Ran Windbg and got the results below, I'm no computer expert so
am not able to iterpret the results below but it looks as if it may be
something to do with FATFILE.SYS
The PC crashes when Windows Media Player Network Sharing Service
tries to start
Any help understanding this and resolving problem would be greatly
appreciated
Mike
________________________________________________
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*c:\local
cache*
http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2
procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6001.18145.amd64fre.vistasp1_gdr.080917-1612
Machine Name:
Kernel base = 0xfffff800`02618000 PsLoadedModuleList = 0xfffff800`027dddb0
Debug session time: Mon Mar 2 11:25:50.838 2009 (GMT+1)
System Uptime: 0 days 2:36:47.564
Loading Kernel Symbols
................................................................
.................................................................
.............................
Loading User Symbols
PEB is paged out (Peb.Ldr = 000007ff`fffdd018). Type ".hh dbgerr001" for
details
Loading unloaded module list
..........
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 23, {131369, fffffa800220e920, fffffa800220ea00, 0}
PEB is paged out (Peb.Ldr = 000007ff`fffdd018). Type ".hh dbgerr001" for
details
PEB is paged out (Peb.Ldr = 000007ff`fffdd018). Type ".hh dbgerr001" for
details
Probably caused by : fastfat.SYS ( fastfat!FatGetRetrievalPointers+1fd )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
FAT_FILE_SYSTEM (23)
If you see FatExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 0000000000131369
Arg2: fffffa800220e920
Arg3: fffffa800220ea00
Arg4: 0000000000000000
Debugging Details:
------------------
PEB is paged out (Peb.Ldr = 000007ff`fffdd018). Type ".hh dbgerr001" for
details
PEB is paged out (Peb.Ldr = 000007ff`fffdd018). Type ".hh dbgerr001" for
details
EXCEPTION_RECORD: fffffa800220e920 -- (.exr 0xfffffa800220e920)
ExceptionAddress: fffffa8002e3f870
ExceptionCode: 02100502
ExceptionFlags: 10080140
NumberParameters: 1120931840
Parameter[0]: 0000000042d00200
Parameter[1]: 0000000000000000
Parameter[2]: fffffa8002b04938
Parameter[3]: fffffa800220e958
Parameter[4]: fffffa800220e958
Parameter[5]: 0000000000000000
Parameter[6]: 0000000000000000
Parameter[7]: fffffa8002b04910
Parameter[8]: 00000000000f6d62
Parameter[9]: fffffa80029f1bb0
Parameter[10]: fffffa80029f1bb0
Parameter[11]: fffffa80029f1ab0
Parameter[12]: fffffa8002db9b30
Parameter[13]: 0000000100000396
Parameter[14]: 0000000100000001
CONTEXT: fffffa800220ea00 -- (.cxr 0xfffffa800220ea00)
rax=0000000000000000 rbx=fffffa800220e920 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000001 rdi=fffffa800220eab0
rip=0000000000120012 rsp=000000000010000c rbp=fffff88009901d90
r8=fffffa800220eb10 r9=0000000000000000 r10=0000000000260026
r11=fffff8800e635ab0 r12=0000000000200024 r13=0000000000240024
r14=fffff8800c4261b0 r15=fffffa800220e920
iopl=0 nv up di pl nz na pe nc
cs=0000 ss=0000 ds=0000 es=0000 fs=0000 gs=0000
efl=00000000
00000000`00120012 ?? ???
Resetting default scope
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x23
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0x2100502 - <Unable to get error code text>
EXCEPTION_CODE: (Win32) 0x2100502 (34604290) - <Unable to get error code
text>
EXCEPTION_PARAMETER1: 0000000042d00200
EXCEPTION_PARAMETER2: 0000000000000000
EXCEPTION_PARAMETER3: fffffa8002b04938
EXCEPTION_PARAMETER4: 0
LAST_CONTROL_TRANSFER: from fffffa6005920ff1 to fffff8000266d350
STACK_TEXT:
fffffa60`03c56138 fffffa60`05920ff1 : 00000000`00000023 00000000`00131369
fffffa80`0220e920 fffffa80`0220ea00 : nt!KeBugCheckEx
fffffa60`03c56140 fffffa60`059201e5 : fffffa80`0200b760 fffffa80`03585410
fffffa80`00000020 fffff800`00000030 : fastfat!FatGetRetrievalPointers+0x1fd
fffffa60`03c56200 fffffa60`0591e7c1 : fffffa80`0278d010 00000000`000003d0
00000000`00000005 fffffa60`03c56360 : fastfat!FatUserFsCtrl+0x3a1
fffffa60`03c56260 fffffa60`0591e6d8 : fffffa80`03585410 fffffa80`02dc9200
fffffa80`02dc9200 00000000`00000000 :
fastfat!FatCommonFileSystemControl+0x71
