Server Restarted with Mini dump

  • Thread starter Thread starter jagan
  • Start date Start date
J

jagan

Hi,

We have a server which restarted last week, It has generated a minidump.
We have analyzed that minidump but we could not understand what exactly
causing this problem. It just gives a clue that " it was not able to load
some MacAfee and network drivers. I am pasting the debug log here. Can
someone please tell me what exactly causing problem?


Debug log here:-

=====================================================
Opened log file 'c:\debuglog.txt'
2: kd> .sympath srv*C:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is:
srv*C:\symbols*http://msdl.microsoft.com/download/symbols
2: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q
Loading Kernel Symbols
................................................................
......................................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*
*
* Bugcheck Analysis
*
*

*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000000, memory referenced
Arg2: d000001b, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on
chips which support this level of status)
Arg4: 8083df4c, address which referenced memory

Debugging Details:
------------------

Unable to load image \SystemRoot\system32\drivers\mfehidk.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for mfehidk.sys
*** ERROR: Module load completed but symbols could not be loaded for
mfehidk.sys
Unable to load image \SystemRoot\system32\DRIVERS\bxvbdx.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for bxvbdx.sys
*** ERROR: Module load completed but symbols could not be loaded for
bxvbdx.sys

WRITE_ADDRESS: 00000000

CURRENT_IRQL: 1b

FAULTING_IP:
nt!KeWaitForSingleObject+24f
8083df4c 8919 mov dword ptr [ecx],ebx

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

BUGCHECK_STR: 0xA

PROCESS_NAME: System

TRAP_FRAME: b9ae00f8 -- (.trap 0xffffffffb9ae00f8)
..trap 0xffffffffb9ae00f8
ErrCode = 00000002
eax=860003ec ebx=8686ad18 ecx=00000000 edx=860003e4 esi=8686ac70 edi=8686ace8
eip=8083df4c esp=b9ae016c ebp=b9ae01ac iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!KeWaitForSingleObject+0x24f:
8083df4c 8919 mov dword ptr [ecx],ebx
ds:0023:00000000=????????
..trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 8083df4c to 80836df5

STACK_TEXT:
b9ae00f8 8083df4c badb0d00 860003e4 b9ae01b0 nt!KiTrap0E+0x2a7
b9ae01ac 80853f3f 860003e4 0000001d 00000000 nt!KeWaitForSingleObject+0x24f
b9ae01c4 8081d45f eb585c60 87f5f448 f7222970 nt!KiAcquireFastMutex+0x13
b9ae01d0 f7222970 b9ae06dc 00000000 87f5f448 nt!ExAcquireFastMutex+0x20
b9ae0258 f722c166 87bf1d10 eb585c60 000000a0 Ntfs!NtfsCreateScb+0x25
b9ae02f4 f722c021 87bf1d10 87f5f448 894627f8 Ntfs!NtfsOpenAttribute+0x42
b9ae034c f721cb51 87bf1d10 87f5f2b8 87f5f448 Ntfs!NtfsOpenExistingAttr+0x1b5
b9ae0428 f722be19 87bf1d10 87f5f2b8 87f5f448
Ntfs!NtfsOpenAttributeInExistingFile+0x1b3
b9ae050c f72228b9 87bf1d10 87f5f2b8 87f5f448
Ntfs!NtfsOpenExistingPrefixFcb+0x25e
b9ae0658 f7222ef8 87bf1d10 87f5f2b8 b9ae0698 Ntfs!NtfsCommonCreate+0x127e
b9ae075c 80840153 89462718 87f5f2b8 8a315f38 Ntfs!NtfsFsdCreate+0x17d
b9ae0770 f7310458 87f5f46c 8a315f38 893ed008 nt!IofCallDriver+0x45
b9ae079c 80840153 895287a8 87f5f2b8 87f5f490 fltmgr!FltpCreate+0xe4
b9ae07b0 b932a990 87243064 87243008 00000002 nt!IofCallDriver+0x45
WARNING: Stack unwind information not available. Following frames may be
wrong.
b9ae07d8 b931bd1d 87f5f2b8 b9ae088c 87f5f2b8 mfehidk+0x15990
b9ae07fc b931c38e 87f5f2b8 87f5f46c 87a48e50 mfehidk+0x6d1d
b9ae0894 b9329bd9 87a48e50 87f5f2b8 b9ae08cc mfehidk+0x738e
b9ae08a4 b9329c29 b9ae08b4 89b52688 88482178 mfehidk+0x14bd9
b9ae08cc 80840153 88482178 87f5f2b8 87f5f2b8 mfehidk+0x14c29
b9ae08e0 8092e806 89c49158 860a11d0 00000000 nt!IofCallDriver+0x45
b9ae09c8 8093ab28 88482178 00000000 8712f4b0 nt!IopParseDevice+0xa35
b9ae0a00 8092c0ce 89c49158 00000000 8712f4b0 nt!IopParseFile+0x46
b9ae0a80 8092d79b 800006d8 b9ae0ac0 00000040 nt!ObpLookupObjectName+0x11f
b9ae0ad4 8092c65d 00000000 00000000 86ac0000 nt!ObOpenObjectByName+0xea
b9ae0b50 80931d22 b9ae0cd8 00000080 b9ae0ca8 nt!IopCreateFile+0x447
b9ae0bac b9f64479 b9ae0cd8 00000080 b9ae0ca8 nt!IoCreateFile+0xa3
b9ae0c1c b9f6380b 887baf30 b9ae0cd8 00000080 srv!SrvIoCreateFile+0x36d
b9ae0cec b9f65668 887baf30 887baf30 80838a0d
srv!SrvSmbQueryPathInformation+0x4ba
b9ae0d00 b9f64267 b9f5680c 887baf30 894914d8 srv!ExecuteTransaction+0x29e
b9ae0d78 b9f47e87 887baf38 894914a0 b9f5b6c7 srv!SrvSmbTransaction+0x7ac
b9ae0d84 b9f5b6c7 00000000 8686ac70 00000000 srv!SrvProcessSmb+0xb7
b9ae0dac 80920833 004914a0 00000000 00000000 srv!WorkerThread+0x138
b9ae0ddc 8083fe9f b9f5b602 894914a0 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
mfehidk+15990
b932a990 ?? ???

SYMBOL_STACK_INDEX: e

SYMBOL_NAME: mfehidk+15990

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: mfehidk

IMAGE_NAME: mfehidk.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4564d4e5

