp+0x14],0x0
7c911e47 0f85977a0300 jne ntdll!RtlInitializeSListHead+0x108d4
(7c9498e4)
7c911e4d 8b4e0c mov ecx,[esi+0xc]
7c911e50 8d4608 lea eax,[esi+0x8]
7c911e53 8b10 mov edx,[eax]
7c911e55 894d08 mov [ebp+0x8],ecx
7c911e58 8b09 mov ecx,[ecx]
FAULT ->7c911e5a 3b4a04 cmp ecx,[edx+0x4]
ds:0023:00000004=????????
7c911e5d 89550c mov [ebp+0xc],edx
7c911e60 0f859d000000 jne ntdll!RtlInitializeCriticalSection+0x3d6
(7c911f03)
7c911e66 3bc8 cmp ecx,eax
7c911e68 0f8595000000 jne ntdll!RtlInitializeCriticalSection+0x3d6
(7c911f03)
7c911e6e 56 push esi
7c911e6f 53 push ebx
7c911e70 e81fedffff call ntdll!wcsncpy+0x105 (7c910b94)
7c911e75 8b450c mov eax,[ebp+0xc]
7c911e78 8b4d08 mov ecx,[ebp+0x8]
7c911e7b 3bc1 cmp eax,ecx
-----------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=1024)
When: 8/12/2007 @ 17:42:22.343
Exception number: c0000005 (access violation)
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4 (588a14b4)]
588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call mmsys!DllCanUnloadNow+0x57bf
(588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480 (588a1480)]
588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call mmsys!DllCanUnloadNow+0x5835
(588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c (588a148c)]
-----------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\mmc.exe (pid=432)
When: 8/14/2007 @ 21:01:29.312
Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\filemgmt.dll -
function: filemgmt
7297daf5 cc int 3
7297daf6 cc int 3
7297daf7 8bff mov edi,edi
7297daf9 55 push ebp
7297dafa 8bec mov ebp,esp
7297dafc 8b4508 mov eax,[ebp+0x8]
7297daff 8b10 mov edx,[eax]
7297db01 51 push ecx
7297db02 ff750c push dword ptr [ebp+0xc]
7297db05 8bc8 mov ecx,eax
FAULT ->7297db07 ff5248 call dword ptr [edx+0x48]
ds:0023:0000004b=????????
7297db0a 5d pop ebp
7297db0b c20800 ret 0x8
7297db0e cc int 3
7297db0f cc int 3
7297db10 cc int 3
7297db11 cc int 3
7297db12 cc int 3
7297db13 8bff mov edi,edi
7297db15 55 push ebp
7297db16 8bec mov ebp,esp
-----------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\mmc.exe (pid=540)
When: 8/15/2007 @ 05:23:21.625
Exception number: c0000005 (access violation)

function: ntdll!tan
7c902f04 90 nop
7c902f05 90 nop
7c902f06 53 push ebx
7c902f07 55 push ebp
7c902f08 8be9 mov ebp,ecx
7c902f0a 8b5504 mov edx,[ebp+0x4]
7c902f0d 8b4500 mov eax,[ebp]
7c902f10 0bc0 or eax,eax
7c902f12 740c jz ntdll!tan+0xe2 (7c902f20)
7c902f14 8d4aff lea ecx,[edx-0x1]
FAULT ->7c902f17 8b18 mov ebx,[eax]
ds:0023:009ce620=????????
7c902f19 f00fc74d00 lock cmpxchg8b qword ptr [ebp]
7c902f1e 75f0 jnz ntdll!tan+0xd2 (7c902f10)
7c902f20 5d pop ebp
7c902f21 5b pop ebx
7c902f22 c3 ret
7c902f23 8d4900 lea ecx,[ecx]
7c902f26 8f0424 pop [esp]
7c902f29 90 nop
7c902f2a 90 nop
7c902f2b 90 nop
-----------------------------------------------------------------------------------------------------------------
I Really hope someone can help make something of this, I cannot any kind of
info on the net about it that is understandable to me, much less any kind of
soultions yet...

werewolf_359 said:
Hello,

I need to know what I can do about fixing whatever is causing these
following errors (Shown in Event Viewer Application Log)..:

8/12/2007 3:56 PM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version 5.1.2600.2180,
fault address 0x000108df.

8/12/2007 4:03 PM Application Error Fault bucket 129280599.

8/12/2007 4:20 PM Application Error Faulting application mmc.exe, version
5.1.2600.2180, faulting module ntdll.dll, version 5.1.2600.2180, fault
address 0x00011e5a.

8/12/2007 4:22 PM Application Error Fault bucket 130061967.

8/12/2007 5:39 PM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version 5.1.2600.2180,
fault address 0x000108df.

8/12/2007 5:42 PM Application Error Fault bucket 129280599.

8/12/2007 8:44 AM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version 5.1.2600.2180,
fault address 0x000108df.

8/12/2007 8:44 AM Application Error Fault bucket 129280599.

8/14/2007 9:00 PM Application Error Faulting application mmc.exe, version
5.1.2600.2180, faulting module filemgmt.dll, version 5.1.2600.2180, fault
address 0x0000db07.

8/14/2007 9:01 PM Application Error Fault bucket 169289715. &#x000a

Each Error should have it's associated "Bucket" next to it.

To describe, I just installed XP Pro recentley on a new PC build, installed
all available updates as they were available up to 2 days ago, and had begun
to install Necessary Hardware Drivers. Chipset, onboard Raid and Network all
went fine. Nvidia Driver 158.22 and Viewsonic Monitor drivers also seemed to
go well.

Then I go to installing my Sound Driver (SoundMax ADI 1988B), and noticed
the first errors start to occur a little while later on, while doing and
checking certain things on the PC.

The Errors related to Rundll32.exe/ mmsys.cpl seemed to occur at random when
making adjustments to the Control Panel's sound settings (Both Windows
control panel, and on the SoundMax's panel.

The Errors Related to mmc.exe/ Ntdll.dll + mmc.exe/ filemgmt.dll occured
when using parts of the Administrative Tools like Component Servicees,
Computer Management, Etc. The Errors would happen when just ckicking thru the
tree-listings in those utility's open windows to view their info.

I would also add, that there is apparently a drwtsn32.txt file in
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson,
which also contains info related to the errors, but the kind of info inside
is pretty much indecipherable to me. I'm not sure that all of it would fit
here, but most of it is very similar in nature for each thread dump, so I'll
see if I can put at least a bit of it below, to show what it is listing. It
seems to state similar info for each thread/module down the list....

(part of drwtsn32.txt)
----------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=972)
When: 8/12/2007 @ 02:01:07.484
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: WOLVES-DEN
User Name: Van
Terminal Session Id: 0
Number of Processors: 2
Processor Type: x86 Family 6 Model 15 Stepping 6
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Multiprocessor Free
Registered Organization:
Registered Owner: Scott

*----> Task List <----*
0 System Process
4 System
584 smss.exe
640 csrss.exe
664 winlogon.exe
708 services.exe
720 lsass.exe
880 svchost.exe
940 svchost.exe
1040 svchost.exe
1132 svchost.exe
1208 svchost.exe
1416 spoolsv.exe
1628 Explorer.EXE
1828 nvraidservice.exe
1860 RUNDLL32.EXE
1884 smax4pnp.exe
1892 Smax4.exe
1904 ctfmon.exe
212 nvsvc32.exe
516 nSvcAppFlt.exe
540 nSvcIp.exe
1032 wmiprvse.exe
1948 alg.exe
836 unsecapp.exe
324 wscntfy.exe
468 hh.exe
972 rundll32.exe
136 sndvol32.exe
1308 sndvol32.exe
1540 sndvol32.exe
480 dwwin.exe
472 drwtsn32.exe

