IRQL_NOT_LESS_OR_EQUAL after a failed update Win Server2008 32x

PyrataOmega

Contributor
Joined
Dec 18, 2018
Posts
17
Hi, im having issues on a virtual machine with Windows Server 2008 32bits, the present state of the OS is that it will only boot into safe mode and safe mode with network, when i try the normal boot or last known good configuration i get the BSOD with the code IRQL_NOT_LESS_OR_EQUAL STOP: 0X0000000A , i started reading from your forum about this bug and i felt its too complex for me to fix, so im back to asking for your expertise on the subject, im ataching the BSOD collection zip file, i also read about the memory testing and driver verifier but you recomend to create a restore point before executing them, as far as i know theres no way to create a restore point on win server 2008 and if things go south i cant compromise the information in the server. Ill provide as much information as posible and thanks in advance.


· OS - Windows Server 2008 32x (Virtual), ESXi 5.1 (Host)
· What was the originally installed OS on the system? ESXi 5,1 from retailer.
· Retail version
· Age of system (hardware)
March 2013
· Age of OS installation - have you re-installed the OS?
2015
No i havent reinstalled the OS, the information in it is too important i have to try my best to recover this OS

· CPU
Intel Xeon E5-26200
· Video Card
non that im aware of
· MotherBoard - (if NOT a laptop)
OEM is all i know
· Power Supply - brand & wattage (if laptop, skip this one)
Dell platinum 400W
· System Manufacturer
Dell
· Exact model number (if laptop, check label on the bottom)
PowerEdgeR720
· Laptop or Desktop?
PowerEdge Server
 

Attachments

Hi. . .

You have 7 dumps from 2017 and one recent one.

The dump was unable to tell me anything due to driver symbol errors.

Post further dumps if BSODs continue.

Are you running genuine Windows?

I ask because per the dump -
Code:
Windows 7 Kernel Version 6003 (Service Pack 2)

No such thing as a Service Pack 2 for Windows 7.

Regards. . .

jcgriff2


Code:
Microsoft (R) Windows Debugger Version 10.0.17763.132 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\PalmDesert\AppData\Local\Temp\Temp1_SysnativeFileCollectionApp.zip\Mini062619-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Path validation summary **************
Response Time (ms) Location
Deferred SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Windows 7 Kernel Version 6003 (Service Pack 2) MP (6 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0x81e19000 PsLoadedModuleList = 0x81f38a70
Debug session time: Wed Jun 26 23:08:28.735 2019 (UTC - 4:00)
System Uptime: 0 days 0:00:18.391
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Loading Kernel Symbols
...............................................................
.......................
Loading User Symbols
Loading unloaded module list
.

************* Symbol Loading Error Summary **************
Module name Error
ntkrnlpa               The system cannot find the file specified

You can troubleshoot most symbol related issues by turning on symbol loading diagnostics (!sym noisy) and repeating the command that caused symbols to be loaded.
You should also verify that your symbol search path (.sympath) is correct.
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {f495a219, 2, 1, 81f17d50}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_EPROCESS ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KTHREAD ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
Processing initial command '!analyze -v;r;kv;lmtn;lmtsmn;.bugcheck'
Probably caused by : ntoskrnl.wrong.symbols.exe ( nt_wrong_symbols!5CEFE0173B7000 )

Followup:     MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn;lmtsmn;.bugcheck
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: f495a219, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 81f17d50, address which referenced memory

Debugging Details:
------------------

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_EPROCESS ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KTHREAD ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************

KEY_VALUES_STRING: 1


STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

ADDITIONAL_DEBUG_TEXT: 
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.