FAILURE_BUCKET_ID: 0xA_mfehidk+15990

BUCKET_ID: 0xA_mfehidk+15990

Followup: MachineOwner
---------

eax=f772f13c ebx=d000001b ecx=00000001 edx=40000000 esi=f772f120 edi=00000000
eip=80836df5 esp=b9ae00e0 ebp=b9ae00f8 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x2a7:
80836df5 833d40ee8a8000 cmp dword ptr [nt!KiFreezeFlag (808aee40)],0
ds:0023:808aee40=????????
ChildEBP RetAddr Args to Child
b9ae00f8 8083df4c badb0d00 860003e4 b9ae01b0 nt!KiTrap0E+0x2a7 (FPO: [0,0]
TrapFrame @ b9ae00f8)
b9ae01ac 80853f3f 860003e4 0000001d 00000000 nt!KeWaitForSingleObject+0x24f
(FPO: [5,13,4])
b9ae01c4 8081d45f eb585c60 87f5f448 f7222970 nt!KiAcquireFastMutex+0x13
(FPO: [0,0,0])
b9ae01d0 f7222970 b9ae06dc 00000000 87f5f448 nt!ExAcquireFastMutex+0x20
(FPO: [0,0,0])
b9ae0258 f722c166 87bf1d10 eb585c60 000000a0 Ntfs!NtfsCreateScb+0x25 (FPO:
[SEH])
b9ae02f4 f722c021 87bf1d10 87f5f448 894627f8 Ntfs!NtfsOpenAttribute+0x42
(FPO: [SEH])
b9ae034c f721cb51 87bf1d10 87f5f2b8 87f5f448 Ntfs!NtfsOpenExistingAttr+0x1b5
(FPO: [15,1,4])
b9ae0428 f722be19 87bf1d10 87f5f2b8 87f5f448
Ntfs!NtfsOpenAttributeInExistingFile+0x1b3 (FPO: [SEH])
b9ae050c f72228b9 87bf1d10 87f5f2b8 87f5f448
Ntfs!NtfsOpenExistingPrefixFcb+0x25e (FPO: [SEH])
b9ae0658 f7222ef8 87bf1d10 87f5f2b8 b9ae0698 Ntfs!NtfsCommonCreate+0x127e
(FPO: [SEH])
b9ae075c 80840153 89462718 87f5f2b8 8a315f38 Ntfs!NtfsFsdCreate+0x17d (FPO:
[SEH])
b9ae0770 f7310458 87f5f46c 8a315f38 893ed008 nt!IofCallDriver+0x45 (FPO:
[0,0,4])
b9ae079c 80840153 895287a8 87f5f2b8 87f5f490 fltmgr!FltpCreate+0xe4 (FPO:
[2,7,0])
b9ae07b0 b932a990 87243064 87243008 00000002 nt!IofCallDriver+0x45 (FPO:
[0,0,4])
WARNING: Stack unwind information not available. Following frames may be
wrong.
b9ae07d8 b931bd1d 87f5f2b8 b9ae088c 87f5f2b8 mfehidk+0x15990
b9ae07fc b931c38e 87f5f2b8 87f5f46c 87a48e50 mfehidk+0x6d1d
b9ae0894 b9329bd9 87a48e50 87f5f2b8 b9ae08cc mfehidk+0x738e
b9ae08a4 b9329c29 b9ae08b4 89b52688 88482178 mfehidk+0x14bd9
b9ae08cc 80840153 88482178 87f5f2b8 87f5f2b8 mfehidk+0x14c29
b9ae08e0 8092e806 89c49158 860a11d0 00000000 nt!IofCallDriver+0x45 (FPO:
[0,0,4])
start end module name
80800000 80a7e000 nt ntkrnlmp.exe Wed Aug 13 06:50:45 2008 (48A2BC85)
80a7e000 80aaa000 hal halmacpi.dll Sat Feb 17 00:48:26 2007 (45D6972A)
b8e62000 b8e8d000 RDPWD RDPWD.SYS Sat Feb 17 00:44:38 2007 (45D69646)
b8fc5000 b8fd0000 TDTCP TDTCP.SYS Sat Feb 17 00:44:32 2007 (45D69640)
b9315000 b933c800 mfehidk mfehidk.sys Wed Nov 22 17:53:25 2006 (4564D4E5)
b996d000 b997cf00 mfeavfk mfeavfk.sys Wed Nov 22 17:55:05 2006 (4564D549)
b997d000 b998b020 mfeapfk mfeapfk.sys Wed Nov 22 17:54:19 2006 (4564D51B)
b9f45000 b9fa2000 srv srv.sys Wed Aug 27 09:37:58 2008 (48B558B6)
ba492000 ba49c000 ndisuio ndisuio.sys Sat Feb 17 00:58:25 2007 (45D69981)
ba4ca000 ba4dd000 dump_HpCISSs2 dump_HpCISSs2.sys Thu Jun 21 23:33:49 2007
(467B431D)
ba4dd000 ba4f2000 Cdfs Cdfs.SYS Sat Feb 17 01:27:08 2007 (45D6A03C)
ba51a000 ba52b000 Fips Fips.SYS Sat Feb 17 01:26:33 2007 (45D6A019)
ba52b000 ba5a1000 mrxsmb mrxsmb.sys Fri Sep 05 11:26:52 2008 (48C14FBC)
ba5a1000 ba5d1000 rdbss rdbss.sys Sat Feb 17 01:27:37 2007 (45D6A059)
ba5d1000 ba5fb000 afd afd.sys Thu Aug 14 06:46:56 2008 (48A40D20)
ba5fb000 ba62c000 netbt netbt.sys Sat Feb 17 01:28:57 2007 (45D6A0A9)
ba62c000 ba6bc000 tcpip tcpip.sys Fri Jun 20 10:20:25 2008 (485BBCA9)
ba6bc000 ba6d5000 ipsec ipsec.sys Sat Feb 17 01:29:28 2007 (45D6A0C8)
ba85d000 ba864000 Beep Beep.SYS Tue Mar 25 03:03:04 2003 (3E7FFF28)
ba865000 ba86c000 Null Null.SYS Tue Mar 25 03:03:05 2003 (3E7FFF29)
ba86d000 ba875000 Fs_Rec Fs_Rec.SYS Tue Mar 25 03:08:36 2003 (3E800074)
ba89d000 ba8a3a20 mfebopk mfebopk.sys Wed Nov 22 17:55:32 2006 (4564D564)
ba8b7000 ba8cc000 usbhub usbhub.sys Sat Feb 17 01:13:05 2007 (45D69CF1)
ba912000 ba971000 update update.sys Mon May 28 08:15:16 2007 (465AC7D4)
ba999000 ba9d0000 rdpdr rdpdr.sys Sat Feb 17 00:51:00 2007 (45D697C4)
ba9d0000 ba9d9000 hidusb hidusb.sys Tue Mar 25 03:10:17 2003 (3E8000D9)
baa00000 baa0d000 netbios netbios.sys Sat Feb 17 00:58:29 2007 (45D69985)
baa10000 baa1d000 wanarp wanarp.sys Sat Feb 17 00:59:17 2007 (45D699B5)
baa20000 baa2b060 mfetdik mfetdik.sys Wed Nov 22 17:54:10 2006 (4564D512)
baa30000 baa3e000 msgpc msgpc.sys Sat Feb 17 00:58:37 2007 (45D6998D)
baa40000 baa4d000 Npfs Npfs.SYS Sat Feb 17 00:50:36 2007 (45D697AC)
baa50000 baa5b000 Msfs Msfs.SYS Sat Feb 17 00:50:33 2007 (45D697A9)
baa60000 baa6c000 vga vga.sys Sat Feb 17 01:10:30 2007 (45D69C56)
baa70000 baa82000 raspptp raspptp.sys Sat Feb 17 01:29:20 2007 (45D6A0C0)
baaa3000 baabc000 ndiswan ndiswan.sys Sat Feb 17 01:29:22 2007 (45D6A0C2)
baabc000 baad0000 rasl2tp rasl2tp.sys Sat Feb 17 01:29:02 2007 (45D6A0AE)
baad0000 baaf7000 ks ks.sys Sat Feb 17 01:30:40 2007 (45D6A110)
baaf7000 bab0b000 redbook redbook.sys Sat Feb 17 01:07:26 2007 (45D69B9E)
bab0b000 bab20000 cdrom cdrom.sys Sat Feb 17 01:07:48 2007 (45D69BB4)
bab20000 bab35000 serial serial.sys Sat Feb 17 01:06:46 2007 (45D69B76)
bab35000 bab48000 i8042prt i8042prt.sys Sat Feb 17 01:30:40 2007 (45D6A110)
bab48000 bab68000 hpqilo2 hpqilo2.sys Mon Jul 16 17:36:14 2007 (469BE4CE)
bab68000 bab84000 VIDEOPRT VIDEOPRT.SYS Sat Feb 17 01:10:30 2007 (45D69C56)
bab84000 bacec000 ati2mtag ati2mtag.sys Wed Apr 05 23:03:52 2006 (44348518)
