Field says suddenly BSODing

Hi people,

I get this dump file in all areas on a lot of Windows 7 and Windows 8.1 (no matter the computer model) on our field.  Many computers were BSODing randomly. The computer will BSOD if applications are open or not. Sometimes it happens in seconds, it happens sometimes in a few minutes. This often happens while the user is connected, but some users have reported that it happened during a restore of the system or the login screen. This all started at the same time (a few days), and there are several dozen computers that were performed.

What I tried to solve this problem:

-Restart computer

-Run a sfc/scannow

-System Restore (it had a couple of critical updates that I chose, but after restoring the system, users have always provided a BSOD)

-Delete the contents of the folder of the user folder

-Remove the user profile (tried this because while opening a session with a new admin user, I wasn't BSODing, so I thought it was because of a profile of costs)

-Ran windows updates (prayed for a bargain fix)

It is very sporadic and happens randomly, but usually in minutes (1-10 minutes). I don't think it's file or malicious software corruption, the problem occurred suddenly on multiple computers. Ideas?

See below for the journal of WinDbg,

Microsoft (R) Windows debug 6.3.9600.17336 AMD64 Version
Copyright (c) Microsoft Corporation. All rights reserved.
 
 
Loading dump file [C:\Users\domainuser\Documents\MEMORY. DMP]
The core dump file summary: the single kernel address space is available
 
 
Symbol of validation of the path summary *.
Location of response time (ms)
Deferred SRV * C:\Windows\symbol_cache* http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV * C:\Windows\symbol_cache* http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) free x 86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
By: 7601.23223.x86fre.win7sp1_ldr.150928 - 0600
Computer name:
Kernel base = 0x82e0d000 PsLoadedModuleList = 0x82f59e30
The debugging session: killed Nov 3 07:01:32.787 2015 (UTC - 08:00)
System Uptime: 0 days 0:06:05.758
Loading the kernel symbols
...............................................................
................................................................
.........................
Loading user symbols
PEB is paginated on (Peb.Ldr = 7ffd300c).  Type ".hh dbgerr001" for more details
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
* Bugcheck analysis *.
*                                                                             *
*******************************************************************************
 
Use! analyze - v to obtain detailed debugging information.
 
8th bugcheck {c0000005, adb2e448, 98927b 50, 0}
 
Probably caused by: mrxsmb20.sys (mrxsmb20! MRxSmb2Create + 24)
 
Follow-up: MachineOwner
---------
 
0: kd >! analyze - v
*******************************************************************************
*                                                                             *
* Bugcheck analysis *.
*                                                                             *
*******************************************************************************
 
KERNEL_MODE_EXCEPTION_NOT_HANDLED (8th)
It is a very common bugcheck.  Usually the PIN address of exception
the driver/function that caused the problem.  Always note this address
and the date of the picture link / driver that contains this address.
Some common problems are the exception code 0 x 80000003.  This means a hard
coded breakpoint or assertion was hit, but this system has been started
/ /NODEBUG.  It is not supposed to happen as developers should never have
breakpoints coded hard in retail code, but...
In this case, make sure a debugger must be connected and the
system startup/DEBUG.  This will we will see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, the unhandled exception code
Arg2: adb2e448, the address that the exception occurred at
Arg3: 98927b 50, frame trap
Arg4: 00000000
 
Debugging information:
------------------
 
 
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - the instruction at 0 x % lx 08 referenced memory at 0 x % 08 lx. The memory could not be %s.
 