WRONG_SYMBOLS_TIMESTAMP: 5cefe017

WRONG_SYMBOLS_SIZE: 3b7000

FAULTING_MODULE: 81e19000 nt

DEBUG_FLR_IMAGE_TIMESTAMP:  5cefe017

DUMP_TYPE:  2

BUGCHECK_P1: fffffffff495a219

BUGCHECK_P2: 2

BUGCHECK_P3: 1

BUGCHECK_P4: ffffffff81f17d50

WRITE_ADDRESS: *************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_MMPFN ***
*** ***
*************************************************************************
Target machine operating system not supported
f495a219

CURRENT_IRQL:  0

FAULTING_IP:
nt+fed50
81f17d50 08ac1c8535caef  or      byte ptr [esp+ebx-1035CA7Bh],ch

CPU_COUNT: 6

CPU_MHZ: 7d0

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 2d

CPU_STEPPING: 7

CPU_MICROCODE: 0,0,0,0 (F,M,S,R)  SIG: 70D'00000000 (cache) 0'00000000 (init)

CUSTOMER_CRASH_COUNT:  1

ANALYSIS_SESSION_HOST:  SYSNATIVEFORUMS

ANALYSIS_SESSION_TIME:  06-28-2019 11:07:13.0306

ANALYSIS_VERSION: 10.0.17763.132 amd64fre

LAST_CONTROL_TRANSFER:  from 81f17d50 to 81efab15

STACK_TEXT: 
WARNING: Stack unwind information not available. Following frames may be wrong.
81f17c90 81f17d50 badb0d00 00000000 82d9d120 nt+0xe1b15
00000000 00000000 00000000 00000000 00000000 nt+0xfed50


THREAD_SHA1_HASH_MOD_FUNC:  6997106dce080e0f247cffc7d244723501c73d61

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  2d8a271f870bcb4f672325b569874a97520580a7

THREAD_SHA1_HASH_MOD:  6997106dce080e0f247cffc7d244723501c73d61

FOLLOWUP_IP:
nt+fed50
81f17d50 08ac1c8535caef  or      byte ptr [esp+ebx-1035CA7Bh],ch

FAULT_INSTR_CODE:  851cac08

SYMBOL_STACK_INDEX:  1

FOLLOWUP_NAME:  MachineOwner

STACK_COMMAND:  .thread ; .cxr ; kb

BUGCHECK_STR:  5CEFE017

EXCEPTION_CODE: (NTSTATUS) 0x5cefe017 - <Unable to get error code text>

EXCEPTION_CODE_STR:  5CEFE017

EXCEPTION_STR:  WRONG_SYMBOLS

PROCESS_NAME:  ntoskrnl.wrong.symbols.exe

IMAGE_NAME:  ntoskrnl.wrong.symbols.exe

MODULE_NAME: nt_wrong_symbols

SYMBOL_NAME:  nt_wrong_symbols!5CEFE0173B7000

BUCKET_ID:  WRONG_SYMBOLS_X86_TIMESTAMP_190530-135223

DEFAULT_BUCKET_ID:  WRONG_SYMBOLS_X86_TIMESTAMP_190530-135223

PRIMARY_PROBLEM_CLASS:  WRONG_SYMBOLS

FAILURE_BUCKET_ID:  WRONG_SYMBOLS_X86_TIMESTAMP_190530-135223_5CEFE017_nt_wrong_symbols!5CEFE0173B7000

TARGET_TIME:  2019-06-27T03:08:28.000Z

OSBUILD:  6003

OSSERVICEPACK:  2000

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  272

PRODUCT_TYPE:  3

OSPLATFORM_TYPE:  x86

OSNAME:  Windows 7

OSEDITION:  Windows 7 Server (Service Pack 2) TerminalServer SingleUserTS

OS_LOCALE:

USER_LCID:  0

OSBUILD_TIMESTAMP:  2019-05-30 09:52:23

ANALYSIS_SESSION_ELAPSED_TIME:  1076

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:wrong_symbols_x86_timestamp_190530-135223_5cefe017_nt_wrong_symbols!5cefe0173b7000