bacec000 bad16000 USBPORT USBPORT.SYS Sat Feb 17 01:12:59 2007 (45D69CEB)
bad16000 bad91000 Wdf01000 Wdf01000.sys Thu Nov 02 04:54:18 2006 (4549B23A)
bad91000 badf9000 bxvbdx bxvbdx.sys Tue May 22 22:17:20 2007 (4653A430)
bf800000 bf9d0000 win32k win32k.sys Mon Sep 15 09:22:02 2008 (48CE617A)
bf9d0000 bf9e7000 dxg dxg.sys Sat Feb 17 01:14:39 2007 (45D69D4F)
bf9e7000 bfa2a000 ati2dvag ati2dvag.dll Wed Apr 05 23:04:15 2006 (4434852F)
bfa2a000 bfa69000 ati2cqag ati2cqag.dll Wed Apr 05 21:57:18 2006 (4434757E)
bfa69000 bfa9f000 atikvmag atikvmag.dll Wed Apr 05 22:25:29 2006 (44347C19)
f707d000 f7087000 dump_diskdump dump_diskdump.sys Sat Feb 17 01:07:44 2007
(45D69BB0)
f708d000 f7096000 ndistapi ndistapi.sys Sat Feb 17 00:59:19 2007 (45D699B7)
f709d000 f70ab000 NDProxy NDProxy.SYS Sat Feb 17 00:59:21 2007 (45D699B9)
f70ad000 f70b6000 watchdog watchdog.sys Sat Feb 17 01:11:45 2007 (45D69CA1)
f70bd000 f70c8000 ptilink ptilink.sys Sat Feb 17 01:06:38 2007 (45D69B6E)
f70cd000 f70d9000 TAPE TAPE.SYS Sat Feb 17 01:08:04 2007 (45D69BC4)
f70dd000 f70ea000 WDFLDR WDFLDR.SYS Thu Nov 02 04:54:05 2006 (4549B22D)
f717d000 f719c000 Mup Mup.sys Sat Feb 17 01:27:41 2007 (45D6A05D)
f719c000 f71db000 NDIS NDIS.sys Sat Feb 17 01:28:49 2007 (45D6A0A1)
f71db000 f7270000 Ntfs Ntfs.sys Sat Feb 17 01:27:23 2007 (45D6A04B)
f72d8000 f72fe000 KSecDD KSecDD.sys Sat Feb 17 00:46:32 2007 (45D696B8)
f72fe000 f7323000 fltmgr fltmgr.sys Sat Feb 17 00:51:08 2007 (45D697CC)
f7323000 f7336000 CLASSPNP CLASSPNP.SYS Sat Feb 17 01:28:16 2007 (45D6A080)
f7336000 f7351000 lsi_sas lsi_sas.sys Fri Feb 09 23:53:41 2007 (45CD4FD5)
f7351000 f736f000 storport storport.sys Sat Feb 17 01:07:48 2007 (45D69BB4)
f736f000 f7382000 HpCISSs2 HpCISSs2.sys Thu Jun 21 23:33:49 2007 (467B431D)
f7382000 f739f000 atapi atapi.sys Sat Feb 17 01:07:34 2007 (45D69BA6)
f739f000 f73c9000 volsnap volsnap.sys Sat Feb 17 01:08:23 2007 (45D69BD7)
f73c9000 f73f5000 dmio dmio.sys Sat Feb 17 01:10:44 2007 (45D69C64)
f73f5000 f741c000 ftdisk ftdisk.sys Sat Feb 17 01:08:05 2007 (45D69BC5)
f741c000 f7432000 pci pci.sys Sat Feb 17 00:59:03 2007 (45D699A7)
f7432000 f7466000 ACPI ACPI.sys Sat Feb 17 00:58:47 2007 (45D69997)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 03:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Sat Feb 17 00:58:57 2007 (45D699A1)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Sat Feb 17 01:07:32 2007 (45D69BA4)
f74b7000 f74c7000 MountMgr MountMgr.sys Sat Feb 17 01:05:35 2007 (45D69B2F)
f74c7000 f74d2000 PartMgr PartMgr.sys Sat Feb 17 01:29:25 2007 (45D6A0C5)
f74d7000 f74e7000 disk disk.sys Sat Feb 17 01:07:51 2007 (45D69BB7)
f74e7000 f74f2980 vsp vsp.sys Tue Sep 25 14:52:27 2007 (46F958EB)
f74f7000 f7503000 Dfs Dfs.sys Sat Feb 17 00:51:17 2007 (45D697D5)
f7507000 f7515000 HIDCLASS HIDCLASS.SYS Tue Mar 25 03:10:17 2003 (3E8000D9)
f7517000 f7521000 crcdisk crcdisk.sys Sat Feb 17 01:09:50 2007 (45D69C2E)
f7557000 f7562000 TDI TDI.SYS Sat Feb 17 01:01:19 2007 (45D69A2F)
f7577000 f7586000 intelppm intelppm.sys Sat Feb 17 00:48:30 2007 (45D6972E)
f7587000 f7591000 mouclass mouclass.sys Tue Mar 25 03:03:09 2003 (3E7FFF2D)
f7597000 f75a0000 mssmbios mssmbios.sys Sat Feb 17 00:59:12 2007 (45D699B0)
f75a7000 f75b2000 fdc fdc.sys Sat Feb 17 01:07:16 2007 (45D69B94)
f75b7000 f75c6000 raspppoe raspppoe.sys Sat Feb 17 00:59:23 2007 (45D699BB)
f7607000 f7612000 cpqcidrv cpqcidrv.sys Fri Jun 22 14:55:11 2007 (467C1B0F)
f7627000 f7632000 kbdclass kbdclass.sys Sat Feb 17 01:05:39 2007 (45D69B33)
f7647000 f7651000 Dxapi Dxapi.sys Tue Mar 25 03:06:01 2003 (3E7FFFD9)
f7657000 f7667000 bxnd52x bxnd52x.sys Fri May 25 17:29:07 2007 (46575523)
f7667000 f7676000 termdd termdd.sys Sat Feb 17 00:44:32 2007 (45D69640)
f7677000 f7681000 serenum serenum.sys Sat Feb 17 01:06:44 2007 (45D69B74)
f7687000 f7690000 raspti raspti.sys Sat Feb 17 00:59:23 2007 (45D699BB)
f76b7000 f76c0000 kbdhid kbdhid.sys Sat Feb 17 01:05:42 2007 (45D69B36)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 03:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 03:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 03:04:46 2003 (3E7FFF8E)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 03:08:08 2003 (3E800058)
f773f000 f7747000 mnmdd mnmdd.SYS Tue Mar 25 03:07:53 2003 (3E800049)
f775f000 f7765300 HIDPARSE HIDPARSE.SYS Sat Feb 17 01:12:35 2007 (45D69CD3)
f7767000 f776f000 RDPCDD RDPCDD.sys Tue Mar 25 03:03:05 2003 (3E7FFF29)
f776f000 f7777000 rasacd rasacd.sys Tue Mar 25 03:11:50 2003 (3E800136)
f7777000 f777ed80 usbccgp usbccgp.sys Sat Feb 17 01:13:08 2007 (45D69CF4)
f777f000 f7787000 mouhid mouhid.sys Tue Mar 25 03:03:12 2003 (3E7FFF30)
f7787000 f778e000 dxgthk dxgthk.sys Tue Mar 25 03:05:52 2003 (3E7FFFD0)
f77ff000 f7805580 tpfilter tpfilter.sys Fri Jan 18 12:01:18 2008 (4790DB5E)
f7807000 f780f000 hplto hplto.sys Tue Sep 25 04:57:33 2007 (46F8CD7D)
f780f000 f7814180 usbuhci usbuhci.sys Sat Feb 17 01:13:02 2007 (45D69CEE)
f7817000 f781db80 usbehci usbehci.sys Sat Feb 17 01:12:56 2007 (45D69CE8)
f781f000 f7827000 audstub audstub.sys Tue Mar 25 03:09:12 2003 (3E800098)
f7933000 f7936500 scsichng scsichng.sys Thu Aug 23 22:59:47 2007 (46CE49A3)
f79a1000 f79a2280 swenum swenum.sys Sat Feb 17 01:05:56 2007 (45D69B44)
f79a3000 f79a4580 USBD USBD.SYS Tue Mar 25 03:10:39 2003 (3E8000EF)

