rdbss.sys !!!! whats the deal !!

Toggle sidebar Toggle sidebar
M

MrGenie

Member
Jul 30, 2007
50
0
0
hi all..
my new pc has been complaining and giving me blue screens every once in a while. it has something to do with the file rdbss.sys. I looked up what that file is and it gave me the following:

Redirected Drive Buffering SubSystem Driver

some times i get I/O errors on my externals (btw, i have three 2 usbs and 1 firewire)
i dont usually have then on all the time but that blue screen happen regardless to whether all of then are on or one.. i dont know what triggers it thought. Some time it happens, and some it doesnt. my sys monitor has some error logs. for example:

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 8/2/2007
Time: 1:30:31 PM
User: GOLIATH\MrGenie
Computer: GOLIATH
Description:
DCOM got error "The service database is locked. " attempting to start the service StiSvc with arguments "" in order to run the server:
{A1F4E726-8CF1-11D1-BF92-0060081ED811}


&


Event Type: Error
Event Source: Srv
Event Category: None
Event ID: 2019
Date: 8/2/2007
Time: 1:18:19 PM
User: N/A
Computer: GOLIATH
Description:
The server was unable to allocate from the system nonpaged pool because the pool was empty.

my box info:
win xp sp2

installed H/W
nvidia video card (8500gt)
Creative SB audigy 2 ZS (WDM)
PCI IDE port cards (my mobo has only one IDE port, while i have 4 IDE devices so i bought this card to give extra IDE ports)
modem (just in case the DSL goes bad)

mother board type:
gigabyte S-series model GA-P35-DS3


thanks.
 
M

montag451

Diamond Member
Dec 17, 2004
4,587
0
0
How often does it give you blue screens?

Are you on a network?

Do you connect through a router to the internet?

Does it give you bsd when you load up certain sw? or connect to certain sites?

What temperatures do you have?
 
M

MrGenie

Member
Jul 30, 2007
50
0
0
thanks for your reply.

this is totally random. my temps are fine.
i need to keep a close eye on the pattern when this happens and get back to you.


thanks.
 
M

montag451

Diamond Member
Dec 17, 2004
4,587
0
0
Hi, are you on a network?

I don't think those errors you pointed out are fatal, but, it might point to a possible RAM problem if stuff that should be going to your hdd onto your pf gets allocated incorrectly - ends up in RAM, RAM can't handle it and crashes.

As per Microsoft: "Nonpaged pool pages cannot be paged out to the Paging File, but instead remain in main memory as long as they are allocated. An application is probably incorrectly making system calls and using up all allocated nonpaged pool. You might also see the following error on a local or remote system: Not enough storage available to process this command.
To find the faulty application, use the Performance Monitor to look at each
application's nonpaged pool allocation.
 
M

MrGenie

Member
Jul 30, 2007
50
0
0
nope. my pc is a stand alone and only connected to the net via a dsl modem.

yes i was gonna download pmon.exe and see what i get.
 
M

MrGenie

Member
Jul 30, 2007
50
0
0
ok.. i will compress the files and send it to you in parts (8mb each) total of 90mb along with the .cab file. By the way.. since im running on a low bandwidth... i guess this is gonna take a while. they are a total of 12 .rar files and one .cab file

thanks for your time.
 
D

dclive

Elite Member
Oct 23, 2003
5,626
2
81
Suggestion: Turn on kernel dumps, not full size dumps. Much smaller dumpfiles, still the same ability to look at the kernel bad stuff. :)
 
M

MrGenie

Member
Jul 30, 2007
50
0
0
Originally posted by: dclive
Suggestion: Turn on kernel dumps, not full size dumps. Much smaller dumpfiles, still the same ability to look at the kernel bad stuff. :)
Click to expand...

just tell me how... :)
my windows dir is getting stuffed with those 1g dumps! :)
 
M

MrGenie

Member
Jul 30, 2007
50
0
0
dclive,
the upload is done... you should be expecting 13 files (12 rars -spanned dump-) and 1 cab file.

thanks for your time...
 
D

dclive

Elite Member
Oct 23, 2003
5,626
2
81
Run verifier from start\run and pick the top option, then turn on verification for all unsigned drivers. You'll need to reboot. If at any point you cannot log in due to bluesceens on the box, simply select safe mode boot and run verifier again and turn off driver verification. We're most interested in special pool and pool tracking.

Now while you're running with verification on, your box is a little more likely to BSOD. That's good - when it does, we'll have a better idea of why. Give me the resulting dumpfile (set up a kernel dumpfile!) and we'll take a look.

More info: http://support.microsoft.com/kb/244617
 
M

MrGenie

Member
Jul 30, 2007
50
0
0
dclive,
ok, just finished uploading the kernel dump to your email.

please let me know whats up.

thanks.

 
D

dclive

Elite Member
Oct 23, 2003
5,626
2
81
EXCEPTION_CODE: (NTSTATUS) 0xc000009a - Insufficient system resources exist to complete the API.

