What's new
  • Please do not post any links until you have 3 posts as they will automatically be rejected to prevent SPAM. Many words are also blocked due to being used in SPAM Messages. Thanks!

anyone understands this dump file?

CTA

Well-known member
Joined
Jul 30, 2008
Messages
2,286
Location
langley (vancouver) bc canada
i am trying to figure out why i had weird crashes... i had crash to blue... 1 time yesterday... 3 times today... then i try to diagnosis..

here is dmp file from windows sdk... and i have no resource to access to somewhere

Code:
Loading User Symbols
PEB is paged out (Peb.Ldr = 00007ff5`ffff7018).  Type ".hh dbgerr001" for details
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff801518cdfb8, ffffd000331fa0f0, 0}

*** ERROR: Module load completed but symbols could not be loaded for networx.sys
Page 117b36 not present in the dump file. Type ".hh dbgerr004" for details
Probably caused by : NETIO.SYS ( NETIO!StreamInvokeCalloutAndNormalizeAction+60 )

Followup: MachineOwner
---------

4: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff801518cdfb8, Address of the instruction which caused the bugcheck
Arg3: ffffd000331fa0f0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------

Page 117b36 not present in the dump file. Type ".hh dbgerr004" for details

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.

FAULTING_IP: 
NETIO!StreamInvokeCalloutAndNormalizeAction+60
fffff801`518cdfb8 488b7008        mov     rsi,qword ptr [rax+8]

CONTEXT:  ffffd000331fa0f0 -- (.cxr 0xffffd000331fa0f0;r)
rax=0000000000000000 rbx=ffffd000331faca8 rcx=ffffd000331fab70
rdx=0000000000000000 rsi=ffffd000331fb008 rdi=ffffe0015ddbfbe0
rip=fffff801518cdfb8 rsp=ffffd000331fab10 rbp=ffffd000331fab99
 r8=0000000000000040  r9=0000000000000000 r10=0000000000000000
r11=ffffe0015ddbfbe0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000524 r15=ffffe0015da7ba70
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
NETIO!StreamInvokeCalloutAndNormalizeAction+0x60:
fffff801`518cdfb8 488b7008        mov     rsi,qword ptr [rax+8] ds:002b:00000000`00000008=????????????????
Last set context:
rax=0000000000000000 rbx=ffffd000331faca8 rcx=ffffd000331fab70
rdx=0000000000000000 rsi=ffffd000331fb008 rdi=ffffe0015ddbfbe0
rip=fffff801518cdfb8 rsp=ffffd000331fab10 rbp=ffffd000331fab99
 r8=0000000000000040  r9=0000000000000000 r10=0000000000000000
r11=ffffe0015ddbfbe0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000524 r15=ffffe0015da7ba70
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
NETIO!StreamInvokeCalloutAndNormalizeAction+0x60:
fffff801`518cdfb8 488b7008        mov     rsi,qword ptr [rax+8] ds:002b:00000000`00000008=????????????????
Resetting default scope