FAILURE_ID_HASH:  {a5b7bd9d-5a4d-88cb-47fd-ea4238feb6f2}

Followup:     MachineOwner
---------

eax=82d9d120 ebx=00000002 ecx=81f20f9c edx=00000001 esi=82d9d13c edi=00000000
eip=81efab15 esp=81f17c78 ebp=81f17c90 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00200202
nt+0xe1b15:
81efab15 833dc4faf48100 cmp dword ptr [nt+0x136ac4 (81f4fac4)],0 ds:0023:81f4fac4=????????
# ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
00 81f17c90 81f17d50 badb0d00 00000000 82d9d120 nt+0xe1b15
01 00000000 00000000 00000000 00000000 00000000 nt+0xfed50
start end module name
80602000 80609000 kdcom kdcom.dll Fri Apr 10 23:25:29 2009 (49E037D9)
80609000 80679000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Fri Apr 10 23:23:19 2009 (49E03757)
80679000 8068a000 PSHED PSHED.dll Fri Apr 10 23:25:32 2009 (49E037DC)
8068a000 80692000 BOOTVID BOOTVID.dll Fri Jan 18 23:27:15 2008 (4791A653)
80692000 806d3000 CLFS CLFS.SYS Thu May 16 06:51:58 2019 (5CDD6AFE)
806d3000 80778000 CI CI.dll Fri May 11 18:48:26 2018 (5AF647EA)
80790000 8079e000 WDFLDR WDFLDR.SYS Wed Jul 25 19:36:38 2012 (5010AD36)
8079e000 807e4000 acpi acpi.sys Fri Apr 10 21:19:03 2009 (49E01A37)
807e4000 807ed000 WMILIB WMILIB.SYS Fri Jan 18 21:53:08 2008 (47919044)
81e19000 821d0000 nt ntkrnlpa.exe Thu May 30 06:52:23 2019 (5CEFE017)
821d0000 82203000 hal halmacpi.dll Fri Apr 10 21:13:13 2009 (49E018D9)
8cc00000 8cc08000 msisadrv msisadrv.sys Fri Jan 18 21:32:51 2008 (47918B83)
8cc08000 8cd13000 NDIS NDIS.SYS Mon Mar 26 12:26:32 2018 (5AB94968)
8cd13000 8cd3e000 msrpc msrpc.sys Sun Nov 11 06:56:39 2018 (5BE84327)
8cd3e000 8cd79000 NETIO NETIO.SYS Thu Jun 1 22:26:55 2017 (5930F71F)
8cd79000 8cdfa000 Wdf01000 Wdf01000.sys Fri Jun 21 19:29:37 2013 (51C50C11)
8ce0e000 8ce35000 pci pci.sys Fri Apr 10 21:19:16 2009 (49E01A44)
8ce35000 8ce45000 partmgr partmgr.sys Tue Mar 20 10:18:52 2012 (4F68BBFC)
8ce45000 8ce47900 compbatt compbatt.sys Fri Jan 18 21:32:47 2008 (47918B7F)
8ce48000 8ce52000 BATTC BATTC.SYS Fri Jan 18 21:32:45 2008 (47918B7D)
8ce52000 8ce59000 intelide intelide.sys Fri Jan 18 21:49:42 2008 (47918F76)
8ce59000 8ce67000 PCIIDEX PCIIDEX.SYS Fri Apr 10 21:39:09 2009 (49E01EED)
8ce67000 8ce76000 volmgr volmgr.sys Fri Jan 18 21:49:51 2008 (47918F7F)
8ce76000 8cec0000 volmgrx volmgrx.sys Thu Apr 18 19:03:14 2019 (5CB92C62)