Unloaded modules:
ba9f0000 ba9fe000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7697000 f76a0000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba875000 ba87d000 halfinch.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba87d000 ba885000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7617000 f7621000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7507000 f7514000 WDFLDR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7270000 f72d8000 bxvbdx.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt
 
Looks like you're not alone.

http://forums.mcafeehelp.com/search.php?searchid=4601472

bxvbdx.sys may be a Broadcom NIC driver



--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


jagan said:
Hi,

We have a server which restarted last week, It has generated a minidump.
We have analyzed that minidump but we could not understand what exactly
causing this problem. It just gives a clue that " it was not able to load
some MacAfee and network drivers. I am pasting the debug log here. Can
someone please tell me what exactly causing problem?


Debug log here:-

=====================================================
Opened log file 'c:\debuglog.txt'
2: kd> .sympath srv*C:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is:
srv*C:\symbols*http://msdl.microsoft.com/download/symbols
2: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q
Loading Kernel Symbols
...............................................................
.....................................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address
at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000000, memory referenced
Arg2: d000001b, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on
chips which support this level of status)
Arg4: 8083df4c, address which referenced memory

Debugging Details:
------------------

Unable to load image \SystemRoot\system32\drivers\mfehidk.sys, Win32 error
0n2
*** WARNING: Unable to verify timestamp for mfehidk.sys
*** ERROR: Module load completed but symbols could not be loaded for
mfehidk.sys
Unable to load image \SystemRoot\system32\DRIVERS\bxvbdx.sys, Win32 error
0n2
*** WARNING: Unable to verify timestamp for bxvbdx.sys
*** ERROR: Module load completed but symbols could not be loaded for
bxvbdx.sys

WRITE_ADDRESS: 00000000

CURRENT_IRQL: 1b

FAULTING_IP:
nt!KeWaitForSingleObject+24f
8083df4c 8919 mov dword ptr [ecx],ebx

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

BUGCHECK_STR: 0xA

PROCESS_NAME: System

TRAP_FRAME: b9ae00f8 -- (.trap 0xffffffffb9ae00f8)
.trap 0xffffffffb9ae00f8
ErrCode = 00000002
eax=860003ec ebx=8686ad18 ecx=00000000 edx=860003e4 esi=8686ac70
edi=8686ace8
eip=8083df4c esp=b9ae016c ebp=b9ae01ac iopl=0 nv up ei pl zr na pe
nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00010246
nt!KeWaitForSingleObject+0x24f:
8083df4c 8919 mov dword ptr [ecx],ebx
ds:0023:00000000=????????
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 8083df4c to 80836df5

STACK_TEXT:
b9ae00f8 8083df4c badb0d00 860003e4 b9ae01b0 nt!KiTrap0E+0x2a7
b9ae01ac 80853f3f 860003e4 0000001d 00000000
nt!KeWaitForSingleObject+0x24f
b9ae01c4 8081d45f eb585c60 87f5f448 f7222970 nt!KiAcquireFastMutex+0x13
b9ae01d0 f7222970 b9ae06dc 00000000 87f5f448 nt!ExAcquireFastMutex+0x20
b9ae0258 f722c166 87bf1d10 eb585c60 000000a0 Ntfs!NtfsCreateScb+0x25
b9ae02f4 f722c021 87bf1d10 87f5f448 894627f8 Ntfs!NtfsOpenAttribute+0x42
b9ae034c f721cb51 87bf1d10 87f5f2b8 87f5f448
Ntfs!NtfsOpenExistingAttr+0x1b5
b9ae0428 f722be19 87bf1d10 87f5f2b8 87f5f448
Ntfs!NtfsOpenAttributeInExistingFile+0x1b3
b9ae050c f72228b9 87bf1d10 87f5f2b8 87f5f448
Ntfs!NtfsOpenExistingPrefixFcb+0x25e
b9ae0658 f7222ef8 87bf1d10 87f5f2b8 b9ae0698 Ntfs!NtfsCommonCreate+0x127e
b9ae075c 80840153 89462718 87f5f2b8 8a315f38 Ntfs!NtfsFsdCreate+0x17d
b9ae0770 f7310458 87f5f46c 8a315f38 893ed008 nt!IofCallDriver+0x45
b9ae079c 80840153 895287a8 87f5f2b8 87f5f490 fltmgr!FltpCreate+0xe4
b9ae07b0 b932a990 87243064 87243008 00000002 nt!IofCallDriver+0x45
WARNING: Stack unwind information not available. Following frames may be
wrong.
b9ae07d8 b931bd1d 87f5f2b8 b9ae088c 87f5f2b8 mfehidk+0x15990
b9ae07fc b931c38e 87f5f2b8 87f5f46c 87a48e50 mfehidk+0x6d1d
b9ae0894 b9329bd9 87a48e50 87f5f2b8 b9ae08cc mfehidk+0x738e
b9ae08a4 b9329c29 b9ae08b4 89b52688 88482178 mfehidk+0x14bd9
b9ae08cc 80840153 88482178 87f5f2b8 87f5f2b8 mfehidk+0x14c29
b9ae08e0 8092e806 89c49158 860a11d0 00000000 nt!IofCallDriver+0x45
b9ae09c8 8093ab28 88482178 00000000 8712f4b0 nt!IopParseDevice+0xa35
b9ae0a00 8092c0ce 89c49158 00000000 8712f4b0 nt!IopParseFile+0x46
b9ae0a80 8092d79b 800006d8 b9ae0ac0 00000040 nt!ObpLookupObjectName+0x11f
b9ae0ad4 8092c65d 00000000 00000000 86ac0000 nt!ObOpenObjectByName+0xea
b9ae0b50 80931d22 b9ae0cd8 00000080 b9ae0ca8 nt!IopCreateFile+0x447
b9ae0bac b9f64479 b9ae0cd8 00000080 b9ae0ca8 nt!IoCreateFile+0xa3
b9ae0c1c b9f6380b 887baf30 b9ae0cd8 00000080 srv!SrvIoCreateFile+0x36d
b9ae0cec b9f65668 887baf30 887baf30 80838a0d
srv!SrvSmbQueryPathInformation+0x4ba
b9ae0d00 b9f64267 b9f5680c 887baf30 894914d8 srv!ExecuteTransaction+0x29e
b9ae0d78 b9f47e87 887baf38 894914a0 b9f5b6c7 srv!SrvSmbTransaction+0x7ac
b9ae0d84 b9f5b6c7 00000000 8686ac70 00000000 srv!SrvProcessSmb+0xb7
b9ae0dac 80920833 004914a0 00000000 00000000 srv!WorkerThread+0x138
b9ae0ddc 8083fe9f b9f5b602 894914a0 00000000
nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
mfehidk+15990
b932a990 ?? ???