DEFAULT_BUCKET_ID: DRIVER_FAULT

ERROR_CODE: (NTSTATUS) 0xc0000006 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The required data was not placed into memory because of an I/O error status of "0x%08lx".

IO_ERROR: (NTSTATUS) 0xc000009a - Insufficient system resources exist to complete the API.

EXCEPTION_STR: 0xc0000006_c000009a

FAULTING_IP:
+7c919742
7c919742 ?? ???

BUGCHECK_STR: 0xF4_IOERR_C000009A

STACK_TEXT:
f3728520 805d02e9 000000f4 00000003 8620eb40 nt!KeBugCheckEx+0x1b
f3728544 805d11ed 805d1142 8620eb40 8620ecb4 nt!PspCatchCriticalBreak+0x75
f3728574 8054060c 8620ed88 c0000006 f37289b0 nt!NtTerminateProcess+0x7d
f3728574 805004c5 8620ed88 c0000006 f37289b0 nt!KiFastCallEntry+0xfc
f37285f4 804fe4f6 ffffffff c0000006 f37289f8 nt!ZwTerminateProcess+0x11
f37289b0 80501c03 f37289d8 00000000 f3728d64 nt!KiDispatchException+0x3a0
f3728d34 80543ed7 0055b158 0055b178 00000000 nt!KiRaiseException+0x175
f3728d50 8054060c 0055b158 0055b178 00000000 nt!NtRaiseException+0x33
f3728d50 7c919742 0055b158 0055b178 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0055b448 00000000 00000000 00000000 00000000 0x7c919742


STACK_COMMAND: kb

FOLLOWUP_IP:
+7c94faf8
7c94faf8 ?? ???

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: hardware_disk

FAILURE_BUCKET_ID: 0xF4_IOERR_C000009A_VRF_IMAGE_hardware_disk

BUCKET_ID: 0xF4_IOERR_C000009A_VRF_IMAGE_hardware_disk

Followup: MachineOwner

__


Looks like a disk issue still, but I'd like to look at your logfiles. You didn't include / re-run MPSReports. Please do so (and for all future memorydumps too) - thx.
 
M

MrGenie

Member
Jul 30, 2007
50
0
0
dclive,
about the verifier, do i have to re-run it everytime the machine reboots?
or it will be on from the first time i ran it?

oh by the way when i first ran it and selected unsigned drivers it listed 3 drivers..

i probably should do it again and send you that list as well...
 
D

dclive

Elite Member
Oct 23, 2003
5,626
2
81
Sorry, I still don't have a good fix - if I were better in the debugger I'm sure I could have found something, but we are where we are... so here's what I want you to do:

1. Update your modem driver, or, if you don't use the analog modem anymore, remove it from your box and uninstall the driver. The driver is HCF_MSFT. Google that for more info.
2. Completely remove your NAI antivirus/firewall/etc software from 2004, and replace it with a modern alternative. If you feel like it, remove it and don't replace it with anything and run the BT client and see if you can still reproduce the problem.
3. What is gdrv.sys? I think that's some Gigabyte tools. I don't think you need them; uninstall them.
4. It would've been helpful to include the most recent level of detail found in your e-mails in your original post :(

 
M

MrGenie

Member
Jul 30, 2007
50
0
0
im sorry 'bout the details man.. i just was so annoyed when this thing started to happen.. i couldnt get my thoughts straight!

as to your recomendation..

1. the driver installed for the modem is the drivers that came with windows (i installed windows and it installed these drivers for me). to be honest i had this modem on my previous PC and it never cause an issue!

2. the only reason i kept that piece of just is that i use VPN to work and it only recognizes McAffee of the same version i have right now. I just got an email from our IT dept at work that they upgraded the vpn ssl software and now its more friendly to other version and brands of AV packages. i am updating this package.

3. i have gigabyte tool installed for system health monitoring. I guess i can remove that as well for the sake of this trouble shooting...



so tell me something,
how can i make sure that my Memory dimms are fine? with all those services not being able to start and insufficient resources to perform some tasks, would it be logical to suspect the memory modules?
is there a tool to test it? or stress test it!;)
thanks.
 
D

dclive

Elite Member
Oct 23, 2003
5,626
2
81
1. If you aren't using it, please uninstall it.
2. OK.
3. OK.

Other: Run a memory test program from a bootable CD or bootable floppy; there are many suggested here on a daily basis. Based on a service issue I'd look at a Windows issue, which is why I suggested you update all non-Microsoft drivers.
 
M

MrGenie

Member
Jul 30, 2007
50
0
0
dclive,
things look great now...
i havent removed the modem yet... i jsut got lazy with disconnecting the pc and popping it open.... :D;)


but after i removed the AV package it looks great now.....


the PC was up since yesterday and never rebooted


excellent....

thanks man...
 
You must log in or register to reply here.

TRENDING THREADS

COMPANY
RESOURCES
FOLLOW
Top Bottom