8cec0000 8cecfb80 vmci vmci.sys Mon Apr 30 18:12:40 2012 (4F9F3888)
8ced0000 8cee0000 mountmgr mountmgr.sys Wed May 10 07:30:27 2017 (59132403)
8cee0000 8ceed500 vsock vsock.sys Mon Apr 30 18:13:30 2012 (4F9F38BA)
8ceee000 8cef6000 atapi atapi.sys Fri Apr 10 21:39:09 2009 (49E01EED)
8cef6000 8cf14000 ataport ataport.SYS Fri Apr 10 21:39:10 2009 (49E01EEE)
8cf14000 8cf2e000 lsi_scsi lsi_scsi.sys Fri Jun 29 17:47:54 2007 (4685A83A)
8cf2e000 8cf6f000 storport storport.sys Fri Apr 10 21:39:19 2009 (49E01EF7)
8cf6f000 8cf87000 lsi_sas lsi_sas.sys Fri Jun 29 18:01:01 2007 (4685AB4D)
8cf87000 8cf91000 msahci msahci.sys Fri Apr 10 21:39:11 2009 (49E01EEF)
8cf91000 8cf9f000 percsas2 percsas2.sys Sun Apr 15 09:43:11 2012 (4F8AFA9F)
8cf9f000 8cfd2000 fltmgr fltmgr.sys Mon Mar 26 12:21:57 2018 (5AB94855)
8d009000 8d146000 symefasi symefasi.sys Mon May 2 17:21:03 2016 (5727EEEF)
8d146000 8d1b9000 ksecdd ksecdd.sys Fri Apr 5 06:53:55 2019 (5CA75DF3)
8d201000 8d2ef000 tcpip tcpip.sys Wed Apr 24 06:56:33 2019 (5CC06B11)
8d2ef000 8d30a000 fwpkclnt fwpkclnt.sys Fri Apr 10 21:45:42 2009 (49E02076)
8d30a000 8d311e00 storflt storflt.sys Sat Nov 17 18:29:44 2007 (473FA398)
8d312000 8d31d000 kbdclass kbdclass.sys Fri Jan 18 21:49:14 2008 (47918F5A)
8d31d000 8d328000 mouclass mouclass.sys Fri Jan 18 21:49:14 2008 (47918F5A)
8d328000 8d340000 parport parport.sys Fri Jan 18 21:49:32 2008 (47918F6C)
8d340000 8d35a000 serial serial.sys Fri Jan 18 21:49:34 2008 (47918F6E)
8d35a000 8d364000 serenum serenum.sys Fri Jan 18 21:49:29 2008 (47918F69)
8d364000 8d36f000 fdc fdc.sys Fri Jan 18 21:49:37 2008 (47918F71)
8d36f000 8d387000 cdrom cdrom.sys Fri Apr 10 21:39:17 2009 (49E01EF5)
8d387000 8d3b5000 vm3dmp vm3dmp.sys Wed Jun 13 02:44:36 2012 (4FD86104)
8d406000 8d516000 Ntfs Ntfs.sys Fri Feb 15 20:20:15 2019 (5C678F7F)
8d516000 8d54f000 volsnap volsnap.sys Fri Apr 10 21:39:37 2009 (49E01F09)
8d54f000 8d557000 spldr spldr.sys Thu Jun 21 17:29:17 2007 (467B17DD)
8d557000 8d566000 mup mup.sys Fri Apr 10 21:14:12 2009 (49E01914)
8d566000 8d577000 disk disk.sys Fri Apr 10 21:39:14 2009 (49E01EF2)
8d577000 8d598000 CLASSPNP CLASSPNP.SYS Fri Apr 10 21:39:05 2009 (49E01EE9)
8d598000 8d5a8000 agp440 agp440.sys Fri Jan 18 21:32:49 2008 (47918B81)
8d5a8000 8d5b1000 crcdisk crcdisk.sys Fri Jan 18 21:50:29 2008 (47918FA5)