*----> Module List <----*
(0000000001000000 - 000000000100b000: C:\WINDOWS\system32\rundll32.exe
(000000000ffd0000 - 000000000fff8000: C:\WINDOWS\system32\rsaenh.dll
(0000000010000000 - 0000000010023000: C:\WINDOWS\system32\nvappfilter.dll
(0000000020000000 - 00000000202c5000: C:\WINDOWS\system32\xpsp2res.dll
(00000000581a0000 - 00000000581d9000: C:\WINDOWS\system32\iac25_32.ax
(00000000582d0000 - 00000000582d4000: C:\WINDOWS\system32\tssoft32.acm
(00000000582e0000 - 00000000582fe000: C:\WINDOWS\system32\sl_anet.acm
(0000000058300000 - 0000000058308000: C:\WINDOWS\system32\msgsm32.acm
(0000000058310000 - 000000005832d000: C:\WINDOWS\system32\msg723.acm
(0000000058330000 - 0000000058335000: C:\WINDOWS\system32\msg711.acm
(0000000058340000 - 000000005838d000: C:\WINDOWS\system32\msaud32.acm
(0000000058390000 - 000000005841a000: C:\WINDOWS\system32\l3codeca.acm
(0000000058420000 - 0000000058427000: C:\WINDOWS\system32\imaadp32.acm
(00000000588a0000 - 000000005893f000: C:\WINDOWS\system32\mmsys.cpl
(000000005ad70000 - 000000005ada8000: C:\WINDOWS\system32\UxTheme.dll
(000000005b860000 - 000000005b8b4000: C:\WINDOWS\system32\netapi32.dll
(000000005cb70000 - 000000005cb96000: C:\WINDOWS\system32\ShimEng.dll
(000000005d090000 - 000000005d12a000: C:\WINDOWS\system32\comctl32.dll
(0000000060da0000 - 0000000060dff000: C:\WINDOWS\system32\dpnet.dll
(00000000662b0000 - 0000000066308000: C:\WINDOWS\system32\hnetcfg.dll
(000000006c5f0000 - 000000006c60f000: C:\WINDOWS\system32\dpvvox.dll
(000000006c610000 - 000000006c647000: C:\WINDOWS\system32\dpvoice.dll
(000000006c650000 - 000000006c658000: C:\WINDOWS\system32\dpvacm.dll
(000000006f880000 - 000000006fa4a000: C:\WINDOWS\AppPatch\AcGenral.DLL
(0000000071a50000 - 0000000071a8f000: C:\WINDOWS\system32\mswsock.dll
(0000000071a90000 - 0000000071a98000: C:\WINDOWS\System32\wshtcpip.dll
(0000000071aa0000 - 0000000071aa8000: C:\WINDOWS\system32\WS2HELP.dll
(0000000071ab0000 - 0000000071ac7000: C:\WINDOWS\system32\WS2_32.dll
(0000000071b20000 - 0000000071b32000: C:\WINDOWS\system32\MPR.dll
(0000000072a90000 - 0000000072ad8000: C:\WINDOWS\system32\DEVMGR.DLL
(0000000072cf0000 - 0000000072cf7000: C:\WINDOWS\system32\msadp32.acm
(0000000072d10000 - 0000000072d18000: C:\WINDOWS\system32\msacm32.drv
(0000000072d20000 - 0000000072d29000: C:\WINDOWS\system32\wdmaud.drv
(0000000073b70000 - 0000000073b77000: C:\WINDOWS\system32\tsd32.dll
(0000000073ee0000 - 0000000073ee4000: C:\WINDOWS\system32\KsUser.dll
(0000000073f10000 - 0000000073f6c000: C:\WINDOWS\system32\dsound.dll
(0000000074720000 - 000000007476b000: C:\WINDOWS\system32\MSCTF.dll
(0000000075150000 - 0000000075164000: C:\WINDOWS\system32\Cabinet.dll
(00000000755c0000 - 00000000755ee000: C:\WINDOWS\system32\msctfime.ime
(0000000075e90000 - 0000000075f40000: C:\WINDOWS\system32\SXS.DLL
(0000000076390000 - 00000000763ad000: C:\WINDOWS\system32\IMM32.DLL
(00000000763b0000 - 00000000763f9000: C:\WINDOWS\system32\Comdlg32.dll
(00000000769c0000 - 0000000076a73000: C:\WINDOWS\system32\USERENV.dll
(0000000076b40000 - 0000000076b6d000: C:\WINDOWS\system32\WINMM.dll
(0000000076bf0000 - 0000000076bfb000: C:\WINDOWS\system32\PSAPI.DLL
(0000000076c30000 - 0000000076c5e000: C:\WINDOWS\system32\WINTRUST.dll
(0000000076c90000 - 0000000076cb8000: C:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d30000 - 0000000076d34000: C:\WINDOWS\system32\WMI.dll
(0000000076f20000 - 0000000076f47000: C:\WINDOWS\system32\DNSAPI.dll
(0000000076f60000 - 0000000076f8c000: C:\WINDOWS\system32\WLDAP32.dll
(0000000076fb0000 - 0000000076fb8000: C:\WINDOWS\System32\winrnr.dll
(0000000076fc0000 - 0000000076fc6000: C:\WINDOWS\system32\rasadhlp.dll
(0000000076fd0000 - 000000007704f000: C:\WINDOWS\system32\CLBCATQ.DLL
(0000000077050000 - 0000000077115000: C:\WINDOWS\system32\COMRes.dll
(0000000077120000 - 00000000771ac000: C:\WINDOWS\system32\OLEAUT32.dll
(00000000773d0000 - 00000000774d3000:
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
(00000000774e0000 - 000000007761d000: C:\WINDOWS\system32\ole32.dll
(0000000077920000 - 0000000077a13000: C:\WINDOWS\system32\SETUPAPI.dll
(0000000077a80000 - 0000000077b14000: C:\WINDOWS\system32\CRYPT32.dll
(0000000077b20000 - 0000000077b32000: C:\WINDOWS\system32\MSASN1.dll
(0000000077b40000 - 0000000077b62000: C:\WINDOWS\system32\appHelp.dll
(0000000077bd0000 - 0000000077bd7000: C:\WINDOWS\system32\midimap.dll
(0000000077be0000 - 0000000077bf5000: C:\WINDOWS\system32\MSACM32.dll
(0000000077c00000 - 0000000077c08000: C:\WINDOWS\system32\VERSION.dll
(0000000077c10000 - 0000000077c68000: C:\WINDOWS\system32\msvcrt.dll
(0000000077dd0000 - 0000000077e6b000: C:\WINDOWS\system32\ADVAPI32.dll
(0000000077e70000 - 0000000077f01000: C:\WINDOWS\system32\RPCRT4.dll
(0000000077f10000 - 0000000077f57000: C:\WINDOWS\system32\GDI32.dll
(0000000077f60000 - 0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll
(0000000077fe0000 - 0000000077ff1000: C:\WINDOWS\system32\secur32.dll
(000000007c800000 - 000000007c8f5000: C:\WINDOWS\system32\kernel32.dll
(000000007c900000 - 000000007c9b0000: C:\WINDOWS\system32\ntdll.dll
(000000007c9c0000 - 000000007d1d5000: C:\WINDOWS\system32\SHELL32.dll
(000000007e410000 - 000000007e4a0000: C:\WINDOWS\system32\USER32.dll

*----> State Dump for Thread Id 0x1d0 <----*

eax=00000001 ebx=0013054e ecx=7ffdd000 edx=76b601c0 esi=00000000 edi=0007f218
eip=588b08df esp=0007f180 ebp=0007f184 iopl=0 nv up ei ng nz ac po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000296

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4 (588a14b4)]
588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call mmsys!DllCanUnloadNow+0x57bf
(588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480 (588a1480)]
588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call mmsys!DllCanUnloadNow+0x5835
(588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c (588a148c)]

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\USER32.dll -
*** ERROR: Module load completed but symbols could not be loaded for
C:\WINDOWS\system32\rundll32.exe
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0007f184 588b1109 00000000 0013054e 0007f218 mmsys!DllCanUnloadNow+0x5904
0007f1a0 588b1184 0013054e 588b1168 0007f1dc mmsys!DllCanUnloadNow+0x612e
0007f1b0 7e418734 000a0180 0000c09e 00000000 mmsys!DllCanUnloadNow+0x61a9
0007f1dc 7e418816 588b1168 000a0180 0000c09e USER32!GetDC+0x6d
0007f244 7e41c63f 00098af8 588b1168 000a0180 USER32!GetDC+0x14f
0007f274 7e41c665 588b1168 000a0180 0000c09e USER32!IsWindowUnicode+0xa1
0007f294 588c1037 588b1168 000a0180 0000c09e USER32!CallWindowProcW+0x1b
0007f2b4 7e418734 000a0180 0000c09e 00000000 mmsys+0x21037
0007f2e0 7e418816 588c1005 000a0180 0000c09e USER32!GetDC+0x6d
0007f348 7e41c63f 00098af8 588c1005 000a0180 USER32!GetDC+0x14f
0007f378 7e41c665 588c1005 000a0180 0000c09e USER32!IsWindowUnicode+0xa1
0007f398 588bf79e 588c1005 000a0180 0000c09e USER32!CallWindowProcW+0x1b
0007f3b8 7e418734 000a0180 0000c09e 00000000 mmsys+0x1f79e
0007f3e4 7e418816 588bf76c 000a0180 0000c09e USER32!GetDC+0x6d
0007f44c 7e4189cd 00098af8 588bf76c 000a0180 USER32!GetDC+0x14f
0007f4ac 7e418a10 0007f4d4 00000000 0007f4f4 USER32!GetWindowLongW+0x127
0007f4bc 7e42dbbf 0007f4d4 00000000 00000000 USER32!DispatchMessageW+0xf
0007f4f4 7e42593f 001c04e2 00000000 00000000 USER32!CallMsgFilterW+0x213
0007f51c 7e43a91e 7e410000 00149228 00000000 USER32!DrawStateW+0x1f2
0007f7dc 7e43a284 0007f938 01001100 00000000 USER32!SoftModalMessageBox+0x677
0007f92c 7e4661d3 0007f938 00000028 00000000 USER32!MessageBoxIndirectA+0x23a
0007f984 7e4505f3 00000000 0007f9e8 01001100 USER32!MessageBoxTimeoutW+0x7a
0007f9a4 7e46634f 00000000 0007f9e8 01001100 USER32!MessageBoxExW+0x1b
0007f9c0 0100154d 00000000 0007f9e8 01001100 USER32!MessageBoxW+0x45
0007ff14 01001ade 00000000 00000311 01001100 rundll32+0x154d
0007ff60 01001bcf 01000000 00000000 0002066a rundll32+0x1ade
0007ffc0 7c816fd7 80000001 0007ed80 7ffde000 rundll32+0x1bcf
0007fff0 00000000 01001bdc 00000000 78746341
kernel32!RegisterWaitForInputIdle+0x49