fffffa60`03c56290 fffffa60`00a0de17 : fffffa80`035857f8 fffffa80`03585410
fffffa80`0491b901 fffffa80`02dc92b0 : fastfat!FatFsdFileSystemControl+0xac
fffffa60`03c562d0 fffffa60`00a2ac32 : fffffa80`01cc6600 00000000`00000000
fffffa80`02dc9200 00000000`00000000 :
fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x227
fffffa60`03c56340 fffff800`028f131a : fffffa80`0484b390 fffffa80`0484b390
fffffa80`01899840 00000000`00000000 : fltmgr!FltpFsControl+0x102
fffffa60`03c563a0 fffff800`028f9ac2 : fffffa80`02dd2300 00000000`00000000
00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x5da
fffffa60`03c564f0 fffff800`0266cdf3 : fffffa80`0484b390 fffffa80`01882c10
fffffa60`03c56570 fffffa60`03c56570 : nt!NtFsControlFile+0x56
fffffa60`03c56560 fffff800`0266d300 : fffffa60`00fb0769 fffffa80`70526345
00000000`00000020 ffffffff`80001b98 : nt!KiSystemServiceCopyEnd+0x13
fffffa60`03c56768 fffffa60`00fb0769 : fffffa80`70526345 00000000`00000020
ffffffff`80001b98 fffffa60`000001e7 : nt!KiServiceLinkage
fffffa60`03c56770 fffffa60`00fb04c2 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : ecache!EcFileCacheGetExtents+0x69
fffffa60`03c567f0 fffffa60`00faffd1 : ffffffff`80001b98 00000000`00000000
00000000`42d00200 fffffa80`0484b390 :
ecache!EcFileCacheCreateAndGetExtents+0x15e
fffffa60`03c568e0 fffffa60`00fac09e : fffffa80`04c77e60 fffffa80`035c6790
fffffa80`02df9520 00000000`00000001 : ecache!EcFileCacheStart+0x71
fffffa60`03c56940 fffff800`028f131a : fffffa80`025ede30 00000000`00000000
00000000`00000000 00000000`00000000 : ecache!EcDispatchDeviceControl+0x512
fffffa60`03c569f0 fffff800`02909fe6 : fffffa80`0491b950 00000000`00000000
00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x5da
fffffa60`03c56b40 fffff800`0266cdf3 : fffff880`08c6edc0 fffffa80`04ce4060
00000000`00000870 fffff800`028e9ec4 : nt!NtDeviceIoControlFile+0x56
fffffa60`03c56bb0 00000000`76f65aea : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`01cef408 00000000`00000000 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : 0x76f65aea
STACK_COMMAND: kb
FOLLOWUP_IP:
fastfat!FatGetRetrievalPointers+1fd
fffffa60`05920ff1 488d8ee0000000 lea rcx,[rsi+0E0h]
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: fastfat!FatGetRetrievalPointers+1fd
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: fastfat
IMAGE_NAME: fastfat.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 4791906a
FAILURE_BUCKET_ID: X64_0x23_fastfat!FatGetRetrievalPointers+1fd
BUCKET_ID: X64_0x23_fastfat!FatGetRetrievalPointers+1fd
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
FAT_FILE_SYSTEM (23)
If you see FatExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 0000000000131369
Arg2: fffffa800220e920
Arg3: fffffa800220ea00
Arg4: 0000000000000000
Debugging Details:
------------------
PEB is paged out (Peb.Ldr = 000007ff`fffdd018). Type ".hh dbgerr001" for
details
PEB is paged out (Peb.Ldr = 000007ff`fffdd018). Type ".hh dbgerr001" for
details
EXCEPTION_RECORD: fffffa800220e920 -- (.exr 0xfffffa800220e920)
ExceptionAddress: fffffa8002e3f870
ExceptionCode: 02100502
ExceptionFlags: 10080140
NumberParameters: 1120931840
Parameter[0]: 0000000042d00200
Parameter[1]: 0000000000000000
Parameter[2]: fffffa8002b04938
Parameter[3]: fffffa800220e958
Parameter[4]: fffffa800220e958
Parameter[5]: 0000000000000000
Parameter[6]: 0000000000000000
Parameter[7]: fffffa8002b04910
Parameter[8]: 00000000000f6d62
Parameter[9]: fffffa80029f1bb0
Parameter[10]: fffffa80029f1bb0
Parameter[11]: fffffa80029f1ab0
Parameter[12]: fffffa8002db9b30
Parameter[13]: 0000000100000396
Parameter[14]: 0000000100000001
CONTEXT: fffffa800220ea00 -- (.cxr 0xfffffa800220ea00)
rax=0000000000000000 rbx=fffffa800220e920 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000001 rdi=fffffa800220eab0
rip=0000000000120012 rsp=000000000010000c rbp=fffff88009901d90
r8=fffffa800220eb10 r9=0000000000000000 r10=0000000000260026
r11=fffff8800e635ab0 r12=0000000000200024 r13=0000000000240024
r14=fffff8800c4261b0 r15=fffffa800220e920
iopl=0 nv up di pl nz na pe nc
cs=0000 ss=0000 ds=0000 es=0000 fs=0000 gs=0000
efl=00000000
00000000`00120012 ?? ???