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  networx.exe

CURRENT_IRQL:  0

ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre

LAST_CONTROL_TRANSFER:  from fffff801518cde91 to fffff801518cdfb8

STACK_TEXT:  
ffffd000`331fab10 fffff801`518cde91 : ffffe001`5da7ba70 ffffe001`5ddbfbe0 00000000`00000000 ffffd000`331fb008 : NETIO!StreamInvokeCalloutAndNormalizeAction+0x60
ffffd000`331fabf0 fffff801`518cb555 : ffffe001`587a0014 fffff801`52983210 ffffe001`00000002 ffffe001`5db5f7e0 : NETIO!StreamProcessCallout+0x711
ffffd000`331fad30 fffff801`518ca434 : ffffd000`331f0014 ffffe001`5db5f7e0 ffffe001`5869e430 ffffd000`331fb550 : NETIO!ProcessCallout+0x685
ffffd000`331faea0 fffff801`518c8f5e : a0265e87`72879e1a ffffd000`331fb190 00000000`00000000 00000000`00000001 : NETIO!ArbitrateAndEnforce+0x494
ffffd000`331fb090 fffff801`5190d574 : 00000000`00000000 fffff801`5190d6ac ffffe001`5b00db40 fffff801`518c1e25 : NETIO!KfdClassify+0x32e
ffffd000`331fb500 fffff801`5190d021 : 00000000`00000000 fffff801`5190d100 ffffd000`331fb6b8 fffff801`5133aad0 : NETIO!StreamInternalClassify+0x110
ffffd000`331fb630 fffff801`5190a205 : 00000000`00000014 ffffe001`5d88ebe0 00000000`00000000 ffffe001`5d1f2b80 : NETIO!StreamInject+0x1e9
ffffd000`331fb700 fffff801`5198661d : ffffe001`5d88ebe0 00000000`00000109 00000000`00000000 ffffe001`00000011 : NETIO!FwppStreamInject+0x135
ffffd000`331fb790 fffff801`52985ebd : ffffe001`5799b010 ffffe001`5799b158 ffffe001`5e799e40 3fffffff`00000000 : fwpkclnt!FwpsStreamInjectAsync0+0xfd
ffffd000`331fb7f0 fffff801`529876f5 : ffffe001`5d1f2b80 ffffe001`5e0eae10 ffffd000`331fb941 ffffe001`5e70ff20 : networx+0x5ebd
ffffd000`331fb880 fffff801`3803f72b : 00000000`00000001 ffffd000`331fb941 ffffe001`5e70ff20 fffff680`00036678 : networx+0x76f5
ffffd000`331fb8c0 fffff801`3803e780 : ffffe001`5c694240 ffffe001`5e0eae10 ffffe001`5e70ff20 ffffe001`5c694240 : nt!IopSynchronousServiceTail+0x16b
ffffd000`331fb990 fffff801`37d76263 : 00000000`00000000 00000000`0000042c 00000000`00000000 00000000`06ccfe00 : nt!NtWriteFile+0x680
ffffd000`331fba90 00007ffe`e4ab35ca : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`06ccfd38 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`e4ab35ca


FOLLOWUP_IP:
NETIO!StreamInvokeCalloutAndNormalizeAction+60
fffff801`518cdfb8 488b7008        mov     rsi,qword ptr [rax+8]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  NETIO!StreamInvokeCalloutAndNormalizeAction+60

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NETIO

IMAGE_NAME:  NETIO.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  559f3890

STACK_COMMAND:  .cxr 0xffffd000331fa0f0 ; kb

BUCKET_ID_FUNC_OFFSET:  60

FAILURE_BUCKET_ID:  0x3B_NETIO!StreamInvokeCalloutAndNormalizeAction

BUCKET_ID:  0x3B_NETIO!StreamInvokeCalloutAndNormalizeAction

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0x3b_netio!streaminvokecalloutandnormalizeaction

FAILURE_ID_HASH:  {5c8d1e60-d80c-cb2d-a65a-8d02e5eeeffd}

Followup: MachineOwner
---------

so what is " NETIO!StreamInvokeCalloutAndNormalizeAction+60" exactly?

is it because of tcp optimizer, networx or bittorrent?


thanks
 

ShinraCorp

Well-known member
Joined
Dec 31, 2012
Messages
683
Location
St-Augustin-de-Desmaures
Website
www.trishroom.com
Seeing as how it crashed with Networx, it's clearly something related to it, now what caused it to crash and do a blue screen specifically I do not know.

NETIO!StreamInvokeCalloutAndNormalizeAction+60

Judging by this variable it looks like some sort of setting in the program that had to be configured to 60 something in order for it to work.

Not sure if you can go and find a setting that has 60 or near 60 in it. Perhaps play around with that and see if it helps.
 

JD

Moderator
Staff member
Joined
Jul 16, 2007
Messages
8,907
Location
Toronto, ON
Are you using NVIDIA network drivers? If so, remove the Network Access Manager piece.

If not, let us know what network adapter this is. Likely somehow related to network drivers/software.
 

CTA

Well-known member
Joined
Jul 30, 2008
Messages
2,286
Location
langley (vancouver) bc canada
shina, i am in your same boat... not sure why and how to fix it...

jd, no i used intel lan (GIGABYTE - Motherboard - Socket 1150 - GA-Z87X-OC Force (rev. 1.x))

Wi-Fi 802.11 a/b/g/n, supporting 2.4/5 GHz Dual-Band - disabled
Bluetooth 4.0, 3.0+HS, 2.1+EDR - disabled
2 x Intel® GbE LAN chips (10/100/1000 Mbit) - enabled
Support for Teaming - enabled... configure as balancing (did i do this wrong?)
 

KaptCrunch

Well-known member
Joined
Feb 23, 2008
Messages
4,028
Location
Ontario
may be IP remote for 60Hz screen, I think

check all network services running in task manager


networx.exe is AV / malware sniffer update your AV software
 
Last edited:

JD

Moderator
Staff member
Joined
Jul 16, 2007
Messages
8,907
Location
Toronto, ON
Start by disabling teaming and removing any Gigabyte network software.

I'm assuming your using the latest version of NetWorx?
 

Latest posts

Twitter

Top