8d5b1000 8d5be000 crashdmp crashdmp.sys Fri Apr 10 21:39:12 2009 (49E01EF0)
8d5be000 8d5c8000 dump_diskdump dump_diskdump.sys Fri Apr 10 21:39:11 2009 (49E01EEF)
8d5c8000 8d5e0000 dump_LSI_SAS dump_LSI_SAS.sys Fri Jun 29 18:01:01 2007 (4685AB4D)
8d5e0000 8d5eb000 tunnel tunnel.sys Thu Feb 18 03:28:13 2010 (4B7D244D)
8d5eb000 8d5fe000 i8042prt i8042prt.sys Fri Jan 18 21:49:17 2008 (47918F5D)
8d5fe000 8d5ff380 vmmouse vmmouse.sys Mon Jun 4 02:15:28 2012 (4FCC7CB0)
92c03000 92ca3000 dxgkrnl dxgkrnl.sys Fri Sep 7 06:54:13 2018 (5B928305)
92ca3000 92caf000 watchdog watchdog.sys Fri Apr 10 21:22:43 2009 (49E01B13)
92caf000 92cba000 usbuhci usbuhci.sys Fri Jan 18 21:53:20 2008 (47919050)
92cba000 92cf8000 USBPORT USBPORT.SYS Fri Apr 10 21:42:55 2009 (49E01FCF)
92cf8000 92cfdb00 vmxnet vmxnet.sys Tue May 8 02:38:41 2012 (4FA8E9A1)
92cfe000 92d0d000 usbehci usbehci.sys Fri Apr 10 21:42:52 2009 (49E01FCC)
92d0d000 92d10780 CmBatt CmBatt.sys Fri Jan 18 21:32:47 2008 (47918B7F)
92d11000 92d20000 intelppm intelppm.sys Fri Jan 18 21:27:20 2008 (47918A38)
92d20000 92d4f000 msiscsi msiscsi.sys Fri Apr 10 21:40:07 2009 (49E01F27)
92d4f000 92d5a000 TDI TDI.SYS Fri Jan 18 21:57:10 2008 (47919136)
92d5a000 92d71000 rasl2tp rasl2tp.sys Fri Jan 18 21:56:33 2008 (47919111)
92d71000 92d7c000 ndistapi ndistapi.sys Tue Dec 11 11:20:33 2018 (5C100E01)
92d7c000 92d9f000 ndiswan ndiswan.sys Fri Apr 10 21:46:31 2009 (49E020A7)
92d9f000 92dae000 raspppoe raspppoe.sys Fri Apr 10 21:46:30 2009 (49E020A6)
92dae000 92dc2000 raspptp raspptp.sys Fri Jan 18 21:56:34 2008 (47919112)
92dc2000 92dd7000 rassstp rassstp.sys Fri Apr 10 21:46:40 2009 (49E020B0)
93e0b000 93e94000 rdpdr rdpdr.sys Fri Apr 10 21:52:32 2009 (49E02210)
93e94000 93ea4000 termdd termdd.sys Fri Apr 10 21:51:14 2009 (49E021C2)
93ea4000 93ea5380 swenum swenum.sys Fri Jan 18 21:49:20 2008 (47918F60)
93ea6000 93ed1000 ks ks.sys Mon Aug 20 17:57:28 2018 (5B7B6378)
93ed1000 93f10000 dtsoftbus01 dtsoftbus01.sys Mon Oct 17 05:12:37 2011 (4E9C1BB5)
93f10000 93f1a000 mssmbios mssmbios.sys Fri Jan 18 21:32:55 2008 (47918B87)
93f1a000 93f27000 umbus umbus.sys Fri Jan 18 21:53:40 2008 (47919064)
93f27000 93f31000 flpydisk flpydisk.sys Fri Jan 18 21:49:37 2008 (47918F71)
93f31000 93f66000   usbhub   usbhub.sys   Fri Apr 10 21:43:14 2009 (49E01FE2)