Resetting default scope
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x23
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0x2100502 - <Unable to get error code text>
EXCEPTION_CODE: (Win32) 0x2100502 (34604290) - <Unable to get error code
text>
EXCEPTION_PARAMETER1: 0000000042d00200
EXCEPTION_PARAMETER2: 0000000000000000
EXCEPTION_PARAMETER3: fffffa8002b04938
EXCEPTION_PARAMETER4: 0
LAST_CONTROL_TRANSFER: from fffffa6005920ff1 to fffff8000266d350
STACK_TEXT:
fffffa60`03c56138 fffffa60`05920ff1 : 00000000`00000023 00000000`00131369
fffffa80`0220e920 fffffa80`0220ea00 : nt!KeBugCheckEx
fffffa60`03c56140 fffffa60`059201e5 : fffffa80`0200b760 fffffa80`03585410
fffffa80`00000020 fffff800`00000030 : fastfat!FatGetRetrievalPointers+0x1fd
fffffa60`03c56200 fffffa60`0591e7c1 : fffffa80`0278d010 00000000`000003d0
00000000`00000005 fffffa60`03c56360 : fastfat!FatUserFsCtrl+0x3a1
fffffa60`03c56260 fffffa60`0591e6d8 : fffffa80`03585410 fffffa80`02dc9200
fffffa80`02dc9200 00000000`00000000 :
fastfat!FatCommonFileSystemControl+0x71
fffffa60`03c56290 fffffa60`00a0de17 : fffffa80`035857f8 fffffa80`03585410
fffffa80`0491b901 fffffa80`02dc92b0 : fastfat!FatFsdFileSystemControl+0xac
fffffa60`03c562d0 fffffa60`00a2ac32 : fffffa80`01cc6600 00000000`00000000
fffffa80`02dc9200 00000000`00000000 :
fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x227
fffffa60`03c56340 fffff800`028f131a : fffffa80`0484b390 fffffa80`0484b390
fffffa80`01899840 00000000`00000000 : fltmgr!FltpFsControl+0x102
fffffa60`03c563a0 fffff800`028f9ac2 : fffffa80`02dd2300 00000000`00000000
00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x5da
fffffa60`03c564f0 fffff800`0266cdf3 : fffffa80`0484b390 fffffa80`01882c10
fffffa60`03c56570 fffffa60`03c56570 : nt!NtFsControlFile+0x56
fffffa60`03c56560 fffff800`0266d300 : fffffa60`00fb0769 fffffa80`70526345
00000000`00000020 ffffffff`80001b98 : nt!KiSystemServiceCopyEnd+0x13
fffffa60`03c56768 fffffa60`00fb0769 : fffffa80`70526345 00000000`00000020
ffffffff`80001b98 fffffa60`000001e7 : nt!KiServiceLinkage
fffffa60`03c56770 fffffa60`00fb04c2 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : ecache!EcFileCacheGetExtents+0x69
fffffa60`03c567f0 fffffa60`00faffd1 : ffffffff`80001b98 00000000`00000000
00000000`42d00200 fffffa80`0484b390 :
ecache!EcFileCacheCreateAndGetExtents+0x15e
fffffa60`03c568e0 fffffa60`00fac09e : fffffa80`04c77e60 fffffa80`035c6790
fffffa80`02df9520 00000000`00000001 : ecache!EcFileCacheStart+0x71
fffffa60`03c56940 fffff800`028f131a : fffffa80`025ede30 00000000`00000000
00000000`00000000 00000000`00000000 : ecache!EcDispatchDeviceControl+0x512
fffffa60`03c569f0 fffff800`02909fe6 : fffffa80`0491b950 00000000`00000000
00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x5da
fffffa60`03c56b40 fffff800`0266cdf3 : fffff880`08c6edc0 fffffa80`04ce4060
00000000`00000870 fffff800`028e9ec4 : nt!NtDeviceIoControlFile+0x56
fffffa60`03c56bb0 00000000`76f65aea : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`01cef408 00000000`00000000 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : 0x76f65aea
STACK_COMMAND: kb
FOLLOWUP_IP:
fastfat!FatGetRetrievalPointers+1fd
fffffa60`05920ff1 488d8ee0000000 lea rcx,[rsi+0E0h]
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: fastfat!FatGetRetrievalPointers+1fd
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: fastfat
IMAGE_NAME: fastfat.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 4791906a
FAILURE_BUCKET_ID: X64_0x23_fastfat!FatGetRetrievalPointers+1fd
BUCKET_ID: X64_0x23_fastfat!FatGetRetrievalPointers+1fd
Followup: MachineOwner
---------