FAULTING_IP:
Mrxsmb20! MRxSmb2Create + 24
adb2e448 8b898c000000 mov ecx, dword ptr [ECX 8Ch]
 
TRAP_FRAME: 98927 b 50-(.trap 0xffffffff98927b50)
ErrCode = 00000000
EAX = 8788c 008 ebx = 8789ad48 ecx = 00000000 edx = 9894b4cc esi = 8788c edi 008 = 98927c 28
EIP = adb2e448 esp = 98927bc4 ebp = 98927c0c iopl = 0 nv up ei pl nz na po nc
CS = 0008 ss = 0010 ds = 0023're = 0023 fs = 0030 gs = 0000 efl = 00010202
Mrxsmb20! MRxSmb2Create + 0 x 24:
adb2e448 8b898c000000 mov ecx, dword ptr [ECX 8Ch] ds:0023:0000008 c is?
Reset the default scope
 
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
 
BUGCHECK_STR: 0X8E
 
Nom_processus: svchost.exe
 
CURRENT_IRQL: 0
 
ANALYSIS_VERSION: 6.3.9600.17336 (debuggers (dbg). 150226-1500) amd64fre
 
LAST_CONTROL_TRANSFER: from 82ec2317 to 82eecc4c
 
STACK_TEXT:
989276c 4 82ec2317 0000008e c0000005 adb2e448 nt! KeBugCheckEx + 0x1e
98927ae0 82e4b9e6 98927afc 00000000 98927b 50 nt! KiDispatchException + 0x1ac
98927b 48 82e4b99a 98927c0c adb2e448 badb0d00 nt! CommonDispatchException + 0x4a
98927b 64 8322dba9 98927c 04 82e95cd7 87fab3fc nt! Kei386EoiHelper + 0 x 192
98927c0c adad4cc8 8788c 008 9894b4cc 98927c 34 hal! KfLowerIrql + 0x61
98927c1c 82e8d05a 8788c 008 00000000 ffffffff mrxsmb! SmbpShellCreateWithNewStack + 0x19
98927c1c 82e8d151 8788c 008 00000000 ffffffff nt! KiSwapKernelStackAndExit + 0x15a
9894b4dc 82e96d6f 8788c 008 adad4caf 98928000 nt! KiSwitchKernelStackAndCallout + 0 x 31
9894b 550 82e34f2d adad4caf 8788 c 008 00000000 nt! KeExpandKernelStackAndCalloutEx + 0x29d
9894b 570 adad4c9e adad4caf 8788 c 008 00003000 nt! KeExpandKernelStackAndCallout + 0x18
9894b 588 9142ab62 8788c 008 8788c 098 8788c 008 mrxsmb! SmbShellCreate + 0x3e
9894b 678 913b267e 8788c 008 008 CSC 8788c c1014a80! CscCreate + 0 x 1503
9894b6a4 913b1d5f 0088c 008 000b5df8 c1014a80 rdbss! RxCollapseOrCreateSrvOpen + 0x49c
9894b73c 913b312b 8788c 008 880b5df8 9894b75c rdbss! RxCreateFromNetRoot + 0 x 469
9894b 774 91396f02 880b5df8 00000000 09ae33f4 rdbss! RxCommonCreate + 0x2c9
9894b7fc 913aedd7 880b5df8 880495d a 913, 8240 8 rdbss! RxFsdCommonDispatch + 0 x 646
9894b82c adae0294 87979968 000b5df8 880b5eb0 rdbss! RxFsdDispatch + 0x1ab
9894b 848 82e44169 010b5df8 87979968 880b5ed4 mrxsmb! MRxSmbFsdDispatch + 0x9a
9894b 860 8c60678f 87ea4e80 00000103 880495d 8 nt! IofCallDriver + 0 x 63
9894b87c 8c605be8 87ea4e80 c0000016 880b5eb0 mup! MupiCallUncProvider + 0 x 110
9894b 894 8c60602d 87ea4e80 14f4f8dc 00000000 mup! MupStateMachine + 0xbe
9894b8e0 82e44169 8570df08 880b5df8 880b5df8 mup! MupCreate + 0x118
9894b8f8 8bf9c20c 880b5df8 00000000 880b5ed4 nt! IofCallDriver + 0 x 63
9894b91c 8bfaf8c9 9894b93c 8570dd68 00000000 fltmgr! FltpLegacyProcessingAfterPreCallbacksCompleted + 0x2aa
9894b 968 82e44169 8570dd68 838 88049634 fltmgr 8570d! FltpCreate + 0x2db
9894b 980 83058167 b3d14477 9894bb30 00000000 nt! IofCallDriver + 0 x 63
9894ba60 830375ee 8570df08 856c09c8 857a1af8 nt! IopParseDevice + 0xf08
9894badc 83047add 9894bb30 00000000 00000040 nt! ObpLookupObjectName + 0 x 510
9894bb38 8303e4cb 00cff054 856c09c8 872b9c01 nt! ObOpenObjectByName + 0 x 165
9894bbb4 00cff12c 83062034 00cff054 00100000 nt! IopCreateFile + 0 x 673
9894bc00 82e4ae06 00cff12c 00cff054 00100000 nt! NtCreateFile + 0 x 34
9894bc00 77366bf4 00cff12c 00cff054 00100000 nt! KiSystemServicePostCall
WARNING: Frame IP not in any known module. Sequence of images may be wrong.
00000000 00000000 00000000 00000000 0x77366bf4 00cff0b8
 
