I have a XP machine that was recently updated to SP2 and now occaisionally when an external firewire drive is removed from the system the machine will crash. They are Maxtor drives and not always the same drive that crashes the machine. I have reloaded the drivers and the Maxtor software with no luck. Here is the dump analysis:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: f7669515, The address that the exception occurred at
Arg3: f78d6c00, Exception Record Address
Arg4: f78d68fc, Context Record Address
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
FAULTING_IP:
1394BUS!Bus1394IOCtl+737
f7669515 f3a5 rep movsd
EXCEPTION_RECORD: f78d6c00 -- (.exr fffffffff78d6c00)
ExceptionAddress: f7669515 (1394BUS!Bus1394IOCtl+0x00000737)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000000
Attempt to read from address 00000000
CONTEXT: f78d68fc -- (.cxr fffffffff78d68fc)
eax=00000018 ebx=88d4fea8 ecx=00000006 edx=886cd200 esi=00000000 edi=899f9700
eip=f7669515 esp=f78d6cc8 ebp=f78d6ce4 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
1394BUS!Bus1394IOCtl+0x737:
f7669515 f3a5 rep movsd ds:00000000=???????? es:899f9700=306f0404
Resetting default scope
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
READ_ADDRESS: 00000000
BUGCHECK_STR: 0x7E
DEFAULT_BUCKET_ID: NULL_DEREFERENCE
LAST_CONTROL_TRANSFER: from 804e37f7 to f7669515
STACK_TEXT:
f78d6ce4 804e37f7 8ad81008 88210308 88210308 1394BUS!Bus1394IOCtl+0x737
f78d6cf4 b595c0c3 899f9728 899f95c8 00040001 nt!IopfCallDriver+0x31
WARNING: Stack unwind information not available. Following frames may be wrong.
f78d6d14 b595c20e 899f95c8 88210308 88d4fea8 mxofwfp+0x10c3
f78d6d34 b595cb6f 00000000 88210308 88bc0ac0 mxofwfp+0x120e
00000000 00000000 00000000 00000000 00000000 mxofwfp+0x1b6f
STACK_COMMAND: .bugcheck ; kb
FOLLOWUP_IP:
1394BUS!Bus1394IOCtl+737
f7669515 f3a5 rep movsd
FAULTING_SOURCE_CODE:
SYMBOL_STACK_INDEX: 0
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: 1394BUS!Bus1394IOCtl+737
MODULE_NAME: 1394BUS
IMAGE_NAME: 1394BUS.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 41107dbb
FAILURE_BUCKET_ID: 0x7E_1394BUS!Bus1394IOCtl+737
BUCKET_ID: 0x7E_1394BUS!Bus1394IOCtl+737
Followup: MachineOwner
---------
Any help would be greatly appreciated.
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: f7669515, The address that the exception occurred at
Arg3: f78d6c00, Exception Record Address
Arg4: f78d68fc, Context Record Address
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
FAULTING_IP:
1394BUS!Bus1394IOCtl+737
f7669515 f3a5 rep movsd
EXCEPTION_RECORD: f78d6c00 -- (.exr fffffffff78d6c00)
ExceptionAddress: f7669515 (1394BUS!Bus1394IOCtl+0x00000737)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000000
Attempt to read from address 00000000
CONTEXT: f78d68fc -- (.cxr fffffffff78d68fc)
eax=00000018 ebx=88d4fea8 ecx=00000006 edx=886cd200 esi=00000000 edi=899f9700
eip=f7669515 esp=f78d6cc8 ebp=f78d6ce4 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
1394BUS!Bus1394IOCtl+0x737:
f7669515 f3a5 rep movsd ds:00000000=???????? es:899f9700=306f0404
Resetting default scope
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
READ_ADDRESS: 00000000
BUGCHECK_STR: 0x7E
DEFAULT_BUCKET_ID: NULL_DEREFERENCE
LAST_CONTROL_TRANSFER: from 804e37f7 to f7669515
STACK_TEXT:
f78d6ce4 804e37f7 8ad81008 88210308 88210308 1394BUS!Bus1394IOCtl+0x737
f78d6cf4 b595c0c3 899f9728 899f95c8 00040001 nt!IopfCallDriver+0x31
WARNING: Stack unwind information not available. Following frames may be wrong.
f78d6d14 b595c20e 899f95c8 88210308 88d4fea8 mxofwfp+0x10c3
f78d6d34 b595cb6f 00000000 88210308 88bc0ac0 mxofwfp+0x120e
00000000 00000000 00000000 00000000 00000000 mxofwfp+0x1b6f
STACK_COMMAND: .bugcheck ; kb
FOLLOWUP_IP:
1394BUS!Bus1394IOCtl+737
f7669515 f3a5 rep movsd
FAULTING_SOURCE_CODE:
SYMBOL_STACK_INDEX: 0
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: 1394BUS!Bus1394IOCtl+737
MODULE_NAME: 1394BUS
IMAGE_NAME: 1394BUS.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 41107dbb
FAILURE_BUCKET_ID: 0x7E_1394BUS!Bus1394IOCtl+737
BUCKET_ID: 0x7E_1394BUS!Bus1394IOCtl+737
Followup: MachineOwner
---------
Any help would be greatly appreciated.