SYMBOL_STACK_INDEX: e

SYMBOL_NAME: mfehidk+15990

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: mfehidk

IMAGE_NAME: mfehidk.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4564d4e5

FAILURE_BUCKET_ID: 0xA_mfehidk+15990

BUCKET_ID: 0xA_mfehidk+15990

Followup: MachineOwner
---------

eax=f772f13c ebx=d000001b ecx=00000001 edx=40000000 esi=f772f120
edi=00000000
eip=80836df5 esp=b9ae00e0 ebp=b9ae00f8 iopl=0 nv up ei ng nz na pe
nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00000286
nt!KiTrap0E+0x2a7:
80836df5 833d40ee8a8000 cmp dword ptr [nt!KiFreezeFlag (808aee40)],0
ds:0023:808aee40=????????
ChildEBP RetAddr Args to Child
b9ae00f8 8083df4c badb0d00 860003e4 b9ae01b0 nt!KiTrap0E+0x2a7 (FPO: [0,0]
TrapFrame @ b9ae00f8)
b9ae01ac 80853f3f 860003e4 0000001d 00000000
nt!KeWaitForSingleObject+0x24f
(FPO: [5,13,4])
b9ae01c4 8081d45f eb585c60 87f5f448 f7222970 nt!KiAcquireFastMutex+0x13
(FPO: [0,0,0])
b9ae01d0 f7222970 b9ae06dc 00000000 87f5f448 nt!ExAcquireFastMutex+0x20
(FPO: [0,0,0])
b9ae0258 f722c166 87bf1d10 eb585c60 000000a0 Ntfs!NtfsCreateScb+0x25 (FPO:
[SEH])
b9ae02f4 f722c021 87bf1d10 87f5f448 894627f8 Ntfs!NtfsOpenAttribute+0x42
(FPO: [SEH])
b9ae034c f721cb51 87bf1d10 87f5f2b8 87f5f448
Ntfs!NtfsOpenExistingAttr+0x1b5
(FPO: [15,1,4])
b9ae0428 f722be19 87bf1d10 87f5f2b8 87f5f448
Ntfs!NtfsOpenAttributeInExistingFile+0x1b3 (FPO: [SEH])
b9ae050c f72228b9 87bf1d10 87f5f2b8 87f5f448
Ntfs!NtfsOpenExistingPrefixFcb+0x25e (FPO: [SEH])
b9ae0658 f7222ef8 87bf1d10 87f5f2b8 b9ae0698 Ntfs!NtfsCommonCreate+0x127e
(FPO: [SEH])
b9ae075c 80840153 89462718 87f5f2b8 8a315f38 Ntfs!NtfsFsdCreate+0x17d
(FPO:
[SEH])
b9ae0770 f7310458 87f5f46c 8a315f38 893ed008 nt!IofCallDriver+0x45 (FPO:
[0,0,4])
b9ae079c 80840153 895287a8 87f5f2b8 87f5f490 fltmgr!FltpCreate+0xe4 (FPO:
[2,7,0])
b9ae07b0 b932a990 87243064 87243008 00000002 nt!IofCallDriver+0x45 (FPO:
[0,0,4])
WARNING: Stack unwind information not available. Following frames may be
wrong.
b9ae07d8 b931bd1d 87f5f2b8 b9ae088c 87f5f2b8 mfehidk+0x15990
b9ae07fc b931c38e 87f5f2b8 87f5f46c 87a48e50 mfehidk+0x6d1d
b9ae0894 b9329bd9 87a48e50 87f5f2b8 b9ae08cc mfehidk+0x738e
b9ae08a4 b9329c29 b9ae08b4 89b52688 88482178 mfehidk+0x14bd9
b9ae08cc 80840153 88482178 87f5f2b8 87f5f2b8 mfehidk+0x14c29
b9ae08e0 8092e806 89c49158 860a11d0 00000000 nt!IofCallDriver+0x45 (FPO:
[0,0,4])
start end module name
80800000 80a7e000 nt ntkrnlmp.exe Wed Aug 13 06:50:45 2008
(48A2BC85)
80a7e000 80aaa000 hal halmacpi.dll Sat Feb 17 00:48:26 2007
(45D6972A)
b8e62000 b8e8d000 RDPWD RDPWD.SYS Sat Feb 17 00:44:38 2007
(45D69646)
b8fc5000 b8fd0000 TDTCP TDTCP.SYS Sat Feb 17 00:44:32 2007
(45D69640)
b9315000 b933c800 mfehidk mfehidk.sys Wed Nov 22 17:53:25 2006
(4564D4E5)
b996d000 b997cf00 mfeavfk mfeavfk.sys Wed Nov 22 17:55:05 2006
(4564D549)
b997d000 b998b020 mfeapfk mfeapfk.sys Wed Nov 22 17:54:19 2006
(4564D51B)
b9f45000 b9fa2000 srv srv.sys Wed Aug 27 09:37:58 2008
(48B558B6)
ba492000 ba49c000 ndisuio ndisuio.sys Sat Feb 17 00:58:25 2007
(45D69981)
ba4ca000 ba4dd000 dump_HpCISSs2 dump_HpCISSs2.sys Thu Jun 21 23:33:49
2007
(467B431D)
ba4dd000 ba4f2000 Cdfs Cdfs.SYS Sat Feb 17 01:27:08 2007
(45D6A03C)
ba51a000 ba52b000 Fips Fips.SYS Sat Feb 17 01:26:33 2007
(45D6A019)
ba52b000 ba5a1000 mrxsmb mrxsmb.sys Fri Sep 05 11:26:52 2008
(48C14FBC)
ba5a1000 ba5d1000 rdbss rdbss.sys Sat Feb 17 01:27:37 2007
(45D6A059)
ba5d1000 ba5fb000 afd afd.sys Thu Aug 14 06:46:56 2008
(48A40D20)
ba5fb000 ba62c000 netbt netbt.sys Sat Feb 17 01:28:57 2007
(45D6A0A9)
ba62c000 ba6bc000 tcpip tcpip.sys Fri Jun 20 10:20:25 2008
(485BBCA9)
ba6bc000 ba6d5000 ipsec ipsec.sys Sat Feb 17 01:29:28 2007
(45D6A0C8)
ba85d000 ba864000 Beep Beep.SYS Tue Mar 25 03:03:04 2003
(3E7FFF28)
ba865000 ba86c000 Null Null.SYS Tue Mar 25 03:03:05 2003
(3E7FFF29)
ba86d000 ba875000 Fs_Rec Fs_Rec.SYS Tue Mar 25 03:08:36 2003
(3E800074)
ba89d000 ba8a3a20 mfebopk mfebopk.sys Wed Nov 22 17:55:32 2006
(4564D564)
ba8b7000 ba8cc000 usbhub usbhub.sys Sat Feb 17 01:13:05 2007
(45D69CF1)
ba912000 ba971000 update update.sys Mon May 28 08:15:16 2007
(465AC7D4)
ba999000 ba9d0000 rdpdr rdpdr.sys Sat Feb 17 00:51:00 2007
(45D697C4)
ba9d0000 ba9d9000 hidusb hidusb.sys Tue Mar 25 03:10:17 2003
(3E8000D9)
baa00000 baa0d000 netbios netbios.sys Sat Feb 17 00:58:29 2007
(45D69985)
baa10000 baa1d000 wanarp wanarp.sys Sat Feb 17 00:59:17 2007
(45D699B5)
baa20000 baa2b060 mfetdik mfetdik.sys Wed Nov 22 17:54:10 2006
(4564D512)
baa30000 baa3e000 msgpc msgpc.sys Sat Feb 17 00:58:37 2007
(45D6998D)
baa40000 baa4d000 Npfs Npfs.SYS Sat Feb 17 00:50:36 2007
(45D697AC)
baa50000 baa5b000 Msfs Msfs.SYS Sat Feb 17 00:50:33 2007
(45D697A9)
baa60000 baa6c000 vga vga.sys Sat Feb 17 01:10:30 2007
(45D69C56)
baa70000 baa82000 raspptp raspptp.sys Sat Feb 17 01:29:20 2007
(45D6A0C0)
baaa3000 baabc000 ndiswan ndiswan.sys Sat Feb 17 01:29:22 2007
(45D6A0C2)
baabc000 baad0000 rasl2tp rasl2tp.sys Sat Feb 17 01:29:02 2007
(45D6A0AE)
baad0000 baaf7000 ks ks.sys Sat Feb 17 01:30:40 2007
(45D6A110)
baaf7000 bab0b000 redbook redbook.sys Sat Feb 17 01:07:26 2007
(45D69B9E)
bab0b000 bab20000 cdrom cdrom.sys Sat Feb 17 01:07:48 2007
(45D69BB4)
bab20000 bab35000 serial serial.sys Sat Feb 17 01:06:46 2007
(45D69B76)
bab35000 bab48000 i8042prt i8042prt.sys Sat Feb 17 01:30:40 2007
(45D6A110)
bab48000 bab68000 hpqilo2 hpqilo2.sys Mon Jul 16 17:36:14 2007
(469BE4CE)
bab68000 bab84000 VIDEOPRT VIDEOPRT.SYS Sat Feb 17 01:10:30 2007