*----> Raw Stack Dump <----*
000000000007f180 00 00 00 00 a0 f1 07 00 - 09 11 8b 58 00 00 00 00
...........X....
000000000007f190 4e 05 13 00 18 f2 07 00 - 9e c0 00 00 00 00 00 00
N...............
000000000007f1a0 b0 f1 07 00 84 11 8b 58 - 4e 05 13 00 68 11 8b 58
.......XN...h..X
000000000007f1b0 dc f1 07 00 34 87 41 7e - 80 01 0a 00 9e c0 00 00
....4.A~........
000000000007f1c0 00 00 00 00 00 00 00 00 - 68 11 8b 58 cd ab ba dc
........h..X....
000000000007f1d0 00 00 00 00 18 f2 07 00 - 68 11 8b 58 44 f2 07 00
........h..XD...
000000000007f1e0 16 88 41 7e 68 11 8b 58 - 80 01 0a 00 9e c0 00 00
..A~h..X........
000000000007f1f0 00 00 00 00 00 00 00 00 - 9e c0 00 00 68 11 8b 58
............h..X
000000000007f200 00 00 00 00 14 00 00 00 - 01 00 00 00 00 00 00 00
................
000000000007f210 00 00 00 00 10 00 00 00 - 00 00 00 00 01 00 00 00
................
000000000007f220 01 00 00 00 00 00 00 00 - 00 00 00 00 f8 f1 07 00
................
000000000007f230 a4 ed 07 00 38 f3 07 00 - 57 04 44 7e 30 88 41 7e
....8...W.D~0.A~
000000000007f240 00 00 00 00 74 f2 07 00 - 3f c6 41 7e f8 8a 09 00
....t...?.A~....
000000000007f250 68 11 8b 58 80 01 0a 00 - 9e c0 00 00 00 00 00 00
h..X............
000000000007f260 00 00 00 00 00 00 00 00 - 00 00 00 00 1c f3 07 00

Gerry · Aug 15, 2007

I have gone back to your Event Viewer Reports. Your problem seem to
start where the faulting application is rundlll32.exe.Viruses have been
known to masquerade as this file:
http://www.neuber.com/taskmanager/process/rundll32.exe.html

What are your anti-virus and anti-spyware arrangements?

My file has this as the modified date 04 August 2004, 00:56:56. A copy
is located at C:\WINDOWS\system32 and C:\WINDOWS\ServicePackFiles\i386.

Can you post a copy of the Report from Event Viewer equal to 8/12/2007
3:56 PM Application Error Faulting application rundll32.exe, version
5.1.2600.2180, faulting module mmsys.cpl, version 5.1.2600.2180, fault
address 0x000108df.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

More information is provided in Event Viewer. The combination of
rundll32.exe and mmsys.cpl seems unique to your machine.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:
No, it is not on mine, either. That's what I think was being referred
to in the KB Articles I saw earlier about it having been removed in
past updates due to vulnerabilities. It's not supposed to be in the
Dll Cache, either anymore, if I understood them correctly. The
"reference" you saw on your PC was probabally an update you did at
the time the update came out, which removed it at that point....and
could be why there was a reference to it. (Just a guess???).

Gerry said:

c:\windows\system32\plugin.ocx

Is plugin.ocx present at the location indicated? It's not on my
computer.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:

I have windows Update set to "notify me only", and let me know when
there are Downloads available. As soon as I see there are any shown,
I go ahead and Download/Install them. I always use "Custom Install",
and Download/Install any+ all possible updates.

I'm not sure if that specific update should be listed or not. Some
of the checking I did, sais something about it being included as
part of any further "Cumulative IE Updates" in the future. That
specific update was 1 year ago, and there's been several
"Cumulative" updates since.

Also, there were older KB articles stating that the Plugin.ocx was
actually supposed to be first disabled, and/or Removed, as it had
potential vulnerabilities.

All in all, I've looked thru many related articles, and anything
that could have been causing Errors, were not any of the type that
have been occurring for me..and seem basicly centered around IE
usage/components. When I have those errors, I am not using IE at the
time nor have any IE windows open. IF it is related to IE, I cannot
see how at this time.

The Drwatson log keep refering to "Symbol files not found", and
"Stack unwind information not available. Following frames may be
wrong." in one or more modules listed in each Raw stack Dump and/or
Stack Back Trace.

Problem is, I have no idea what any of those things mean in the
Watson log.

:

With regard to Windows Updates are you using Automatic Update or a
procedure where the user exercises more control over what goes on?

I think 928090 should feature in your History! The question is if
this is missing what else is missing?

In Start, Control Panel, Automatic Updates I have Automatic not
checked and have checked "Notify me but don't automatically
download or install". When notified I always commence the process
by selecting Start, Help and Support, Keep your computer
up-to-date with Windows Update and opt for a Custom install. You
might try this first and observe for effect.

Try the Custom install.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 wrote:
I'm using IE 7 (7.0.5730.11). There is no reference to an update
numbered 928090 ON the PC or in Windows Update History. A Search
of the C: Drive only showed references to 32 IE temporary files
that point to www.microsoft/windowsxp/expertzo at the end of the
line. They begin with msgget.aspx?mid= (and then long strings of
letter+numbers, ending with the www.microsoft/windowsxp/expertzo I
just mentioned..

:

What version of Internet Explorer are you using?

Check your Windows Update History for KB928090. An uninstall
folder for KB928090 is the only reference to plugin.ocx on my
computer, which has IE7 installed.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 wrote:
Not sure if this matters, but I might as well add, that while
waiting for further help, I tried running the SFC /SCANNOW. (I
had tried this before, too, after uninstalling the Sound Driver
when I mentioned in previous reply. Obviously, it did not help,
since the Error I just posted with my last reply had occured
after re-installing the Sound Driver version I mentioned Above.

I did notice that in the Event Viewer-System Report, There was
an "INFORMATION" Event listing as follows:

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64021
Date: 8/15/2007
Time: 6:10:54 AM
User: N/A
Computer: WOLVES-DEN
Description:
The system file c:\windows\system32\plugin.ocx could not be
copied into the DLL cache. The specific error code is
0x00000000 [The operation completed successfully.
]. This file is necessary to maintain system stability.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
--------------------------------------------------------------------------------------------
This same entry was also made the first time I ran the SFC Scan
earlier, too. That was the only other listing, aside from the
lines noting the successful Start + Stop of the SFC scan.

:

Hello, and thank you for replying.

My Windows Disk/version is an OEM XP Pro CD WITH SP2. ( I just
bought it a month ago with rest of my PC build parts).

NORMAL view of Device Manager Shows NO Problem-type Devices (no
Explanation marks, etc.) HIDDEN Devices show a "Serial" entry
with ywllow ! under Non Plug and Play Drivers and a Parport
entry under same area with similar yellow !. Both have codes of
(24). They are Root_Legacy_TCPIP + Root_Legacy_Parport,
Respectivley.

SigVerif shows only 1 unsigned item, an Icm entry for my
Viewsonic A75s) Monitor(for which that was the last file(s)
they made for that monitor). File is located in
C:\Windows\System32\Spool\Drivers\color Folder.