 
STACK_COMMAND: kb
 
FOLLOWUP_IP:
Mrxsmb20! MRxSmb2Create + 24
adb2e448 8b898c000000 mov ecx, dword ptr [ECX 8Ch]
 
SYMBOL_STACK_INDEX: 0
 
SYMBOL_NAME: mrxsmb20! MRxSmb2Create + 24
 
FOLLOWUP_NAME: MachineOwner
 
MODULE_NAME: mrxsmb20
 
Nom_image: mrxsmb20.sys
 
DEBUG_FLR_IMAGE_TIMESTAMP: 560D 6064
 
FAILURE_BUCKET_ID: 0x8E_mrxsmb20! MRxSmb2Create + 24
 
BUCKET_ID: 0x8E_mrxsmb20! MRxSmb2Create + 24
 
ANALYSIS_SOURCE: KM
 
FAILURE_ID_HASH_STRING: km:0x8e_mrxsmb20! mrxsmb2create + 24
 
FAILURE_ID_HASH: {3cb5288c-eaf4-5f2c-433f-98f2d2dddfb5}
 
Follow-up: MachineOwner
---------
 
0: kd > lmvm mrxsmb20
start end module name
adb29000 adb45000 mrxsmb20 (PDB symbols) c:\windows\symbol_cache\mrxsmb20.pdb\3B5048C6F22F447AB4DC7A8F41F927BA2\mrxsmb20.pdb
Loaded symbol image file: mrxsmb20.sys
Image path: \SystemRoot\system32\DRIVERS\mrxsmb20.sys
Image name: mrxsmb20.sys
Timestamp: Thu Oct 01 09:33:40 2015 (560D) 6064
CheckSum: 0001EEE9
ImageSize: 0001C 000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)
*

Tags: Windows

Similar Questions

  • After I downloaded beta Security Essentials, my computer say suddenly that he was not a genuine copy of Windows running and locked up.

    original title: the customer service is horrible

    After I downloaded beta Security Essentials, my computer say suddenly that he was not a genuine copy of Windows running and locked up.

    I called last night and got a foreign person has attempted to resolve the issues and could not, so he told me that I had to call back after 06:00 to speak to someone in the United States.
    So I called back today at 06:00 and got one of those who are running around things voice control that didn't fix my problem at all. After much effort, I got a live person. Again, it was a foreign person (why make me wait all night and get up early to call?!?!)
    This woman told me to restart. I told her that I had rebooted about 10 times since the day before and each time he took forever to load back up the box that tells me that I need to activate windows. She has reiterated, "I ask you to restart." I knew he wouldn't do ANYTHING, but I did and after the session it forever (as I told him it would be) she told me that I had to remind once I got up the box again. I called after that I got the box AND HAD TO START OVER again ONCE with someone new. Of course, she was trying to pass me to someone else.
    Of course, after all this trouble, no MS sells a product key for Vista, it is abandoned. So I need to go buy Windows 7 and she told me that I'll LOSE EVERYTHING when I install it - all my documents and family photos are gone forever. Why not take my money and sell me a product key instead of let me in trouble?
    The worst ever undertaken. Of course, MS doesn't care because they have a monopoly.