Unloaded modules:
80778000 80790000 sacdrv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00018000
start end module name
8079e000 807e4000 acpi acpi.sys Fri Apr 10 21:19:03 2009 (49E01A37)
8d598000 8d5a8000 agp440 agp440.sys Fri Jan 18 21:32:49 2008 (47918B81)
8ceee000 8cef6000 atapi atapi.sys Fri Apr 10 21:39:09 2009 (49E01EED)
8cef6000 8cf14000 ataport ataport.SYS Fri Apr 10 21:39:10 2009 (49E01EEE)
8ce48000 8ce52000 BATTC BATTC.SYS Fri Jan 18 21:32:45 2008 (47918B7D)
8068a000 80692000 BOOTVID BOOTVID.dll Fri Jan 18 23:27:15 2008 (4791A653)
8d36f000 8d387000 cdrom cdrom.sys Fri Apr 10 21:39:17 2009 (49E01EF5)
806d3000 80778000 CI CI.dll Fri May 11 18:48:26 2018 (5AF647EA)
8d577000 8d598000 CLASSPNP CLASSPNP.SYS Fri Apr 10 21:39:05 2009 (49E01EE9)
80692000 806d3000 CLFS CLFS.SYS Thu May 16 06:51:58 2019 (5CDD6AFE)
92d0d000 92d10780 CmBatt CmBatt.sys Fri Jan 18 21:32:47 2008 (47918B7F)
8ce45000 8ce47900 compbatt compbatt.sys Fri Jan 18 21:32:47 2008 (47918B7F)
8d5b1000 8d5be000 crashdmp crashdmp.sys Fri Apr 10 21:39:12 2009 (49E01EF0)
8d5a8000 8d5b1000 crcdisk crcdisk.sys Fri Jan 18 21:50:29 2008 (47918FA5)
8d566000 8d577000 disk disk.sys Fri Apr 10 21:39:14 2009 (49E01EF2)
93ed1000 93f10000 dtsoftbus01 dtsoftbus01.sys Mon Oct 17 05:12:37 2011 (4E9C1BB5)
8d5be000 8d5c8000 dump_diskdump dump_diskdump.sys Fri Apr 10 21:39:11 2009 (49E01EEF)
8d5c8000 8d5e0000 dump_LSI_SAS dump_LSI_SAS.sys Fri Jun 29 18:01:01 2007 (4685AB4D)
92c03000 92ca3000 dxgkrnl dxgkrnl.sys Fri Sep 7 06:54:13 2018 (5B928305)
8d364000 8d36f000 fdc fdc.sys Fri Jan 18 21:49:37 2008 (47918F71)
93f27000 93f31000 flpydisk flpydisk.sys Fri Jan 18 21:49:37 2008 (47918F71)
8cf9f000 8cfd2000 fltmgr fltmgr.sys Mon Mar 26 12:21:57 2018 (5AB94855)
8d2ef000 8d30a000 fwpkclnt fwpkclnt.sys Fri Apr 10 21:45:42 2009 (49E02076)
821d0000 82203000 hal halmacpi.dll Fri Apr 10 21:13:13 2009 (49E018D9)
8d5eb000 8d5fe000 i8042prt i8042prt.sys Fri Jan 18 21:49:17 2008 (47918F5D)
8ce52000 8ce59000 intelide intelide.sys Fri Jan 18 21:49:42 2008 (47918F76)
92d11000 92d20000 intelppm intelppm.sys Fri Jan 18 21:27:20 2008 (47918A38)
8d312000 8d31d000 kbdclass kbdclass.sys Fri Jan 18 21:49:14 2008 (47918F5A)
80602000 80609000 kdcom kdcom.dll Fri Apr 10 23:25:29 2009 (49E037D9)
93ea6000 93ed1000 ks ks.sys Mon Aug 20 17:57:28 2018 (5B7B6378)
8d146000 8d1b9000 ksecdd ksecdd.sys Fri Apr 5 06:53:55 2019 (5CA75DF3)
8cf6f000 8cf87000 lsi_sas lsi_sas.sys Fri Jun 29 18:01:01 2007 (4685AB4D)
8cf14000 8cf2e000 lsi_scsi lsi_scsi.sys Fri Jun 29 17:47:54 2007 (4685A83A)
80609000 80679000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Fri Apr 10 23:23:19 2009 (49E03757)