(45D69C56)
bab84000 bacec000 ati2mtag ati2mtag.sys Wed Apr 05 23:03:52 2006
(44348518)
bacec000 bad16000 USBPORT USBPORT.SYS Sat Feb 17 01:12:59 2007
(45D69CEB)
bad16000 bad91000 Wdf01000 Wdf01000.sys Thu Nov 02 04:54:18 2006
(4549B23A)
bad91000 badf9000 bxvbdx bxvbdx.sys Tue May 22 22:17:20 2007
(4653A430)
bf800000 bf9d0000 win32k win32k.sys Mon Sep 15 09:22:02 2008
(48CE617A)
bf9d0000 bf9e7000 dxg dxg.sys Sat Feb 17 01:14:39 2007
(45D69D4F)
bf9e7000 bfa2a000 ati2dvag ati2dvag.dll Wed Apr 05 23:04:15 2006
(4434852F)
bfa2a000 bfa69000 ati2cqag ati2cqag.dll Wed Apr 05 21:57:18 2006
(4434757E)
bfa69000 bfa9f000 atikvmag atikvmag.dll Wed Apr 05 22:25:29 2006
(44347C19)
f707d000 f7087000 dump_diskdump dump_diskdump.sys Sat Feb 17 01:07:44
2007
(45D69BB0)
f708d000 f7096000 ndistapi ndistapi.sys Sat Feb 17 00:59:19 2007
(45D699B7)
f709d000 f70ab000 NDProxy NDProxy.SYS Sat Feb 17 00:59:21 2007
(45D699B9)
f70ad000 f70b6000 watchdog watchdog.sys Sat Feb 17 01:11:45 2007
(45D69CA1)
f70bd000 f70c8000 ptilink ptilink.sys Sat Feb 17 01:06:38 2007
(45D69B6E)
f70cd000 f70d9000 TAPE TAPE.SYS Sat Feb 17 01:08:04 2007
(45D69BC4)
f70dd000 f70ea000 WDFLDR WDFLDR.SYS Thu Nov 02 04:54:05 2006
(4549B22D)
f717d000 f719c000 Mup Mup.sys Sat Feb 17 01:27:41 2007
(45D6A05D)
f719c000 f71db000 NDIS NDIS.sys Sat Feb 17 01:28:49 2007
(45D6A0A1)
f71db000 f7270000 Ntfs Ntfs.sys Sat Feb 17 01:27:23 2007
(45D6A04B)
f72d8000 f72fe000 KSecDD KSecDD.sys Sat Feb 17 00:46:32 2007
(45D696B8)
f72fe000 f7323000 fltmgr fltmgr.sys Sat Feb 17 00:51:08 2007
(45D697CC)
f7323000 f7336000 CLASSPNP CLASSPNP.SYS Sat Feb 17 01:28:16 2007
(45D6A080)
f7336000 f7351000 lsi_sas lsi_sas.sys Fri Feb 09 23:53:41 2007
(45CD4FD5)
f7351000 f736f000 storport storport.sys Sat Feb 17 01:07:48 2007
(45D69BB4)
f736f000 f7382000 HpCISSs2 HpCISSs2.sys Thu Jun 21 23:33:49 2007
(467B431D)
f7382000 f739f000 atapi atapi.sys Sat Feb 17 01:07:34 2007
(45D69BA6)
f739f000 f73c9000 volsnap volsnap.sys Sat Feb 17 01:08:23 2007
(45D69BD7)
f73c9000 f73f5000 dmio dmio.sys Sat Feb 17 01:10:44 2007
(45D69C64)
f73f5000 f741c000 ftdisk ftdisk.sys Sat Feb 17 01:08:05 2007
(45D69BC5)
f741c000 f7432000 pci pci.sys Sat Feb 17 00:59:03 2007
(45D699A7)
f7432000 f7466000 ACPI ACPI.sys Sat Feb 17 00:58:47 2007
(45D69997)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 03:13:00 2003
(3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Sat Feb 17 00:58:57 2007
(45D699A1)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Sat Feb 17 01:07:32 2007
(45D69BA4)
f74b7000 f74c7000 MountMgr MountMgr.sys Sat Feb 17 01:05:35 2007
(45D69B2F)
f74c7000 f74d2000 PartMgr PartMgr.sys Sat Feb 17 01:29:25 2007
(45D6A0C5)
f74d7000 f74e7000 disk disk.sys Sat Feb 17 01:07:51 2007
(45D69BB7)
f74e7000 f74f2980 vsp vsp.sys Tue Sep 25 14:52:27 2007
(46F958EB)
f74f7000 f7503000 Dfs Dfs.sys Sat Feb 17 00:51:17 2007
(45D697D5)
f7507000 f7515000 HIDCLASS HIDCLASS.SYS Tue Mar 25 03:10:17 2003
(3E8000D9)
f7517000 f7521000 crcdisk crcdisk.sys Sat Feb 17 01:09:50 2007
(45D69C2E)
f7557000 f7562000 TDI TDI.SYS Sat Feb 17 01:01:19 2007
(45D69A2F)
f7577000 f7586000 intelppm intelppm.sys Sat Feb 17 00:48:30 2007
(45D6972E)
f7587000 f7591000 mouclass mouclass.sys Tue Mar 25 03:03:09 2003
(3E7FFF2D)
f7597000 f75a0000 mssmbios mssmbios.sys Sat Feb 17 00:59:12 2007
(45D699B0)
f75a7000 f75b2000 fdc fdc.sys Sat Feb 17 01:07:16 2007
(45D69B94)
f75b7000 f75c6000 raspppoe raspppoe.sys Sat Feb 17 00:59:23 2007
(45D699BB)
f7607000 f7612000 cpqcidrv cpqcidrv.sys Fri Jun 22 14:55:11 2007
(467C1B0F)
f7627000 f7632000 kbdclass kbdclass.sys Sat Feb 17 01:05:39 2007
(45D69B33)
f7647000 f7651000 Dxapi Dxapi.sys Tue Mar 25 03:06:01 2003
(3E7FFFD9)
f7657000 f7667000 bxnd52x bxnd52x.sys Fri May 25 17:29:07 2007
(46575523)
f7667000 f7676000 termdd termdd.sys Sat Feb 17 00:44:32 2007
(45D69640)
f7677000 f7681000 serenum serenum.sys Sat Feb 17 01:06:44 2007
(45D69B74)
f7687000 f7690000 raspti raspti.sys Sat Feb 17 00:59:23 2007
(45D699BB)
f76b7000 f76c0000 kbdhid kbdhid.sys Sat Feb 17 01:05:42 2007
(45D69B36)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 03:08:00 2003
(3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 03:07:58 2003
(3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 03:04:46 2003
(3E7FFF8E)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 03:08:08 2003
(3E800058)
f773f000 f7747000 mnmdd mnmdd.SYS Tue Mar 25 03:07:53 2003
(3E800049)
f775f000 f7765300 HIDPARSE HIDPARSE.SYS Sat Feb 17 01:12:35 2007
(45D69CD3)
f7767000 f776f000 RDPCDD RDPCDD.sys Tue Mar 25 03:03:05 2003
(3E7FFF29)
f776f000 f7777000 rasacd rasacd.sys Tue Mar 25 03:11:50 2003
(3E800136)
f7777000 f777ed80 usbccgp usbccgp.sys Sat Feb 17 01:13:08 2007
(45D69CF4)
f777f000 f7787000 mouhid mouhid.sys Tue Mar 25 03:03:12 2003
(3E7FFF30)
f7787000 f778e000 dxgthk dxgthk.sys Tue Mar 25 03:05:52 2003
(3E7FFFD0)
f77ff000 f7805580 tpfilter tpfilter.sys Fri Jan 18 12:01:18 2008
(4790DB5E)
f7807000 f780f000 hplto hplto.sys Tue Sep 25 04:57:33 2007
(46F8CD7D)
f780f000 f7814180 usbuhci usbuhci.sys Sat Feb 17 01:13:02 2007
(45D69CEE)
f7817000 f781db80 usbehci usbehci.sys Sat Feb 17 01:12:56 2007
(45D69CE8)
f781f000 f7827000 audstub audstub.sys Tue Mar 25 03:09:12 2003
(3E800098)
f7933000 f7936500 scsichng scsichng.sys Thu Aug 23 22:59:47 2007
(46CE49A3)
f79a1000 f79a2280 swenum swenum.sys Sat Feb 17 01:05:56 2007
(45D69B44)
f79a3000 f79a4580 USBD USBD.SYS Tue Mar 25 03:10:39 2003
(3E8000EF)