    You should not need to buy anything except the recovery disc for your machine (if the built-in recovery partition does not work), unless you really need Win 7 for some reason any.

    That being said - the COA sticker on your machine is readable? If Yes, then you should have no problem with a Windows 7 upgrade version - but you will need to either use activation by phone, or installation methods described here...

    http://www.winsupersite.com/article/Windows-7/clean-install-Windows-7-with-upgrade-media

  • Help, please! I lost a file with all my notes said corrupt says suddenly and ruined.is it is possible to recover to its previous state intact?

    Help, please! I lost a file with all my notes said corrupt says suddenly and ruined.is it is possible to recover to its previous state intact?

    Hello

    Can you give us more information so that we can help you?

    That is the app do you use?  What is the desktop Reader on your Windows or Mac desktop or the mobile Reader on a Tablet iPad/iPhone or Android?

    What is the version of the operation on your computer/device system?

  • My client vsphere VM say suddenly that my hosts are connected!

    I did nothing, but suddenly disconnected says first and then the others follow! -ESX 4

    So, if you create a second for redundancy and see if the problem is back?

    MCP, VCP

  • CS2 says suddenly that I have to activate?

    Error - 9 presented at the bottom of the activation screen.  Phone and online does not work.  I had this software on the same PC for years and suddenly he wants to regiaster again?  I have I guess.  But not if the system does not allow it to register!  Now I'm dead in the water. Thank you Adobe.

    Error: Unavailable activation server | CS2 or Acrobat 7, older products

    Mylenium

  • How to increase the size of the field say product_code from 40 to 300?

    Hello

    I have a form, I need to increase the size of the field from 40 to 300?

    am new to forms, can one please give me detailed steps on how to do it?

    Thanks in advance.

    + > now my doubt is how to know that this field is my col2 in db and how to change it? +
    After opening form Form Builder, select the field in the form, press F4 for its properties, see the value of the Name property of the column. After that, go to the maximum length property and change to 250

  • Search in the comment field in iTunes no longer works

    I use the latest version of iTunes. For each song, I wrote different types of information in the comment field. Suddenly the search function does not include the comment field more. It's very frustrating. I searched this forum and searched through Google. Unfortunately, without success, none of the tips that I found can solve the problem. Hoping to find some help here.

    The deposited comment is actually displayed in the playlist when you're looking? Some fields do not appear in a search if they are not displayed.

  • Contact field to concatenate when loading? Solutions?

    I need a certain area to concatenate when loading (added value); However, the logic of download is limited to "if white update" or "update otherwise blank", do not leave a lot of logic here:

    Displaying image.png

    If I could write the value in another field, say a temporary, I can't concatenate using the updated rules because the logic it is limited, as well. The only nearby option is "add value." However, that is set to a static value (hardcoded in the update rule), not the value of a field. The other options are "crush of...» » ; that did not help either. I need to manipulate both values to make one with a delimiter.

    Inline image 1

    What are my options here, from rules of game/Dedup or manipulation of strings using cloud connectors? I'm trying to pull this using Eloqua and not a solution custom outside of eloqua.

    If someone has been down this road before?

    If the download of two fields, has a specially designed for this called cloud connector 'string concatenate' rather than 'chain Manipulator. " To the latter I have described above, which works like a charm.

    It would be nice to have some logic to download more than that, even if (as mentioned in my first sentence in the original post)

  • How to create a White option in the fields of web applications

    Hello.

    We have created a very simple Web that lists all of our teachers. One of the fields that we have created is a list of the States drop-down menu. Is it possible in the list to create an empty field - say that there is no State of that person? Right now it shows no.

    Here's an example of how it manifests online:

    Names of persons

    Goiânia/GO, No 74810

    Brazil

    Here is a screenshot of the field that I talk about in the web application. What can put in there next to nothing, so nothing shows in this field in line if there is no State for this person.

    00000059.png

    Thanks in advance.

    Hello pilatesdesigner,

    Come and play with it, trying not to use jQuery, I found a solution.  For the first option in your drop down menu instead of just put:

    &nsbp;
    

    This is the space of break no HTML. This will appear in the drop down within the web application, and is then printed as a space.

