BSOD due to PROCESS_NAME: kntcma.exe and ntkrnlmp.exe

hi team,

please analyze memory dump, can’t find correct cause this.

3: kd> ! analyze -v
error: findplugins 8007007b
*******************************************************************************
*                                                                             *
*                        bugcheck analysis                                    *
*                                                                             *
*******************************************************************************

kernel_mode_exception_not_handled (8e)
common bugcheck.  exception address pinpoints
driver/function caused problem.  note address
link date of driver/image contains address.
common problems exception code 0x80000003.  means hard
coded breakpoint or assertion hit, system booted
/nodebug.  not supposed happen developers should never have
hardcoded breakpoints in retail code, ...
if happens, make sure debugger gets connected, , the
system booted /debug.  let see why breakpoint is
happening.
arguments:
arg1: c0000005, exception code not handled
arg2: 80908895, address exception occurred at
arg3: b8b00c4c, trap frame
arg4: 00000000

debugging details:
------------------

exception_code: (ntstatus) 0xc0000005 - instruction @ "0x%08lx" referenced memory @ "0x%08lx". memory not "%s".

faulting_ip:
nt!ntquerydirectoryobject+1d7
80908895 0fb74040        movzx   eax,word ptr [eax+40h]

trap_frame:  b8b00c4c -- (.trap 0xffffffffb8b00c4c)
errcode = 00000000
eax=00000000 ebx=e112e058 ecx=00000000 edx=b8b00ce0 esi=8777e2a8 edi=e11d1570
eip=80908895 esp=b8b00cc0 ebp=b8b00d40 iopl=0         nv ei pl zr na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
nt!ntquerydirectoryobject+0x1d7:
80908895 0fb74040        movzx   eax,word ptr [eax+40h]   ds:0023:00000040=????
resetting default scope

default_bucket_id:  driver_fault

bugcheck_str:  0x8e

process_name:  kntcma.exe

current_irql:  0

last_control_transfer:  8085b8bb 8087cc52

stack_text: 
b8b00818 8085b8bb 0000008e c0000005 80908895 nt!kebugcheckex+0x1b
b8b00bdc 8083435c b8b00bf8 00000000 b8b00c4c nt!kidispatchexception+0x3a2
b8b00c44 80834310 b8b00d40 80908895 badb0d00 nt!commondispatchexception+0x4a
b8b00c60 8092b572 e23d33c0 00001844 e112e408 nt!kiexceptionexit+0x186
b8b00d40 8083387f 00001844 01e91f60 00000400 nt!exmaphandletopointerex+0x1e
b8b00d40 7c82845c 00001844 01e91f60 00000400 nt!kifastcallentry+0xfc
warning: frame ip not in known module. following frames may wrong.
0193eb68 00000000 00000000 00000000 00000000 0x7c82845c

stack_command:  kb

followup_ip:
nt!ntquerydirectoryobject+1d7
80908895 0fb74040        movzx   eax,word ptr [eax+40h]

symbol_stack_index:  0

symbol_name:  nt!ntquerydirectoryobject+1d7

followup_name:  machineowner

module_name: nt

image_name:  ntkrnlmp.exe

debug_flr_image_timestamp:  4fa2e3cd

failure_bucket_id:  0x8e_nt!ntquerydirectoryobject+1d7

bucket_id:  0x8e_nt!ntquerydirectoryobject+1d7

followup: machineowner

---

vishwa

hi,

kntcma.exe ibm tivoli application process. kindly contact vendor or post query in vendor specific forum.

cannot debugging of  the crash dump file here in forum.

suggest contact microsoft customer service , support (css) via telephone dedicated support professional can assist request.

http://support.microsoft.com/default.aspx?scid=fh;en-us;offerprophone#faq607

---

regards,
rafic

if found post helpful, please give "helpful" vote.
if answered question, remember mark "answer".
posting provided "as is" no warranties , confers no rights! test suggestion in test environment before implementing!

Windows Server  >  Windows Server General Forum