Unloaded modules:
ba9f0000 ba9fe000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7697000 f76a0000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba875000 ba87d000 halfinch.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba87d000 ba885000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7617000 f7621000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7507000 f7514000 WDFLDR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7270000 f72d8000 bxvbdx.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt
 
Thanks Dave,

But unfortunately there is no content in the page...

Dave Patrick said:
Looks like you're not alone.

http://forums.mcafeehelp.com/search.php?searchid=4601472

bxvbdx.sys may be a Broadcom NIC driver



--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


jagan said:
Hi,

We have a server which restarted last week, It has generated a minidump.
We have analyzed that minidump but we could not understand what exactly
causing this problem. It just gives a clue that " it was not able to load
some MacAfee and network drivers. I am pasting the debug log here. Can
someone please tell me what exactly causing problem?


Debug log here:-

=====================================================
Opened log file 'c:\debuglog.txt'
2: kd> .sympath srv*C:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is:
srv*C:\symbols*http://msdl.microsoft.com/download/symbols
2: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q
Loading Kernel Symbols
...............................................................
.....................................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address
at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000000, memory referenced
Arg2: d000001b, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on
chips which support this level of status)
Arg4: 8083df4c, address which referenced memory

Debugging Details:
------------------

Unable to load image \SystemRoot\system32\drivers\mfehidk.sys, Win32 error
0n2
*** WARNING: Unable to verify timestamp for mfehidk.sys
*** ERROR: Module load completed but symbols could not be loaded for
mfehidk.sys
Unable to load image \SystemRoot\system32\DRIVERS\bxvbdx.sys, Win32 error
0n2
*** WARNING: Unable to verify timestamp for bxvbdx.sys
*** ERROR: Module load completed but symbols could not be loaded for
bxvbdx.sys

WRITE_ADDRESS: 00000000

CURRENT_IRQL: 1b

FAULTING_IP:
nt!KeWaitForSingleObject+24f
8083df4c 8919 mov dword ptr [ecx],ebx

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

BUGCHECK_STR: 0xA

PROCESS_NAME: System

TRAP_FRAME: b9ae00f8 -- (.trap 0xffffffffb9ae00f8)
.trap 0xffffffffb9ae00f8
ErrCode = 00000002
eax=860003ec ebx=8686ad18 ecx=00000000 edx=860003e4 esi=8686ac70
edi=8686ace8
eip=8083df4c esp=b9ae016c ebp=b9ae01ac iopl=0 nv up ei pl zr na pe
nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00010246
nt!KeWaitForSingleObject+0x24f:
8083df4c 8919 mov dword ptr [ecx],ebx
ds:0023:00000000=????????
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 8083df4c to 80836df5

STACK_TEXT:
b9ae00f8 8083df4c badb0d00 860003e4 b9ae01b0 nt!KiTrap0E+0x2a7
b9ae01ac 80853f3f 860003e4 0000001d 00000000
nt!KeWaitForSingleObject+0x24f
b9ae01c4 8081d45f eb585c60 87f5f448 f7222970 nt!KiAcquireFastMutex+0x13
b9ae01d0 f7222970 b9ae06dc 00000000 87f5f448 nt!ExAcquireFastMutex+0x20
b9ae0258 f722c166 87bf1d10 eb585c60 000000a0 Ntfs!NtfsCreateScb+0x25
b9ae02f4 f722c021 87bf1d10 87f5f448 894627f8 Ntfs!NtfsOpenAttribute+0x42
b9ae034c f721cb51 87bf1d10 87f5f2b8 87f5f448
Ntfs!NtfsOpenExistingAttr+0x1b5
b9ae0428 f722be19 87bf1d10 87f5f2b8 87f5f448
Ntfs!NtfsOpenAttributeInExistingFile+0x1b3
b9ae050c f72228b9 87bf1d10 87f5f2b8 87f5f448
Ntfs!NtfsOpenExistingPrefixFcb+0x25e
b9ae0658 f7222ef8 87bf1d10 87f5f2b8 b9ae0698 Ntfs!NtfsCommonCreate+0x127e
b9ae075c 80840153 89462718 87f5f2b8 8a315f38 Ntfs!NtfsFsdCreate+0x17d
b9ae0770 f7310458 87f5f46c 8a315f38 893ed008 nt!IofCallDriver+0x45
b9ae079c 80840153 895287a8 87f5f2b8 87f5f490 fltmgr!FltpCreate+0xe4
b9ae07b0 b932a990 87243064 87243008 00000002 nt!IofCallDriver+0x45
WARNING: Stack unwind information not available. Following frames may be
wrong.
b9ae07d8 b931bd1d 87f5f2b8 b9ae088c 87f5f2b8 mfehidk+0x15990
b9ae07fc b931c38e 87f5f2b8 87f5f46c 87a48e50 mfehidk+0x6d1d
b9ae0894 b9329bd9 87a48e50 87f5f2b8 b9ae08cc mfehidk+0x738e
b9ae08a4 b9329c29 b9ae08b4 89b52688 88482178 mfehidk+0x14bd9
b9ae08cc 80840153 88482178 87f5f2b8 87f5f2b8 mfehidk+0x14c29
b9ae08e0 8092e806 89c49158 860a11d0 00000000 nt!IofCallDriver+0x45
b9ae09c8 8093ab28 88482178 00000000 8712f4b0 nt!IopParseDevice+0xa35
b9ae0a00 8092c0ce 89c49158 00000000 8712f4b0 nt!IopParseFile+0x46
b9ae0a80 8092d79b 800006d8 b9ae0ac0 00000040 nt!ObpLookupObjectName+0x11f
b9ae0ad4 8092c65d 00000000 00000000 86ac0000 nt!ObOpenObjectByName+0xea
b9ae0b50 80931d22 b9ae0cd8 00000080 b9ae0ca8 nt!IopCreateFile+0x447
b9ae0bac b9f64479 b9ae0cd8 00000080 b9ae0ca8 nt!IoCreateFile+0xa3
b9ae0c1c b9f6380b 887baf30 b9ae0cd8 00000080 srv!SrvIoCreateFile+0x36d
b9ae0cec b9f65668 887baf30 887baf30 80838a0d
srv!SrvSmbQueryPathInformation+0x4ba
b9ae0d00 b9f64267 b9f5680c 887baf30 894914d8 srv!ExecuteTransaction+0x29e
b9ae0d78 b9f47e87 887baf38 894914a0 b9f5b6c7 srv!SrvSmbTransaction+0x7ac
b9ae0d84 b9f5b6c7 00000000 8686ac70 00000000 srv!SrvProcessSmb+0xb7
b9ae0dac 80920833 004914a0 00000000 00000000 srv!WorkerThread+0x138
b9ae0ddc 8083fe9f b9f5b602 894914a0 00000000
nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
mfehidk+15990
b932a990 ?? ???