    Not really the most elegant work around is. But it works.

    Hope this helps,

    Chad Smith | http://bcgurus.com/Business-Catalyst-Templates for only $7

  • How to set a field EO based on several fields of VO with validation?

    I'm thinking bad to the top of the best way to design the following requirement:

    EO has a field in a table - combination_id (which is a foreign key to a separate table, say its called xxx_combinations)
    VO emerged from EO, but get the combination_id on xxx_combinations and retrieves the 7 fields that make up the combination.
    Screen has 7 individual fields, say Field1 through field7.
    The user enters the values for all the fields of 7.

    That has to happen is the 7 fields must be validated to ensure that they are a combination eligible (logic quite complicated to determine which combinations are allowed/denied - this is done by calling pl/sql). Assuming that the combination is valid, the 7 fields are searched in xxx_combinations, to return to the combination_id (and if the combination does not exist, it is created). This combination_id should go to the area of occurrence and saved.

    I'm not really sure how to do this. At what level I would validate 7 fields and get the real combination_id to go back and update the EO? It almost seems that I need the OS to have all 7 fields in it, not just the combination_id.

    Hello

    Finally call the Pl/sql procedure to validate the combination of the code of the validateMethod id & validate each field individually from the setattribute method. I think that this will be the best approach for your condition.

    Kind regards
    GYAN

  • ADF - number field - 2-digit display

    Hello
    We use Jdeveloper 11.1.1.3

    We have a number currently displays the field (say, price) which is like 10.2, 10.23 etc.
    We need them all in 2 digits. Generally, in the select, we add to_char(price,'999,990.00') price.
    He takes care of it.

    But here in the EO/VO the attribute is a number, and so when we do the foregoing in VO query, it gives an error.

    Is there a way in "field properties", we can define this 2-digit?

    Thank you

    In addition to the above, you can make the required adjustment to the level of the page as follows:


    ID = "plam1" >


    model = ' #{bindings. " Forumid.format}.
    minFractionDigits = "2" / >

    Thank you
    Nini

  • length of field compared to other field

    Hi all
    I have a strange requirement. Please let me know its possible or impossible.
    I have two fields. both are number fields say Field1 and Field2.
    The length of field2 should set according to number entered by the user in the Field1!
    For example, a user enters 123456... (50 issues) in the Field1 then the length of field2 should be 50. the Field2 should not allow more than 50 numbers.
    as from the data entered to domaines1 wise to fix the length of field2.
    is it possible?

    If my requirement is not clear, so please let me know...

    Thank you...

    Hello

    You cannot change the MAX_LENGTH to a runtime of text element property. Instead, you can write code in the trigger WHEN_VALIDATE_ITEM of the second element and check if the length of the content is larger than the first number entered elements.

    IF LENGTH(:) > : THEN
       MESSAGE('');
       RAISE FORM_TRIGGER_FAILURE;
    END IF;
    

    Kind regards

    Manu.

    If my answer or the answer to another person has been useful or appropriate, please mark accordingly

  • Problem in creating a default calculated values for fields

    Hi all
    We have a requirement in the field of product put in place where there are 5 fields say A - E, in which the values of the 3 fields depend on each other as following rule
    -User between the values of the fields A and B
    -Now the values of C, D and E are calculated as follows:
    -C = A + B
    E = C * D
    We tried to apply it to help provide the calculation of the default values, but it does not work.
    Is it because these values are calculated only when a new record is created and the values of C and D are not ready at this time here.
    Please help us
    Thanks in advance

    Hi, if the values of the dependent fields are entered by the user, then the calculation for calculated field can happen only "Save" on condition that you checked the box "Default Post" in the definition of calculated field. There is no functionality available as real-time calculation and when the user has entered the changes on the dependent fields

    -John CRMIT

  • Treatment - how to drop a field in different areas

    Hello

    I have a report page where there are several input fields. When the user clicks on the button 'search', it returns a list with relevant data from the db. The results list appears on the same page.