While I was waiting earlier, I had uninstalled the SoundMax
Driver, went in Safe Mode, and used Driver Cleaner Pro to clear
any remnants. Just a few mins ago, I tried installing yet
another SoundMax driver version, the most recent WHQL listed
from ASUS Support site v5.10.1.6110. There were NO errors the
whole time the driver was uninstalled, no matter how I tried
to re-produce them. Just now, the following Error was quick to
reproduce (Just clicking around different tree lines in the
Admin. Tools' Computer Management Window once the driver was
reinstalled....:
-----------------------------------------------------------------------------------------------
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 8/15/2007
Time: 5:23:17 AM
User: N/A
Computer: WOLVES-DEN
Description:
Faulting application mmc.exe, version 5.1.2600.2180, faulting
module ntdll.dll, version 5.1.2600.2180, fault address
0x0001201e.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 6d 6d 63 ure mmc
0018: 2e 65 78 65 20 35 2e 31 .exe 5.1
0020: 2e 32 36 30 30 2e 32 31 .2600.21
0028: 38 30 20 69 6e 20 6e 74 80 in nt
0030: 64 6c 6c 2e 64 6c 6c 20 dll.dll
0038: 35 2e 31 2e 32 36 30 30 5.1.2600
0040: 2e 32 31 38 30 20 61 74 .2180 at
0048: 20 6f 66 66 73 65 74 20 offset
0050: 30 30 30 31 32 30 31 65 0001201e
0058: 0d 0a ..

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 8/15/2007
Time: 5:23:21 AM
User: N/A
Computer: WOLVES-DEN
Description:
Fault bucket 170130483.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 37 30 31 33 30 34 38 17013048
0010: 33 0d 0a 3..

-----------------------------------------------------------------------------------------------

:

A better way to post Event Viewer Error Reports.

A tip for posting copies of Error Reports! Run Event Viewer
and double click on the error you want to copy. In the
window, which appears is a button resembling two pages. Click
the button and close Event Viewer.Now start your message
(email) and do a paste into the body of the message. Make
sure this is the first paste after exiting from Event Viewer.

Are there any yellow question marks in Device Manager? Right
click on the My Computer icon on your Desktop and select
Properties, Hardware,Device Manager. If yes what is the Device
Error code?

Try Start, Run, type "sigverif.exe" without quotes and hit OK.
What drivers are listed as unsigned? Disregard those which are
not checked.

Is your Windows XP CD Retail or OEM? Is it pre or post SP2?

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 wrote:
Hello,

I need to know what I can do about fixing whatever is causing
these following errors (Shown in Event Viewer Application
Log)..:

8/12/2007 3:56 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module
mmsys.cpl, version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 4:03 PM Application Error Fault bucket 129280599.

8/12/2007 4:20 PM Application Error Faulting application
mmc.exe, version
5.1.2600.2180, faulting module ntdll.dll, version
5.1.2600.2180, fault address 0x00011e5a.

8/12/2007 4:22 PM Application Error Fault bucket 130061967.

8/12/2007 5:39 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module
mmsys.cpl, version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 5:42 PM Application Error Fault bucket 129280599.

8/12/2007 8:44 AM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module
mmsys.cpl, version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 8:44 AM Application Error Fault bucket 129280599.

8/14/2007 9:00 PM Application Error Faulting application
mmc.exe, version
5.1.2600.2180, faulting module filemgmt.dll, version
5.1.2600.2180, fault address 0x0000db07.

8/14/2007 9:01 PM Application Error Fault bucket
169289715.&#x000a

Each Error should have it's associated "Bucket" next to it.

Click to expand...

Click to expand...

Guest · Aug 16, 2007

Would anyone else have anyadditional or different suggestions as for how to
resolve this, before I just end up wiping the Drive, going and getting a
different, new Sound card and do a clean fresh install over again?

werewolf_359 said:
Here is a summarized version of the drwtsn32 log, showing just the Faulting
item and the actual Fault line in the "dump" in case it helps anyone to help
me figure what is going on or how to fix Remember, the Event Viewer log items
were displayed in the beginning post(s)/replies....
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=972)
When: 8/12/2007 @ 02:01:07.484
Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4 (588a14b4)]
588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call mmsys!DllCanUnloadNow+0x57bf
(588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480 (588a1480)]
588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call mmsys!DllCanUnloadNow+0x5835
(588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c (588a148c)]

---------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=1516)
When: 8/12/2007 @ 08:44:51.406
Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4 (588a14b4)]
588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call mmsys!DllCanUnloadNow+0x57bf
(588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480 (588a1480)]
588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call mmsys!DllCanUnloadNow+0x5835
(588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c (588a148c)]
----------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=500)
When: 8/12/2007 @ 16:03:48.062
Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4 (588a14b4)]
588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call mmsys!DllCanUnloadNow+0x57bf
(588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480 (588a1480)]
588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call mmsys!DllCanUnloadNow+0x5835
(588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c (588a148c)]
-----------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\mmc.exe (pid=2388)
When: 8/12/2007 @ 16:22:05.562
Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\ntdll.dll -
function: ntdll!RtlInitializeCriticalSection
7c911e3f ee out dx,al
7c911e40 ed in eax,dx
7c911e41 ffff ???
7c911e43 807d1400 cmp byte ptr [ebp+0x14],0x0
7c911e47 0f85977a0300 jne ntdll!RtlInitializeSListHead+0x108d4
(7c9498e4)
7c911e4d 8b4e0c mov ecx,[esi+0xc]
7c911e50 8d4608 lea eax,[esi+0x8]
7c911e53 8b10 mov edx,[eax]
7c911e55 894d08 mov [ebp+0x8],ecx
7c911e58 8b09 mov ecx,[ecx]
FAULT ->7c911e5a 3b4a04 cmp ecx,[edx+0x4]
ds:0023:00000004=????????
7c911e5d 89550c mov [ebp+0xc],edx
7c911e60 0f859d000000 jne ntdll!RtlInitializeCriticalSection+0x3d6
(7c911f03)
7c911e66 3bc8 cmp ecx,eax
7c911e68 0f8595000000 jne ntdll!RtlInitializeCriticalSection+0x3d6
(7c911f03)
7c911e6e 56 push esi
7c911e6f 53 push ebx
7c911e70 e81fedffff call ntdll!wcsncpy+0x105 (7c910b94)
7c911e75 8b450c mov eax,[ebp+0xc]
7c911e78 8b4d08 mov ecx,[ebp+0x8]
7c911e7b 3bc1 cmp eax,ecx
-----------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=1024)
When: 8/12/2007 @ 17:42:22.343
Exception number: c0000005 (access violation)
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4 (588a14b4)]
588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call mmsys!DllCanUnloadNow+0x57bf
(588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480 (588a1480)]
588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call mmsys!DllCanUnloadNow+0x5835
(588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c (588a148c)]
-----------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\mmc.exe (pid=432)
When: 8/14/2007 @ 21:01:29.312
Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\filemgmt.dll -
function: filemgmt
7297daf5 cc int 3
7297daf6 cc int 3
7297daf7 8bff mov edi,edi
7297daf9 55 push ebp
7297dafa 8bec mov ebp,esp
7297dafc 8b4508 mov eax,[ebp+0x8]
7297daff 8b10 mov edx,[eax]
7297db01 51 push ecx
7297db02 ff750c push dword ptr [ebp+0xc]
7297db05 8bc8 mov ecx,eax
FAULT ->7297db07 ff5248 call dword ptr [edx+0x48]
ds:0023:0000004b=????????
7297db0a 5d pop ebp
7297db0b c20800 ret 0x8
7297db0e cc int 3
7297db0f cc int 3
7297db10 cc int 3
7297db11 cc int 3
7297db12 cc int 3
7297db13 8bff mov edi,edi
7297db15 55 push ebp
7297db16 8bec mov ebp,esp
-----------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\mmc.exe (pid=540)
When: 8/15/2007 @ 05:23:21.625
Exception number: c0000005 (access violation)

function: ntdll!tan
7c902f04 90 nop
7c902f05 90 nop
7c902f06 53 push ebx
7c902f07 55 push ebp
7c902f08 8be9 mov ebp,ecx
7c902f0a 8b5504 mov edx,[ebp+0x4]
7c902f0d 8b4500 mov eax,[ebp]
7c902f10 0bc0 or eax,eax
7c902f12 740c jz ntdll!tan+0xe2 (7c902f20)
7c902f14 8d4aff lea ecx,[edx-0x1]
FAULT ->7c902f17 8b18 mov ebx,[eax]
ds:0023:009ce620=????????
7c902f19 f00fc74d00 lock cmpxchg8b qword ptr [ebp]
7c902f1e 75f0 jnz ntdll!tan+0xd2 (7c902f10)
7c902f20 5d pop ebp
7c902f21 5b pop ebx
7c902f22 c3 ret
7c902f23 8d4900 lea ecx,[ecx]
7c902f26 8f0424 pop [esp]
7c902f29 90 nop
7c902f2a 90 nop
7c902f2b 90 nop
-----------------------------------------------------------------------------------------------------------------
I Really hope someone can help make something of this, I cannot any kind of
info on the net about it that is understandable to me, much less any kind of
soultions yet...

werewolf_359 said:

Hello,

I need to know what I can do about fixing whatever is causing these
following errors (Shown in Event Viewer Application Log)..:

8/12/2007 3:56 PM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version 5.1.2600.2180,
fault address 0x000108df.