SYMBOL_STACK_INDEX: e

SYMBOL_NAME: mfehidk+15990

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: mfehidk

IMAGE_NAME: mfehidk.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4564d4e5

FAILURE_BUCKET_ID: 0xA_mfehidk+15990

BUCKET_ID: 0xA_mfehidk+15990

Followup: MachineOwner
---------

eax=f772f13c ebx=d000001b ecx=00000001 edx=40000000 esi=f772f120
edi=00000000
eip=80836df5 esp=b9ae00e0 ebp=b9ae00f8 iopl=0 nv up ei ng nz na pe
nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00000286
nt!KiTrap0E+0x2a7:
80836df5 833d40ee8a8000 cmp dword ptr [nt!KiFreezeFlag (808aee40)],0
ds:0023:808aee40=????????
ChildEBP RetAddr Args to Child
b9ae00f8 8083df4c badb0d00 860003e4 b9ae01b0 nt!KiTrap0E+0x2a7 (FPO: [0,0]
TrapFrame @ b9ae00f8)
b9ae01ac 80853f3f 860003e4 0000001d 00000000
nt!KeWaitForSingleObject+0x24f
(FPO: [5,13,4])
b9ae01c4 8081d45f eb585c60 87f5f448 f7222970 nt!KiAcquireFastMutex+0x13
(FPO: [0,0,0])
b9ae01d0 f7222970 b9ae06dc 00000000 87f5f448 nt!ExAcquireFastMutex+0x20
(FPO: [0,0,0])
b9ae0258 f722c166 87bf1d10 eb585c60 000000a0 Ntfs!NtfsCreateScb+0x25 (FPO:
[SEH])
b9ae02f4 f722c021 87bf1d10 87f5f448 894627f8 Ntfs!NtfsOpenAttribute+0x42
(FPO: [SEH])
b9ae034c f721cb51 87bf1d10 87f5f2b8 87f5f448
Ntfs!NtfsOpenExistingAttr+0x1b5
(FPO: [15,1,4])
b9ae0428 f722be19 87bf1d10 87f5f2b8 87f5f448
Ntfs!NtfsOpenAttributeInExistingFile+0x1b3 (FPO: [SEH])
b9ae050c f72228b9 87bf1d10 87f5f2b8 87f5f448
Ntfs!NtfsOpenExistingPrefixFcb+0x25e (FPO: [SEH])
b9ae0658 f7222ef8 87bf1d10 87f5f2b8 b9ae0698 Ntfs!NtfsCommonCreate+0x127e
(FPO: [SEH])
b9ae075c 80840153 89462718 87f5f2b8 8a315f38 Ntfs!NtfsFsdCreate+0x17d
(FPO:
[SEH])
b9ae0770 f7310458 87f5f46c 8a315f38 893ed008 nt!IofCallDriver+0x45 (FPO:
[0,0,4])
b9ae079c 80840153 895287a8 87f5f2b8 87f5f490 fltmgr!FltpCreate+0xe4 (FPO:
[2,7,0])
b9ae07b0 b932a990 87243064 87243008 00000002 nt!IofCallDriver+0x45 (FPO:
[0,0,4])
WARNING: Stack unwind information not available. Following frames may be
wrong.
b9ae07d8 b931bd1d 87f5f2b8 b9ae088c 87f5f2b8 mfehidk+0x15990
b9ae07fc b931c38e 87f5f2b8 87f5f46c 87a48e50 mfehidk+0x6d1d
b9ae0894 b9329bd9 87a48e50 87f5f2b8 b9ae08cc mfehidk+0x738e
b9ae08a4 b9329c29 b9ae08b4 89b52688 88482178 mfehidk+0x14bd9
b9ae08cc 80840153 88482178 87f5f2b8 87f5f2b8 mfehidk+0x14c29
b9ae08e0 8092e806 89c49158 860a11d0 00000000 nt!IofCallDriver+0x45 (FPO:
[0,0,4])
start end module name
80800000 80a7e000 nt ntkrnlmp.exe Wed Aug 13 06:50:45 2008
(48A2BC85)
80a7e000 80aaa000 hal halmacpi.dll Sat Feb 17 00:48:26 2007
(45D6972A)
b8e62000 b8e8d000 RDPWD RDPWD.SYS Sat Feb 17 00:44:38 2007
(45D69646)
b8fc5000 b8fd0000 TDTCP TDTCP.SYS Sat Feb 17 00:44:32 2007
(45D69640)
b9315000 b933c800 mfehidk mfehidk.sys Wed Nov 22 17:53:25 2006
(4564D4E5)
b996d000 b997cf00 mfeavfk mfeavfk.sys Wed Nov 22 17:55:05 2006
(4564D549)
b997d000 b998b020 mfeapfk mfeapfk.sys Wed Nov 22 17:54:19 2006
(4564D51B)
b9f45000 b9fa2000 srv srv.sys Wed Aug 27 09:37:58 2008
(48B558B6)
ba492000 ba49c000 ndisuio ndisuio.sys Sat Feb 17 00:58:25 2007
(45D69981)
ba4ca000 ba4dd000 dump_HpCISSs2 dump_HpCISSs2.sys Thu Jun 21 23:33:49
2007
(467B431D)
ba4dd000 ba4f2000 Cdfs Cdfs.SYS Sat Feb 17 01:27:08 2007
(45D6A03C)
ba51a000 ba52b000 Fips Fips.SYS Sat Feb 17 01:26:33 2007
(45D6A019)
ba52b000 ba5a1000 mrxsmb mrxsmb.sys Fri Sep 05 11:26:52 2008
(48C14FBC)
ba5a1000 ba5d1000 rdbss rdbss.sys Sat Feb 17 01:27:37 2007
(45D6A059)
ba5d1000 ba5fb000 afd afd.sys Thu Aug 14 06:46:56 2008
(48A40D20)
ba5fb000 ba62c000 netbt netbt.sys Sat Feb 17 01:28:57 2007
(45D6A0A9)
ba62c000 ba6bc000 tcpip tcpip.sys Fri Jun 20 10:20:25 2008
(485BBCA9)
ba6bc000 ba6d5000 ipsec ipsec.sys Sat Feb 17 01:29:28 2007
(45D6A0C8)
ba85d000 ba864000 Beep Beep.SYS Tue Mar 25 03:03:04 2003
(3E7FFF28)
ba865000 ba86c000 Null Null.SYS Tue Mar 25 03:03:05 2003
(3E7FFF29)
ba86d000 ba875000 Fs_Rec Fs_Rec.SYS Tue Mar 25 03:08:36 2003
(3E800074)
ba89d000 ba8a3a20 mfebopk mfebopk.sys Wed Nov 22 17:55:32 2006
(4564D564)
ba8b7000 ba8cc000 usbhub usbhub.sys Sat Feb 17 01:13:05 2007
(45D69CF1)
ba912000 ba971000 update update.sys Mon May 28 08:15:16 2007
(465AC7D4)
ba999000 ba9d0000 rdpdr rdpdr.sys Sat Feb 17 00:51:00 2007
(45D697C4)
ba9d0000 ba9d9000 hidusb hidusb.sys Tue Mar 25 03:10:17 2003
(3E8000D9)
baa00000 baa0d000 netbios netbios.sys Sat Feb 17 00:58:29 2007
(45D69985)
baa10000 baa1d000 wanarp wanarp.sys Sat Feb 17 00:59:17 2007
(45D699B5)
baa20000 baa2b060 mfetdik mfetdik.sys Wed Nov 22 17:54:10 2006
(4564D512)
baa30000 baa3e000 msgpc msgpc.sys Sat Feb 17 00:58:37 2007
(45D6998D)
baa40000 baa4d000 Npfs Npfs.SYS Sat Feb 17 00:50:36 2007
(45D697AC)
baa50000 baa5b000 Msfs Msfs.SYS Sat Feb 17 00:50:33 2007
(45D697A9)
baa60000 baa6c000 vga vga.sys Sat Feb 17 01:10:30 2007
 
Back
Top