    One of the fields, say the colors, which may include more than one color that are separated by commas. Colors, Color1, Color2, couleur3 are defined on the same page. Color is used as an input text field and others are hidden text fields. The goal is to use the colors as an input and reactualize Color1, Color2, couleur3 according to data stored in the field of color when the user clicks the search button. Color1, Color2, couleur3 will be used in the SQL to get the list of results.

    I'm breaking the scope of colors into pieces using PL/SQL in a 'process' on the processing of the page. PLSQL-part get no error messages, but it do not work either.

    I wonder if this is the right way for her?

    Or how can I do?

    Any ideas appreciated!

    Sedso

    Hey Sedso

    Have you tried APEX_UTIL. Function STRING_TO_TABLE?

    http://www.utoug.org/i/doc/api073.htm

    --
    Paulo Vale
    http://Apex-notes.blogspot.com

  • Boot Camp 6 worm update fails

    I recently updated my MBP 9.1 to El Capitan. So far so good!

    Now I would like to move my Boot Camp Windows 10 8.1 Windows partition, so in preparation for this, I decided to update Windows in Boot Camp is supported by the software. Here is the page from Apple on the preparation and installation of updates.

    He keeps the default.  After almost a minute of "enumeration" messages and screen glitches in short the first clue that something is wrong is that this 'Windows Installer' error message appears.

    By clicking on "Close the program" seems to do nothing, but then all of a sudden this error message is displayed.

    What is disconcerting, it is that the above path actually exists, and the BootCamp.MSI file is present. I don't know if this is relevant, but when I looked BootCamp.MSIs properties > Details tab the comments field says "Boot Camp 5.1.5621", which does not correspond to "5.0.5033" in the path. (To also note that when I checked the language setting in the registry entry for the Boot Camp a key Services is "DisplayVersion" with a value of 5.1.5621. Hmm)

    Search the interwebs for key words in the above error message gives some pretty old forum discussions. Solutions boil down to ensure that no other video drivers or drivers mirror must exist (often cited examples were GotomyPC, VNC, etc.), or as the language setting of the Boot Camp may be wrong in the registry. It was easy to check and to exclude. The video driver thing, I went by uninstalling all programs on my system that could somehow use a mirror driver. Indeed, I have the Air Display installed, so I thought that its uninstallation and removal of Device Manager solves the problem.

    Nope.  Got the same errors.

    This is therefore the following message that appears after you click Cancel in the message above.

    It seems the background, but I don't know how to react to it. I click on the OK button, the following message appears.

    Closing that generates the screen of Boot Camp update saying that the installation was successful.  Fake!

    Any suggestions?

    Install Windows 7 and previous versions on your Mac with Boot Camp - Apple Support, drivers for your year/model of Mac to a USB Flash drive. .5621 seems the correct version. Go to Windows and run setup.exe and check if your update is complete. If Windows was installed with the correct drivers for BC, it should already be in place.

    If you have already downloaded deja.5621, check Bootcamp.xml for the version of your Mac-specific Bootcamp.msi. I will also check in my BC drivers deposit.

Maybe you are looking for

  • Pro iPad battery problem

    I bought an iPad pro 128 gig and the battery life doesn't help. After a full charge and it is 100%, then without removing fees then watching youtube videos and the battery loses power and it's always on the charge. It breaks down within 2 hours of 10

  • post a query

    Hello I'm new to labview, I compile the demodulation am PCI 5640 example but it can't.tell me a few suggestions n solutions

  • ThinkPad T410

    I anticipate get me the new ThinkPad T410, but I need to know one thing. The integrated video graphics card is the following; Intel Graphics Media Accelerator 5700MHD - AMT What is the max resolution that can be set to when the laptop is connected to

  • SE connect/disconnect Internet using a command prompt

    original title: to connect/disconnect Internet Is it possible to disconnect & reconnect my internet connection of cable to a command line in Windows XP?

  • Fuze will shut off randomly

    Fuze will shut off randomly, then it takes a few seconds to turn on. After that I see the symbol of welcome, it says media refreshing and it takes about 5 minutes to complete. It is very annoying! Please a little help.