#77 Blue Screen Crash During and True Image Installation

open
nobody
Ext2fsd (105)
5
2008-06-30
2008-06-30
Anonymous
No

During teh Acronis True Image Installation WindowsXP crashed with blue screen. As fast as able to extfsd was resposible for crash with a "IRQ_LESS_OR_EQUAL". After this XP wasn't able to boot - crashed every time - until i deinstalled ExtFsd.

Crash Dump 01 ist from the first Crash.
Crash Dump 02 ist from the later one.

Discussion

  • Nobody/Anonymous

    Logged In: NO

    Here the debug output from Windows Debugging Tools:

    Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
    Copyright (c) Microsoft Corporation. All rights reserved.

    Loading Dump File [C:\Dokumente und Einstellungen\ttobias\Desktop\Mini063008-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*C:\windows\symbols\*http://msdl.microsoft.com/download/symbols
    Executable search path is:
    Windows XP Kernel Version 2600 (Service Pack 2) MP (4 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_gdr.070227-2254
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
    Debug session time: Mon Jun 30 22:30:30.085 2008 (GMT+2)
    System Uptime: 0 days 0:13:35.080
    Loading Kernel Symbols
    .........................................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    ............
    Unable to load image Ext2Fsd.SYS, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for Ext2Fsd.SYS
    *** ERROR: Module load completed but symbols could not be loaded for Ext2Fsd.SYS
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 100000D1, {2c, 2, 1, aae83006}

    Unable to load image sptd.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for sptd.sys
    *** ERROR: Module load completed but symbols could not be loaded for sptd.sys
    Probably caused by : Ext2Fsd.SYS ( Ext2Fsd+2006 )

    Followup: MachineOwner
    ---------

    0: kd> !analyze -v
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high. This is usually
    caused by drivers using improper addresses.
    If kernel debugger is available get stack backtrace.
    Arguments:
    Arg1: 0000002c, memory referenced
    Arg2: 00000002, IRQL
    Arg3: 00000001, value 0 = read operation, 1 = write operation
    Arg4: aae83006, address which referenced memory

    Debugging Details:
    ------------------

    WRITE_ADDRESS: 0000002c

    CURRENT_IRQL: 2

    FAULTING_IP:
    Ext2Fsd+2006
    aae83006 09482c or dword ptr [eax+2Ch],ecx

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0xD1

    PROCESS_NAME: Idle

    LAST_CONTROL_TRANSFER: from ba908c70 to aae83006

    STACK_TEXT:
    WARNING: Stack unwind information not available. Following frames may be wrong.
    805502d4 ba908c70 80550304 ba908f54 8a7ebab8 Ext2Fsd+0x2006
    805502dc ba908f54 8a7ebab8 896d3e28 00000001 CLASSPNP!ClassCompleteRequest+0x11
    80550304 804f15b6 00000000 8a347858 8a3479f0 CLASSPNP!TransferPktComplete+0x180
    80550334 ba6938f8 8a81da88 8a347858 80550378 nt!IopfCompleteRequest+0xa2
    80550344 ba693436 8a59fcb8 00000001 00000000 SCSIPORT!SpCompleteRequest+0x5e
    80550378 ba6936f7 8a81da88 8a59fcb8 805503e7 SCSIPORT!SpProcessCompletedRequest+0x632
    805503e8 ba6b8d54 8a81da44 8a81d9d0 00000000 SCSIPORT!ScsiPortCompletionDpc+0x2b5
    80550428 805450bf 8a81da44 8a81d9d0 00000000 sptd+0x11d54
    80550450 80544fa4 00000000 0000000e 00000000 nt!KiRetireDpcList+0x61
    80550454 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x28

    STACK_COMMAND: kb

    FOLLOWUP_IP:
    Ext2Fsd+2006
    aae83006 09482c or dword ptr [eax+2Ch],ecx

    SYMBOL_STACK_INDEX: 0

    SYMBOL_NAME: Ext2Fsd+2006

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: Ext2Fsd

    IMAGE_NAME: Ext2Fsd.SYS

    DEBUG_FLR_IMAGE_TIMESTAMP: 4837a717

    FAILURE_BUCKET_ID: 0xD1_W_Ext2Fsd+2006

    BUCKET_ID: 0xD1_W_Ext2Fsd+2006

    Followup: MachineOwner
    ---------

     
  • Nobody/Anonymous

    Logged In: NO

    Crash-Dump 02
    Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
    Copyright (c) Microsoft Corporation. All rights reserved.

    Loading Dump File [C:\Dokumente und Einstellungen\ttobias\Desktop\Mini063008-02.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*C:\windows\symbols\*http://msdl.microsoft.com/download/symbols
    Executable search path is:
    Windows XP Kernel Version 2600 (Service Pack 2) MP (4 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_gdr.070227-2254
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
    Debug session time: Mon Jun 30 22:31:47.265 2008 (GMT+2)
    System Uptime: 0 days 0:00:49.250
    Loading Kernel Symbols
    .........................................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    ....
    Unable to load image Ext2Fsd.SYS, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for Ext2Fsd.SYS
    *** ERROR: Module load completed but symbols could not be loaded for Ext2Fsd.SYS
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 100000D1, {2c, 2, 1, ae1f2006}

    Unable to load image sptd.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for sptd.sys
    *** ERROR: Module load completed but symbols could not be loaded for sptd.sys
    Probably caused by : Ext2Fsd.SYS ( Ext2Fsd+2006 )

    Followup: MachineOwner
    ---------

    1: kd> !analyze -v
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high. This is usually
    caused by drivers using improper addresses.
    If kernel debugger is available get stack backtrace.
    Arguments:
    Arg1: 0000002c, memory referenced
    Arg2: 00000002, IRQL
    Arg3: 00000001, value 0 = read operation, 1 = write operation
    Arg4: ae1f2006, address which referenced memory