8d31d000 8d328000 mouclass mouclass.sys Fri Jan 18 21:49:14 2008 (47918F5A)
8ced0000 8cee0000 mountmgr mountmgr.sys Wed May 10 07:30:27 2017 (59132403)
8cf87000 8cf91000 msahci msahci.sys Fri Apr 10 21:39:11 2009 (49E01EEF)
8cc00000 8cc08000 msisadrv msisadrv.sys Fri Jan 18 21:32:51 2008 (47918B83)
92d20000 92d4f000 msiscsi msiscsi.sys Fri Apr 10 21:40:07 2009 (49E01F27)
8cd13000 8cd3e000 msrpc msrpc.sys Sun Nov 11 06:56:39 2018 (5BE84327)
93f10000 93f1a000 mssmbios mssmbios.sys Fri Jan 18 21:32:55 2008 (47918B87)
8d557000 8d566000 mup mup.sys Fri Apr 10 21:14:12 2009 (49E01914)
8cc08000 8cd13000 NDIS NDIS.SYS Mon Mar 26 12:26:32 2018 (5AB94968)
92d71000 92d7c000 ndistapi ndistapi.sys Tue Dec 11 11:20:33 2018 (5C100E01)
92d7c000 92d9f000 ndiswan ndiswan.sys Fri Apr 10 21:46:31 2009 (49E020A7)
8cd3e000 8cd79000 NETIO NETIO.SYS Thu Jun 1 22:26:55 2017 (5930F71F)
81e19000 821d0000 nt ntkrnlpa.exe Thu May 30 06:52:23 2019 (5CEFE017)
8d406000 8d516000 Ntfs Ntfs.sys Fri Feb 15 20:20:15 2019 (5C678F7F)
8d328000 8d340000 parport parport.sys Fri Jan 18 21:49:32 2008 (47918F6C)
8ce35000 8ce45000 partmgr partmgr.sys Tue Mar 20 10:18:52 2012 (4F68BBFC)
8ce0e000 8ce35000 pci pci.sys Fri Apr 10 21:19:16 2009 (49E01A44)
8ce59000 8ce67000 PCIIDEX PCIIDEX.SYS Fri Apr 10 21:39:09 2009 (49E01EED)
8cf91000 8cf9f000 percsas2 percsas2.sys Sun Apr 15 09:43:11 2012 (4F8AFA9F)
80679000 8068a000 PSHED PSHED.dll Fri Apr 10 23:25:32 2009 (49E037DC)
92d5a000 92d71000 rasl2tp rasl2tp.sys Fri Jan 18 21:56:33 2008 (47919111)
92d9f000 92dae000 raspppoe raspppoe.sys Fri Apr 10 21:46:30 2009 (49E020A6)
92dae000 92dc2000 raspptp raspptp.sys Fri Jan 18 21:56:34 2008 (47919112)
92dc2000 92dd7000 rassstp rassstp.sys Fri Apr 10 21:46:40 2009 (49E020B0)
93e0b000 93e94000 rdpdr rdpdr.sys Fri Apr 10 21:52:32 2009 (49E02210)
8d35a000 8d364000 serenum serenum.sys Fri Jan 18 21:49:29 2008 (47918F69)
8d340000 8d35a000 serial serial.sys Fri Jan 18 21:49:34 2008 (47918F6E)
8d54f000 8d557000 spldr spldr.sys Thu Jun 21 17:29:17 2007 (467B17DD)
8d30a000 8d311e00 storflt storflt.sys Sat Nov 17 18:29:44 2007 (473FA398)
8cf2e000 8cf6f000 storport storport.sys Fri Apr 10 21:39:19 2009 (49E01EF7)
93ea4000 93ea5380 swenum swenum.sys Fri Jan 18 21:49:20 2008 (47918F60)
8d009000 8d146000 symefasi symefasi.sys Mon May 2 17:21:03 2016 (5727EEEF)
8d201000 8d2ef000 tcpip tcpip.sys Wed Apr 24 06:56:33 2019 (5CC06B11)
92d4f000 92d5a000 TDI TDI.SYS Fri Jan 18 21:57:10 2008 (47919136)
93e94000 93ea4000 termdd termdd.sys Fri Apr 10 21:51:14 2009 (49E021C2)
8d5e0000 8d5eb000 tunnel tunnel.sys Thu Feb 18 03:28:13 2010 (4B7D244D)