8/12/2007 4:03 PM Application Error Fault bucket 129280599.

8/12/2007 4:20 PM Application Error Faulting application mmc.exe, version
5.1.2600.2180, faulting module ntdll.dll, version 5.1.2600.2180, fault
address 0x00011e5a.

8/12/2007 4:22 PM Application Error Fault bucket 130061967.

8/12/2007 5:39 PM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version 5.1.2600.2180,
fault address 0x000108df.

8/12/2007 5:42 PM Application Error Fault bucket 129280599.

8/12/2007 8:44 AM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version 5.1.2600.2180,
fault address 0x000108df.

8/12/2007 8:44 AM Application Error Fault bucket 129280599.

8/14/2007 9:00 PM Application Error Faulting application mmc.exe, version
5.1.2600.2180, faulting module filemgmt.dll, version 5.1.2600.2180, fault
address 0x0000db07.

8/14/2007 9:01 PM Application Error Fault bucket 169289715. &#x000a

Each Error should have it's associated "Bucket" next to it.

To describe, I just installed XP Pro recentley on a new PC build, installed
all available updates as they were available up to 2 days ago, and had begun
to install Necessary Hardware Drivers. Chipset, onboard Raid and Network all
went fine. Nvidia Driver 158.22 and Viewsonic Monitor drivers also seemed to
go well.

Then I go to installing my Sound Driver (SoundMax ADI 1988B), and noticed
the first errors start to occur a little while later on, while doing and
checking certain things on the PC.

The Errors related to Rundll32.exe/ mmsys.cpl seemed to occur at random when
making adjustments to the Control Panel's sound settings (Both Windows
control panel, and on the SoundMax's panel.

The Errors Related to mmc.exe/ Ntdll.dll + mmc.exe/ filemgmt.dll occured
when using parts of the Administrative Tools like Component Servicees,
Computer Management, Etc. The Errors would happen when just ckicking thru the
tree-listings in those utility's open windows to view their info.

I would also add, that there is apparently a drwtsn32.txt file in
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson,
which also contains info related to the errors, but the kind of info inside
is pretty much indecipherable to me. I'm not sure that all of it would fit
here, but most of it is very similar in nature for each thread dump, so I'll
see if I can put at least a bit of it below, to show what it is listing. It
seems to state similar info for each thread/module down the list....

(part of drwtsn32.txt)

Click to expand...

Gerry · Aug 16, 2007

There could be a connection between mmsys.cpl and sound. What made you
say you were contemplating buying a new Sound card?

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:
Would anyone else have anyadditional or different suggestions as for
how to resolve this, before I just end up wiping the Drive, going and
getting a different, new Sound card and do a clean fresh install over
again?

werewolf_359 said:

Here is a summarized version of the drwtsn32 log, showing just the
Faulting item and the actual Fault line in the "dump" in case it
helps anyone to help me figure what is going on or how to fix
Remember, the Event Viewer log items were displayed in the beginning
post(s)/replies....
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=972)
When: 8/12/2007 @ 02:01:07.484
Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4
(588a14b4)] 588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call
mmsys!DllCanUnloadNow+0x57bf (588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480
(588a1480)] 588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call
mmsys!DllCanUnloadNow+0x5835 (588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c
(588a148c)]

---------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=1516)
When: 8/12/2007 @ 08:44:51.406
Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4
(588a14b4)] 588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call
mmsys!DllCanUnloadNow+0x57bf (588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480
(588a1480)] 588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call
mmsys!DllCanUnloadNow+0x5835 (588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c
(588a148c)]
----------------------------------------------------------------------------------------------------------------
Application exception occurred: App:
C:\WINDOWS\system32\rundll32.exe (pid=500) When: 8/12/2007 @
16:03:48.062 Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4
(588a14b4)] 588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call
mmsys!DllCanUnloadNow+0x57bf (588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480
(588a1480)] 588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call
mmsys!DllCanUnloadNow+0x5835 (588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c
(588a148c)]
-----------------------------------------------------------------------------------------------------------------
Application exception occurred: App:
C:\WINDOWS\system32\mmc.exe (pid=2388) When: 8/12/2007 @
16:22:05.562 Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\ntdll.dll -
function: ntdll!RtlInitializeCriticalSection
7c911e3f ee out dx,al
7c911e40 ed in eax,dx
7c911e41 ffff ???
7c911e43 807d1400 cmp byte ptr [ebp+0x14],0x0
7c911e47 0f85977a0300 jne
ntdll!RtlInitializeSListHead+0x108d4 (7c9498e4)
7c911e4d 8b4e0c mov ecx,[esi+0xc]
7c911e50 8d4608 lea eax,[esi+0x8]
7c911e53 8b10 mov edx,[eax]
7c911e55 894d08 mov [ebp+0x8],ecx
7c911e58 8b09 mov ecx,[ecx]
FAULT ->7c911e5a 3b4a04 cmp ecx,[edx+0x4]
ds:0023:00000004=????????
7c911e5d 89550c mov [ebp+0xc],edx
7c911e60 0f859d000000 jne
ntdll!RtlInitializeCriticalSection+0x3d6 (7c911f03)
7c911e66 3bc8 cmp ecx,eax
7c911e68 0f8595000000 jne
ntdll!RtlInitializeCriticalSection+0x3d6 (7c911f03)
7c911e6e 56 push esi
7c911e6f 53 push ebx
7c911e70 e81fedffff call ntdll!wcsncpy+0x105
(7c910b94) 7c911e75 8b450c mov eax,[ebp+0xc]
7c911e78 8b4d08 mov ecx,[ebp+0x8]
7c911e7b 3bc1 cmp eax,ecx
-----------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=1024)
When: 8/12/2007 @ 17:42:22.343
Exception number: c0000005 (access violation)
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4
(588a14b4)] 588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call
mmsys!DllCanUnloadNow+0x57bf (588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480
(588a1480)] 588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call
mmsys!DllCanUnloadNow+0x5835 (588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c
(588a148c)]
-----------------------------------------------------------------------------------------------------------------
Application exception occurred: App:
C:\WINDOWS\system32\mmc.exe (pid=432) When: 8/14/2007 @
21:01:29.312 Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\filemgmt.dll -
function: filemgmt
7297daf5 cc int 3
7297daf6 cc int 3
7297daf7 8bff mov edi,edi
7297daf9 55 push ebp
7297dafa 8bec mov ebp,esp
7297dafc 8b4508 mov eax,[ebp+0x8]
7297daff 8b10 mov edx,[eax]
7297db01 51 push ecx
7297db02 ff750c push dword ptr [ebp+0xc]
7297db05 8bc8 mov ecx,eax
FAULT ->7297db07 ff5248 call dword ptr [edx+0x48]
ds:0023:0000004b=????????
7297db0a 5d pop ebp
7297db0b c20800 ret 0x8
7297db0e cc int 3
7297db0f cc int 3
7297db10 cc int 3
7297db11 cc int 3
7297db12 cc int 3
7297db13 8bff mov edi,edi
7297db15 55 push ebp
7297db16 8bec mov ebp,esp
-----------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\mmc.exe (pid=540)
When: 8/15/2007 @ 05:23:21.625
Exception number: c0000005 (access violation)

function: ntdll!tan
7c902f04 90 nop
7c902f05 90 nop
7c902f06 53 push ebx
7c902f07 55 push ebp
7c902f08 8be9 mov ebp,ecx
7c902f0a 8b5504 mov edx,[ebp+0x4]
7c902f0d 8b4500 mov eax,[ebp]
7c902f10 0bc0 or eax,eax
7c902f12 740c jz ntdll!tan+0xe2 (7c902f20)
7c902f14 8d4aff lea ecx,[edx-0x1]
FAULT ->7c902f17 8b18 mov ebx,[eax]
ds:0023:009ce620=????????
7c902f19 f00fc74d00 lock cmpxchg8b qword ptr [ebp]
7c902f1e 75f0 jnz ntdll!tan+0xd2 (7c902f10)
7c902f20 5d pop ebp
7c902f21 5b pop ebx
7c902f22 c3 ret
7c902f23 8d4900 lea ecx,[ecx]
7c902f26 8f0424 pop [esp]
7c902f29 90 nop
7c902f2a 90 nop
7c902f2b 90 nop
-----------------------------------------------------------------------------------------------------------------
I Really hope someone can help make something of this, I cannot any
kind of info on the net about it that is understandable to me, much
less any kind of soultions yet...

werewolf_359 said:

Hello,

I need to know what I can do about fixing whatever is causing these
following errors (Shown in Event Viewer Application Log)..:

8/12/2007 3:56 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version 5.1.2600.2180, fault address 0x000108df.

