Help Debugging a MEMORY.DMP file

[ilarson007]

Ok, so I followed instructions and downloaded, installed, and ran WinDbg and I have the results saved in a .txt file, but now that I have that I have no idea where to go from here.... I will attach said file; is there anyone that can help me out? Also, the BSOD is on bootup, right after the login screen comes up... And I don't know if this is related, but every time I open Windows Explorer and it tries to load the screenshots of movie files, I get a thing that pops up that says "COM Surrogate has closed."

All help is much appreciated.

 

[ilarson007]

bump, it BSOD'd again, got another .dmp file... Also, there's a bunch of these .dmp files in my C:\Windows\Minidump directory. I can run Windbg on these if necessary.

Anyone?

 

[zigzag3143]

bump, it BSOD'd again, got another .dmp file... Also, there's a bunch of these .dmp files in my C:\Windows\Minidump directory. I can run Windbg on these if necessary.

Anyone?

ilarson

Can you take the most recent dump file and upload it to us? we can debug faster than with a text file.

thanks

Ken

 

[ilarson007]

Whoops, I meant to attach that to the post.

Here it is.

 

[zigzag3143]

Whoops, I meant to attach that to the post.

Here it is.

Im sorry

can you take the dump file (dont debug it) zip the contents and upload it to me. The last dump you uploaded told me it was the macaffee that was involved but not how or why.
When we have the actual dump file we can run things on it to tell us driver info, memory stack contents, etc.

Just as an aside for you to learn how to. run the last dump file again. when it finishes type this into the bar at the bottom !thread;!analyze -v;r;kv;lmtn;lmtsmn .

It will by thread, analyze (in verbose mode -v) and give us the dates and times of the drivers

Hope this helps

Ken

 

[Ex_Brit]

ilarson007, this isn't by any chance McAfee beta Total Protection that is causing this BSOD is it?

 

[ilarson007]

I don't know what's causing it, that's why I'm asking for help lol.

Here's the last three BSOD's, date coded in the file name:

 

[Ex_Brit]

I'll rephrase the question. Are you running beta McAfee products?

 

[H2SO4]

I'll rephrase the question. Are you running beta McAfee products?

MCAfee? Yes, (s)he is.

Beta? I don't know whether these are beta, but I gather you've been experiencing your own possibly-McAfee-related crashes, so you might want to match these file dates against your own:

1: kd> lmtmmfe*
start end module name
9d658000 9d68ac40 mfehidk Sat Aug 01 07:59:40 2009 (4A73694C)
a8f55000 a8f5bf80 mfebopk Sat Aug 01 08:03:24 2009 (4A736A2C)
a8f5c000 a8f6dd80 mfeavfk Sat Aug 01 08:02:34 2009 (4A7369FA)


@ilarson007: 2 out of the 3 crashes are very probably attributable to McAfee. The third is ambiguous and difficult to place from nothing more than a minidump, but it's also possibly related. Ex_Brit seems to have an ongoing dialog with McAfee regarding the performance of their products under Vista SP2 (or so I gather), so perhaps the resolution to your issue may come from that direction.

Otherwise, if you remove McAfee, at least some of your crashes will almost certainly stop. That's not to say that McAfee is somehow better or worse than any other AV product; it's just that in this instance their filter drivers appear to be linked to your crashes.

 

[Ex_Brit]

If it is indeed McAfee beta (beta only please note) they will welcome bug reports with the dump files attached. In fact they need the more the merrier.

It's only in Vista x64 and using McAfee's new 2010 beta product that the crash occurs in my case.

 

[ilarson007]

Ah, well it's not a beta afaik; it's whatever we get free with our Comcast internet. For now, I don't have any other anti-virus that I can use, so it'll have to stay.

 

[Ex_Brit]

OK. I only asked because the only time McAfee caused BSOD was in Vista x64 using a McAfee Beta product.

 

[ilarson007]

I always liked Symantec Corporate better, but we don't have that anymore.

 

[ilarson007]

McAfee versions:
SecurityCenter: 9.15
VirusScan: 13.15
PersonalFirewall: 10.15