93f1a000 93f27000 umbus umbus.sys Fri Jan 18 21:53:40 2008 (47919064)
92cfe000 92d0d000 usbehci usbehci.sys Fri Apr 10 21:42:52 2009 (49E01FCC)
93f31000 93f66000 usbhub usbhub.sys Fri Apr 10 21:43:14 2009 (49E01FE2)
92cba000 92cf8000 USBPORT USBPORT.SYS Fri Apr 10 21:42:55 2009 (49E01FCF)
92caf000 92cba000 usbuhci usbuhci.sys Fri Jan 18 21:53:20 2008 (47919050)
8d387000 8d3b5000 vm3dmp vm3dmp.sys Wed Jun 13 02:44:36 2012 (4FD86104)
8cec0000 8cecfb80 vmci vmci.sys Mon Apr 30 18:12:40 2012 (4F9F3888)
8d5fe000 8d5ff380 vmmouse vmmouse.sys Mon Jun 4 02:15:28 2012 (4FCC7CB0)
92cf8000 92cfdb00 vmxnet vmxnet.sys Tue May 8 02:38:41 2012 (4FA8E9A1)
8ce67000 8ce76000 volmgr volmgr.sys Fri Jan 18 21:49:51 2008 (47918F7F)
8ce76000 8cec0000 volmgrx volmgrx.sys Thu Apr 18 19:03:14 2019 (5CB92C62)
8d516000 8d54f000 volsnap volsnap.sys Fri Apr 10 21:39:37 2009 (49E01F09)
8cee0000 8ceed500 vsock vsock.sys Mon Apr 30 18:13:30 2012 (4F9F38BA)
92ca3000 92caf000 watchdog watchdog.sys Fri Apr 10 21:22:43 2009 (49E01B13)
8cd79000 8cdfa000 Wdf01000 Wdf01000.sys Fri Jun 21 19:29:37 2013 (51C50C11)
80790000 8079e000 WDFLDR WDFLDR.SYS Wed Jul 25 19:36:38 2012 (5010AD36)
807e4000 807ed000   WMILIB   WMILIB.SYS   Fri Jan 18 21:53:08 2008 (47919044)

Unloaded modules:
80778000 80790000 sacdrv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00018000
Bugcheck code 0000000A
Arguments f495a219 00000002 00000001 81f17d50
 
Also - this is a virtual system?

If so, reinstall Windows.


EDIT:

The bugcheck was 0xa - a driver attempted to access RAM that it should not have - or the RAM is just plain bad.

Test RAM - one stick at a time; alternate the slots - Test RAM with memtest.org MemTest86+

Regards. . .

jcgriff2
 
John, 6003 is a version # for Server 2008. AFAIK, WinDbg will label the SP1 convenience rollup update for 2008 R2 as SP2 instead of SP1. This may be due to the way MSFT hardcoded the update.
 
Did not know that and have never seen this before.

Thank you for pointing this out to me.

Regards. . .

John




@PyrataOmega - my apologies for asking if Windows was Genuine or not.

However, the kernel driver in your system is not being recognized by the Microsoft symbol server and therefore Windbg is giving off errors and is unable to allow the proper processing of the dump.

For now, run memtest86+ as I described in my prior post.

Regards. . .

jcgriff2
 
There are problems with the symbol server and they are on the Microsoft side. The problem has been reported and we are waiting for it to be fixed
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top