8/12/2007 4:03 PM Application Error Fault bucket 129280599.

8/12/2007 4:20 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module ntdll.dll, version 5.1.2600.2180,
fault address 0x00011e5a.

8/12/2007 4:22 PM Application Error Fault bucket 130061967.

8/12/2007 5:39 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version 5.1.2600.2180, fault address 0x000108df.

8/12/2007 5:42 PM Application Error Fault bucket 129280599.

8/12/2007 8:44 AM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version 5.1.2600.2180, fault address 0x000108df.

8/12/2007 8:44 AM Application Error Fault bucket 129280599.

8/14/2007 9:00 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module filemgmt.dll, version 5.1.2600.2180,
fault address 0x0000db07.

8/14/2007 9:01 PM Application Error Fault bucket 169289715. &#x000a

Each Error should have it's associated "Bucket" next to it.

To describe, I just installed XP Pro recentley on a new PC build,
installed all available updates as they were available up to 2 days
ago, and had begun to install Necessary Hardware Drivers. Chipset,
onboard Raid and Network all went fine. Nvidia Driver 158.22 and
Viewsonic Monitor drivers also seemed to go well.

Then I go to installing my Sound Driver (SoundMax ADI 1988B), and
noticed the first errors start to occur a little while later on,
while doing and checking certain things on the PC.

The Errors related to Rundll32.exe/ mmsys.cpl seemed to occur at
random when making adjustments to the Control Panel's sound
settings (Both Windows control panel, and on the SoundMax's panel.

The Errors Related to mmc.exe/ Ntdll.dll + mmc.exe/ filemgmt.dll
occured when using parts of the Administrative Tools like Component
Servicees, Computer Management, Etc. The Errors would happen when
just ckicking thru the tree-listings in those utility's open
windows to view their info.

I would also add, that there is apparently a drwtsn32.txt file in
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr
Watson, which also contains info related to the errors, but the
kind of info inside is pretty much indecipherable to me. I'm not
sure that all of it would fit here, but most of it is very similar
in nature for each thread dump, so I'll see if I can put at least a
bit of it below, to show what it is listing. It seems to state
similar info for each thread/module down the list....

(part of drwtsn32.txt)

Click to expand...

Click to expand...

Guest · Aug 18, 2007

I've just been thinking about getting and trying a new card, because no
matter what version of the drivers' I try, they are all causing errors for
some reason. And at around $30.00, a comaprable more "common" mainstream
sound card wouldn't be too much of a hardship to try to see if it helps
resolve the problem(s). However I am also considering other things too, like
trying a complete, clean full XP install again, since it'd take less than a
day to get back to the point I'm at now in the current setup. I'm considering
THAT, thinking that maybe I just should have done the Driver and update
installs in a different order. Some suggestions here differ from the order I
used, so perhaps that too could be a contributing factor.

Yes, it does appear to be related to the sound card or it's driver. The only
time those errors occured was AFTER installing the sound cards drivers...and
doesn't seem to matter what version of the drivers, or even if they were WHQL
versions (2 of the 3 different ones I tried were WHQL verisons). ALL of them
caused similar errors to occur once installed...even after I made sure to
remove all of each versions' driver remants for the ones I uninstalled, too.

Before all that though, I am going to try installing and running a few of my
every-day programs just to see how if they will work properly with the sound
(and everything else), which may help me figure a little better just how bad
of a problem (or not) this card may have.

Gerry said:
There could be a connection between mmsys.cpl and sound. What made you
say you were contemplating buying a new Sound card?

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:

Would anyone else have anyadditional or different suggestions as for
how to resolve this, before I just end up wiping the Drive, going and
getting a different, new Sound card and do a clean fresh install over
again?

werewolf_359 said:

Here is a summarized version of the drwtsn32 log, showing just the
Faulting item and the actual Fault line in the "dump" in case it
helps anyone to help me figure what is going on or how to fix
Remember, the Event Viewer log items were displayed in the beginning
post(s)/replies....
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=972)
When: 8/12/2007 @ 02:01:07.484
Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4
(588a14b4)] 588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call
mmsys!DllCanUnloadNow+0x57bf (588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480
(588a1480)] 588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call
mmsys!DllCanUnloadNow+0x5835 (588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c
(588a148c)]

---------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=1516)
When: 8/12/2007 @ 08:44:51.406
Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4
(588a14b4)] 588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call
mmsys!DllCanUnloadNow+0x57bf (588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480
(588a1480)] 588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call
mmsys!DllCanUnloadNow+0x5835 (588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c
(588a148c)]
----------------------------------------------------------------------------------------------------------------
Application exception occurred: App:
C:\WINDOWS\system32\rundll32.exe (pid=500) When: 8/12/2007 @
16:03:48.062 Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4
(588a14b4)] 588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call
mmsys!DllCanUnloadNow+0x57bf (588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480
(588a1480)] 588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call
mmsys!DllCanUnloadNow+0x5835 (588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c
(588a148c)]
-----------------------------------------------------------------------------------------------------------------
Application exception occurred: App:
C:\WINDOWS\system32\mmc.exe (pid=2388) When: 8/12/2007 @
16:22:05.562 Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\ntdll.dll -
function: ntdll!RtlInitializeCriticalSection
7c911e3f ee out dx,al
7c911e40 ed in eax,dx
7c911e41 ffff ???
7c911e43 807d1400 cmp byte ptr [ebp+0x14],0x0
7c911e47 0f85977a0300 jne
ntdll!RtlInitializeSListHead+0x108d4 (7c9498e4)
7c911e4d 8b4e0c mov ecx,[esi+0xc]
7c911e50 8d4608 lea eax,[esi+0x8]
7c911e53 8b10 mov edx,[eax]
7c911e55 894d08 mov [ebp+0x8],ecx
7c911e58 8b09 mov ecx,[ecx]
FAULT ->7c911e5a 3b4a04 cmp ecx,[edx+0x4]
ds:0023:00000004=????????
7c911e5d 89550c mov [ebp+0xc],edx
7c911e60 0f859d000000 jne
ntdll!RtlInitializeCriticalSection+0x3d6 (7c911f03)
7c911e66 3bc8 cmp ecx,eax
7c911e68 0f8595000000 jne
ntdll!RtlInitializeCriticalSection+0x3d6 (7c911f03)
7c911e6e 56 push esi
7c911e6f 53 push ebx
7c911e70 e81fedffff call ntdll!wcsncpy+0x105
(7c910b94) 7c911e75 8b450c mov eax,[ebp+0xc]
7c911e78 8b4d08 mov ecx,[ebp+0x8]
7c911e7b 3bc1 cmp eax,ecx
-----------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=1024)
When: 8/12/2007 @ 17:42:22.343
Exception number: c0000005 (access violation)
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4
(588a14b4)] 588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call
mmsys!DllCanUnloadNow+0x57bf (588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480
(588a1480)] 588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call
mmsys!DllCanUnloadNow+0x5835 (588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c
(588a148c)]
-----------------------------------------------------------------------------------------------------------------
Application exception occurred: App:
C:\WINDOWS\system32\mmc.exe (pid=432) When: 8/14/2007 @
21:01:29.312 Exception number: c0000005 (access violation)