    Debugging Details:
    ------------------

    WRITE_ADDRESS: 0000002c

    CURRENT_IRQL: 2

    FAULTING_IP:
    Ext2Fsd+2006
    ae1f2006 09482c or dword ptr [eax+2Ch],ecx

    CUSTOMER_CRASH_COUNT: 2

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0xD1

    PROCESS_NAME: Idle

    LAST_CONTROL_TRANSFER: from ba908c70 to ae1f2006

    STACK_TEXT:
    WARNING: Stack unwind information not available. Following frames may be wrong.
    bacd3bd4 ba908c70 bacd3c04 ba908f54 8a768ab8 Ext2Fsd+0x2006
    bacd3bdc ba908f54 8a768ab8 896bec10 00000001 CLASSPNP!ClassCompleteRequest+0x11
    bacd3c04 804f15b6 00000000 8a366238 8a3b06e8 CLASSPNP!TransferPktComplete+0x180
    bacd3c34 ba6938f8 8a78aaf0 8a366238 bacd3c78 nt!IopfCompleteRequest+0xa2
    bacd3c44 ba693436 8a336d48 00000001 00000000 SCSIPORT!SpCompleteRequest+0x5e
    bacd3c78 ba6936f7 8a78aaf0 8a336d48 bacd3ce7 SCSIPORT!SpProcessCompletedRequest+0x632
    bacd3ce8 ba6b8d54 8a78aaac 8a78aa38 00000000 SCSIPORT!ScsiPortCompletionDpc+0x2b5
    bacd3d28 805450bf 8a78aaac 8a78aa38 00000000 sptd+0x11d54
    bacd3d50 80544fa4 00000000 0000000e 00000000 nt!KiRetireDpcList+0x61
    bacd3d54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x28

    STACK_COMMAND: kb

    FOLLOWUP_IP:
    Ext2Fsd+2006
    ae1f2006 09482c or dword ptr [eax+2Ch],ecx

    SYMBOL_STACK_INDEX: 0

    SYMBOL_NAME: Ext2Fsd+2006

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: Ext2Fsd

    IMAGE_NAME: Ext2Fsd.SYS

    DEBUG_FLR_IMAGE_TIMESTAMP: 4837a717

    FAILURE_BUCKET_ID: 0xD1_W_Ext2Fsd+2006

    BUCKET_ID: 0xD1_W_Ext2Fsd+2006

    Followup: MachineOwner
    ---------

    1: kd> !analyze -v
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high. This is usually
    caused by drivers using improper addresses.
    If kernel debugger is available get stack backtrace.
    Arguments:
    Arg1: 0000002c, memory referenced
    Arg2: 00000002, IRQL
    Arg3: 00000001, value 0 = read operation, 1 = write operation
    Arg4: ae1f2006, address which referenced memory

    Debugging Details:
    ------------------

    WRITE_ADDRESS: 0000002c

    CURRENT_IRQL: 2

    FAULTING_IP:
    Ext2Fsd+2006
    ae1f2006 09482c or dword ptr [eax+2Ch],ecx

    CUSTOMER_CRASH_COUNT: 2

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0xD1

    PROCESS_NAME: Idle

    LAST_CONTROL_TRANSFER: from ba908c70 to ae1f2006

    STACK_TEXT:
    WARNING: Stack unwind information not available. Following frames may be wrong.
    bacd3bd4 ba908c70 bacd3c04 ba908f54 8a768ab8 Ext2Fsd+0x2006
    bacd3bdc ba908f54 8a768ab8 896bec10 00000001 CLASSPNP!ClassCompleteRequest+0x11
    bacd3c04 804f15b6 00000000 8a366238 8a3b06e8 CLASSPNP!TransferPktComplete+0x180
    bacd3c34 ba6938f8 8a78aaf0 8a366238 bacd3c78 nt!IopfCompleteRequest+0xa2
    bacd3c44 ba693436 8a336d48 00000001 00000000 SCSIPORT!SpCompleteRequest+0x5e
    bacd3c78 ba6936f7 8a78aaf0 8a336d48 bacd3ce7 SCSIPORT!SpProcessCompletedRequest+0x632
    bacd3ce8 ba6b8d54 8a78aaac 8a78aa38 00000000 SCSIPORT!ScsiPortCompletionDpc+0x2b5
    bacd3d28 805450bf 8a78aaac 8a78aa38 00000000 sptd+0x11d54
    bacd3d50 80544fa4 00000000 0000000e 00000000 nt!KiRetireDpcList+0x61
    bacd3d54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x28

    STACK_COMMAND: kb

    FOLLOWUP_IP:
    Ext2Fsd+2006
    ae1f2006 09482c or dword ptr [eax+2Ch],ecx

    SYMBOL_STACK_INDEX: 0

    SYMBOL_NAME: Ext2Fsd+2006

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: Ext2Fsd

    IMAGE_NAME: Ext2Fsd.SYS

    DEBUG_FLR_IMAGE_TIMESTAMP: 4837a717

    FAILURE_BUCKET_ID: 0xD1_W_Ext2Fsd+2006

    BUCKET_ID: 0xD1_W_Ext2Fsd+2006

    Followup: MachineOwner
    ---------

     
  • Axel Maier

    Axel Maier - 2008-07-15

    Logged In: YES
    user_id=832951
    Originator: NO

    I get exactly the same Blue Screen message and it also happens exactly the same way on my Windows XP Pro!

    After several eMails to and from the Acronis support who write back to me in the end:
    "The driver ext2fsd.sys is not signed by Microsoft and we are not sure if it was tested on compatibility with Windows."

     

Log in to post a comment.