*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\filemgmt.dll -
function: filemgmt
7297daf5 cc int 3
7297daf6 cc int 3
7297daf7 8bff mov edi,edi
7297daf9 55 push ebp
7297dafa 8bec mov ebp,esp
7297dafc 8b4508 mov eax,[ebp+0x8]
7297daff 8b10 mov edx,[eax]
7297db01 51 push ecx
7297db02 ff750c push dword ptr [ebp+0xc]
7297db05 8bc8 mov ecx,eax
FAULT ->7297db07 ff5248 call dword ptr [edx+0x48]
ds:0023:0000004b=????????
7297db0a 5d pop ebp
7297db0b c20800 ret 0x8
7297db0e cc int 3
7297db0f cc int 3
7297db10 cc int 3
7297db11 cc int 3
7297db12 cc int 3
7297db13 8bff mov edi,edi
7297db15 55 push ebp
7297db16 8bec mov ebp,esp
-----------------------------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\mmc.exe (pid=540)
When: 8/15/2007 @ 05:23:21.625
Exception number: c0000005 (access violation)

function: ntdll!tan
7c902f04 90 nop
7c902f05 90 nop
7c902f06 53 push ebx
7c902f07 55 push ebp
7c902f08 8be9 mov ebp,ecx
7c902f0a 8b5504 mov edx,[ebp+0x4]
7c902f0d 8b4500 mov eax,[ebp]
7c902f10 0bc0 or eax,eax
7c902f12 740c jz ntdll!tan+0xe2 (7c902f20)
7c902f14 8d4aff lea ecx,[edx-0x1]
FAULT ->7c902f17 8b18 mov ebx,[eax]
ds:0023:009ce620=????????
7c902f19 f00fc74d00 lock cmpxchg8b qword ptr [ebp]
7c902f1e 75f0 jnz ntdll!tan+0xd2 (7c902f10)
7c902f20 5d pop ebp
7c902f21 5b pop ebx
7c902f22 c3 ret
7c902f23 8d4900 lea ecx,[ecx]
7c902f26 8f0424 pop [esp]
7c902f29 90 nop
7c902f2a 90 nop
7c902f2b 90 nop
-----------------------------------------------------------------------------------------------------------------
I Really hope someone can help make something of this, I cannot any
kind of info on the net about it that is understandable to me, much
less any kind of soultions yet...

:

Hello,

I need to know what I can do about fixing whatever is causing these
following errors (Shown in Event Viewer Application Log)..:

8/12/2007 3:56 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version 5.1.2600.2180, fault address 0x000108df.

8/12/2007 4:03 PM Application Error Fault bucket 129280599.

8/12/2007 4:20 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module ntdll.dll, version 5.1.2600.2180,
fault address 0x00011e5a.

8/12/2007 4:22 PM Application Error Fault bucket 130061967.

8/12/2007 5:39 PM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version 5.1.2600.2180, fault address 0x000108df.

8/12/2007 5:42 PM Application Error Fault bucket 129280599.

8/12/2007 8:44 AM Application Error Faulting application
rundll32.exe, version 5.1.2600.2180, faulting module mmsys.cpl,
version 5.1.2600.2180, fault address 0x000108df.

8/12/2007 8:44 AM Application Error Fault bucket 129280599.

8/14/2007 9:00 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module filemgmt.dll, version 5.1.2600.2180,
fault address 0x0000db07.

8/14/2007 9:01 PM Application Error Fault bucket 169289715.
&#x000a

Click to expand...

Click to expand...

DragonWolf903 · May 21, 2008

Gerry said:
A better way to post Event Viewer Error Reports.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

Are there any yellow question marks in Device Manager? Right click on
the My Computer icon on your Desktop and select Properties,
Hardware,Device Manager. If yes what is the Device Error code?

Try Start, Run, type "sigverif.exe" without quotes and hit OK. What
drivers are listed as unsigned? Disregard those which are not checked.

Is your Windows XP CD Retail or OEM? Is it pre or post SP2?

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

werewolf_359 said:

Hello,

I need to know what I can do about fixing whatever is causing these
following errors (Shown in Event Viewer Application Log)..:

8/12/2007 3:56 PM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 4:03 PM Application Error Fault bucket 129280599.

8/12/2007 4:20 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module ntdll.dll, version 5.1.2600.2180, fault
address 0x00011e5a.

8/12/2007 4:22 PM Application Error Fault bucket 130061967.

8/12/2007 5:39 PM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 5:42 PM Application Error Fault bucket 129280599.

8/12/2007 8:44 AM Application Error Faulting application rundll32.exe,
version 5.1.2600.2180, faulting module mmsys.cpl, version
5.1.2600.2180, fault address 0x000108df.

8/12/2007 8:44 AM Application Error Fault bucket 129280599.

8/14/2007 9:00 PM Application Error Faulting application mmc.exe,
version
5.1.2600.2180, faulting module filemgmt.dll, version 5.1.2600.2180,
fault address 0x0000db07.

8/14/2007 9:01 PM Application Error Fault bucket 169289715.&#x000a

Each Error should have it's associated "Bucket" next to it.

To describe, I just installed XP Pro recentley on a new PC build,
installed all available updates as they were available up to 2 days
ago, and had begun to install Necessary Hardware Drivers. Chipset,
onboard Raid and Network all went fine. Nvidia Driver 158.22 and
Viewsonic Monitor drivers also seemed to go well.

Then I go to installing my Sound Driver (SoundMax ADI 1988B), and
noticed
the first errors start to occur a little while later on, while doing
and checking certain things on the PC.

The Errors related to Rundll32.exe/ mmsys.cpl seemed to occur at
random when making adjustments to the Control Panel's sound settings
(Both Windows control panel, and on the SoundMax's panel.

The Errors Related to mmc.exe/ Ntdll.dll + mmc.exe/ filemgmt.dll
occured
when using parts of the Administrative Tools like Component Servicees,
Computer Management, Etc. The Errors would happen when just ckicking
thru the tree-listings in those utility's open windows to view their
info.

I would also add, that there is apparently a drwtsn32.txt file in
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr
Watson, which also contains info related to the errors, but the kind
of info inside is pretty much indecipherable to me. I'm not sure that
all of it would fit here, but most of it is very similar in nature
for each thread dump, so I'll see if I can put at least a bit of it
below, to show what it is listing. It seems to state similar info for
each thread/module down the list....

(part of drwtsn32.txt)
----------------------------------------------------------------------------------------------
Application exception occurred:
App: C:\WINDOWS\system32\rundll32.exe (pid=972)
When: 8/12/2007 @ 02:01:07.484
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: WOLVES-DEN
User Name: Van
Terminal Session Id: 0
Number of Processors: 2
Processor Type: x86 Family 6 Model 15 Stepping 6
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Multiprocessor Free
Registered Organization:
Registered Owner: Scott

*----> Task List <----*
0 System Process
4 System
584 smss.exe
640 csrss.exe
664 winlogon.exe
708 services.exe
720 lsass.exe
880 svchost.exe
940 svchost.exe
1040 svchost.exe
1132 svchost.exe
1208 svchost.exe
1416 spoolsv.exe
1628 Explorer.EXE
1828 nvraidservice.exe
1860 RUNDLL32.EXE
1884 smax4pnp.exe
1892 Smax4.exe
1904 ctfmon.exe
212 nvsvc32.exe
516 nSvcAppFlt.exe
540 nSvcIp.exe
1032 wmiprvse.exe
1948 alg.exe
836 unsecapp.exe
324 wscntfy.exe
468 hh.exe
972 rundll32.exe
136 sndvol32.exe
1308 sndvol32.exe
1540 sndvol32.exe
480 dwwin.exe
472 drwtsn32.exe

*----> Module List <----*
(0000000001000000 - 000000000100b000: C:\WINDOWS\system32\rundll32.exe
(000000000ffd0000 - 000000000fff8000: C:\WINDOWS\system32\rsaenh.dll
(0000000010000000 - 0000000010023000:
C:\WINDOWS\system32\nvappfilter.dll (0000000020000000 -
00000000202c5000: C:\WINDOWS\system32\xpsp2res.dll (00000000581a0000
- 00000000581d9000: C:\WINDOWS\system32\iac25_32.ax (00000000582d0000
- 00000000582d4000: C:\WINDOWS\system32\tssoft32.acm
(00000000582e0000 - 00000000582fe000: C:\WINDOWS\system32\sl_anet.acm
(0000000058300000 - 0000000058308000: C:\WINDOWS\system32\msgsm32.acm
(0000000058310000 - 000000005832d000: C:\WINDOWS\system32\msg723.acm
(0000000058330000 - 0000000058335000: C:\WINDOWS\system32\msg711.acm
(0000000058340000 - 000000005838d000: C:\WINDOWS\system32\msaud32.acm
(0000000058390000 - 000000005841a000:
C:\WINDOWS\system32\l3codeca.acm (0000000058420000 -
0000000058427000: C:\WINDOWS\system32\imaadp32.acm (00000000588a0000
- 000000005893f000: C:\WINDOWS\system32\mmsys.cpl (000000005ad70000 -
000000005ada8000: C:\WINDOWS\system32\UxTheme.dll (000000005b860000 -
000000005b8b4000: C:\WINDOWS\system32\netapi32.dll (000000005cb70000
- 000000005cb96000: C:\WINDOWS\system32\ShimEng.dll (000000005d090000
- 000000005d12a000: C:\WINDOWS\system32\comctl32.dll
(0000000060da0000 - 0000000060dff000: C:\WINDOWS\system32\dpnet.dll
(00000000662b0000 - 0000000066308000: C:\WINDOWS\system32\hnetcfg.dll
(000000006c5f0000 - 000000006c60f000: C:\WINDOWS\system32\dpvvox.dll
(000000006c610000 - 000000006c647000: C:\WINDOWS\system32\dpvoice.dll
(000000006c650000 - 000000006c658000: C:\WINDOWS\system32\dpvacm.dll
(000000006f880000 - 000000006fa4a000:
C:\WINDOWS\AppPatch\AcGenral.DLL (0000000071a50000 -
0000000071a8f000: C:\WINDOWS\system32\mswsock.dll (0000000071a90000 -
0000000071a98000: C:\WINDOWS\System32\wshtcpip.dll (0000000071aa0000
- 0000000071aa8000: C:\WINDOWS\system32\WS2HELP.dll (0000000071ab0000
- 0000000071ac7000: C:\WINDOWS\system32\WS2_32.dll (0000000071b20000
- 0000000071b32000: C:\WINDOWS\system32\MPR.dll (0000000072a90000 -
0000000072ad8000: C:\WINDOWS\system32\DEVMGR.DLL (0000000072cf0000 -
0000000072cf7000: C:\WINDOWS\system32\msadp32.acm (0000000072d10000 -
0000000072d18000: C:\WINDOWS\system32\msacm32.drv (0000000072d20000 -
0000000072d29000: C:\WINDOWS\system32\wdmaud.drv (0000000073b70000 -
0000000073b77000: C:\WINDOWS\system32\tsd32.dll (0000000073ee0000 -
0000000073ee4000: C:\WINDOWS\system32\KsUser.dll (0000000073f10000 -
0000000073f6c000: C:\WINDOWS\system32\dsound.dll (0000000074720000 -
000000007476b000: C:\WINDOWS\system32\MSCTF.dll (0000000075150000 -
0000000075164000: C:\WINDOWS\system32\Cabinet.dll (00000000755c0000 -
00000000755ee000: C:\WINDOWS\system32\msctfime.ime (0000000075e90000
- 0000000075f40000: C:\WINDOWS\system32\SXS.DLL (0000000076390000 -
00000000763ad000: C:\WINDOWS\system32\IMM32.DLL (00000000763b0000 -
00000000763f9000: C:\WINDOWS\system32\Comdlg32.dll (00000000769c0000
- 0000000076a73000: C:\WINDOWS\system32\USERENV.dll (0000000076b40000
- 0000000076b6d000: C:\WINDOWS\system32\WINMM.dll (0000000076bf0000 -
0000000076bfb000: C:\WINDOWS\system32\PSAPI.DLL (0000000076c30000 -
0000000076c5e000: C:\WINDOWS\system32\WINTRUST.dll (0000000076c90000
- 0000000076cb8000: C:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d30000 - 0000000076d34000: C:\WINDOWS\system32\WMI.dll
(0000000076f20000 - 0000000076f47000: C:\WINDOWS\system32\DNSAPI.dll
(0000000076f60000 - 0000000076f8c000: C:\WINDOWS\system32\WLDAP32.dll
(0000000076fb0000 - 0000000076fb8000: C:\WINDOWS\System32\winrnr.dll
(0000000076fc0000 - 0000000076fc6000:
C:\WINDOWS\system32\rasadhlp.dll (0000000076fd0000 -
000000007704f000: C:\WINDOWS\system32\CLBCATQ.DLL (0000000077050000 -
0000000077115000: C:\WINDOWS\system32\COMRes.dll (0000000077120000 -
00000000771ac000: C:\WINDOWS\system32\OLEAUT32.dll (00000000773d0000
- 00000000774d3000:
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
(00000000774e0000 - 000000007761d000: C:\WINDOWS\system32\ole32.dll
(0000000077920000 - 0000000077a13000:
C:\WINDOWS\system32\SETUPAPI.dll (0000000077a80000 -
0000000077b14000: C:\WINDOWS\system32\CRYPT32.dll (0000000077b20000 -
0000000077b32000: C:\WINDOWS\system32\MSASN1.dll (0000000077b40000 -
0000000077b62000: C:\WINDOWS\system32\appHelp.dll (0000000077bd0000 -
0000000077bd7000: C:\WINDOWS\system32\midimap.dll (0000000077be0000 -
0000000077bf5000: C:\WINDOWS\system32\MSACM32.dll (0000000077c00000 -
0000000077c08000: C:\WINDOWS\system32\VERSION.dll (0000000077c10000 -
0000000077c68000: C:\WINDOWS\system32\msvcrt.dll (0000000077dd0000 -
0000000077e6b000: C:\WINDOWS\system32\ADVAPI32.dll (0000000077e70000
- 0000000077f01000: C:\WINDOWS\system32\RPCRT4.dll (0000000077f10000
- 0000000077f57000: C:\WINDOWS\system32\GDI32.dll (0000000077f60000 -
0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll (0000000077fe0000 -
0000000077ff1000: C:\WINDOWS\system32\secur32.dll (000000007c800000 -
000000007c8f5000: C:\WINDOWS\system32\kernel32.dll (000000007c900000
- 000000007c9b0000: C:\WINDOWS\system32\ntdll.dll (000000007c9c0000 -
000000007d1d5000: C:\WINDOWS\system32\SHELL32.dll (000000007e410000 -
000000007e4a0000: C:\WINDOWS\system32\USER32.dll

*----> State Dump for Thread Id 0x1d0 <----*

eax=00000001 ebx=0013054e ecx=7ffdd000 edx=76b601c0 esi=00000000
edi=0007f218 eip=588b08df esp=0007f180 ebp=0007f184 iopl=0 nv
up ei ng nz ac po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b
gs=0000 efl=00000296

*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\mmsys.cpl -
function: mmsys!DllCanUnloadNow
588b08cc cc int 3
588b08cd cc int 3
588b08ce cc int 3
588b08cf cc int 3
588b08d0 8bff mov edi,edi
588b08d2 55 push ebp
588b08d3 8bec mov ebp,esp
588b08d5 56 push esi
588b08d6 ff15b4148a58 call dword ptr [mmsys+0x14b4
(588a14b4)] 588b08dc 8b7508 mov esi,[ebp+0x8]
FAULT ->588b08df 89460c mov [esi+0xc],eax
ds:0023:0000000c=????????
588b08e2 8d4618 lea eax,[esi+0x18]
588b08e5 50 push eax
588b08e6 e8affeffff call mmsys!DllCanUnloadNow+0x57bf
(588b079a)
588b08eb 894604 mov [esi+0x4],eax
588b08ee ff1580148a58 call dword ptr [mmsys+0x1480
(588a1480)] 588b08f4 6a00 push 0x0
588b08f6 894610 mov [esi+0x10],eax
588b08f9 e812ffffff call mmsys!DllCanUnloadNow+0x5835
(588b0810)
588b08fe 8906 mov [esi],eax
588b0900 ff158c148a58 call dword ptr [mmsys+0x148c
(588a148c)]

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may
be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\USER32.dll -
*** ERROR: Module load completed but symbols could not be loaded for
C:\WINDOWS\system32\rundll32.exe
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0007f184 588b1109 00000000 0013054e 0007f218
mmsys!DllCanUnloadNow+0x5904 0007f1a0 588b1184 0013054e 588b1168
0007f1dc mmsys!DllCanUnloadNow+0x612e 0007f1b0 7e418734 000a0180
0000c09e 00000000 mmsys!DllCanUnloadNow+0x61a9 0007f1dc 7e418816
588b1168 000a0180 0000c09e USER32!GetDC+0x6d 0007f244 7e41c63f
00098af8 588b1168 000a0180 USER32!GetDC+0x14f 0007f274 7e41c665
588b1168 000a0180 0000c09e USER32!IsWindowUnicode+0xa1 0007f294
588c1037 588b1168 000a0180 0000c09e USER32!CallWindowProcW+0x1b
0007f2b4 7e418734 000a0180 0000c09e 00000000 mmsys+0x21037 0007f2e0
7e418816 588c1005 000a0180 0000c09e USER32!GetDC+0x6d 0007f348
7e41c63f 00098af8 588c1005 000a0180 USER32!GetDC+0x14f 0007f378
7e41c665 588c1005 000a0180 0000c09e USER32!IsWindowUnicode+0xa1
0007f398 588bf79e 588c1005 000a0180 0000c09e
USER32!CallWindowProcW+0x1b 0007f3b8 7e418734 000a0180 0000c09e

Click to expand...

How can I fix these errors.....

Guest

Gerry

Guest

Gerry

Guest

Gerry

Guest

Gerry

Guest

Gerry

Guest

Guest

Gerry

Guest

Gerry

Guest

DragonWolf903