Crash Debug

I need help determining where to start looking in order to root-cause a crash im experiencing. Symptoms of the crash are a complete halt of windows. No mouse, no keyboard.
No screen updates, even Ctrl + Scroll Scroll doesnt work.
The machine has no COM ports nor do I have any 1394 adapters lying around.
What on earth would cause windows to lock up in this manner?

It’s not even really my drivers that im troubleshooting, they are the Intel Wireless 2200 BG drivers… I have two cards ive swapped with, neither does it. I’ve swapped motherboards in this thing thinking it was a MiniPCI issue, nope. I’ve even gone as far as loading a vanilla OS + just the intel drivers, but to no avail.

Im not asking for detailed troubleshooting information, thats Offtopic. What im looking for
is basically an arrow pointing me in the direction to look.

Thanks everyone.

Asa

The recent virus BlackEmal has the same symptoms that you are describing :).

Thanks and Regards
Faraz.

On 2/1/06, Asa Yeamans wrote:
> I need help determining where to start looking in order to root-cause a
> crash im experiencing. Symptoms of the crash are a complete halt of windows.
> No mouse, no keyboard.
> No screen updates, even Ctrl + Scroll Scroll doesnt work.
> The machine has no COM ports nor do I have any 1394 adapters lying around.
> What on earth would cause windows to lock up in this manner?
>
> It’s not even really my drivers that im troubleshooting, they are the Intel
> Wireless 2200 BG drivers… I have two cards ive swapped with, neither
> does it. I’ve swapped motherboards in this thing thinking it was a MiniPCI
> issue, nope. I’ve even gone as far as loading a vanilla OS + just the intel
> drivers, but to no avail.
>
> Im not asking for detailed troubleshooting information, thats Offtopic. What
> im looking for
> is basically an arrow pointing me in the direction to look.
>
> Thanks everyone.
>
> Asa
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>

Well, sounds like your going to have trouble attaching a kernel debugger
with no com ports or other adapters…

You might want to try downloading windbg and liveKD onto the problem
machine and see if that will reveal any
relevant information.

LiveKD: http://www.sysinternals.com/Utilities/LiveKd.html

Matt

Asa Yeamans wrote:

I need help determining where to start looking in order to root-cause a crash im experiencing. Symptoms of the crash are a complete halt of windows. No mouse, no keyboard.
No screen updates, even Ctrl + Scroll Scroll doesnt work.
The machine has no COM ports nor do I have any 1394 adapters lying around.
What on earth would cause windows to lock up in this manner?

It’s not even really my drivers that im troubleshooting, they are the Intel Wireless 2200 BG drivers… I have two cards ive swapped with, neither does it. I’ve swapped motherboards in this thing thinking it was a MiniPCI issue, nope. I’ve even gone as far as loading a vanilla OS + just the intel drivers, but to no avail.

Im not asking for detailed troubleshooting information, thats Offtopic. What im looking for
is basically an arrow pointing me in the direction to look.

Thanks everyone.

Asa


Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

Oh, just re-read your post. So you’ve re-installed the OS and everything
and it’s still locking up? An you replaced the MB too? You have bad
hardware apparently. I had a PCI modem do this crap to me several years
ago, I removed cards until the problem stopped. Once that modem came
out, it never did this again until I plugged it back it…

Also had a different HW problem that was very similar in behavior where
the 3.3v power lead was flaking out.

Question, when this system gets flaky and locks, do you have to manually
unplug it, or will holding the power button for 10 sec’s shut it down?

Asa Yeamans wrote:

I need help determining where to start looking in order to root-cause a crash im experiencing. Symptoms of the crash are a complete halt of windows. No mouse, no keyboard.
No screen updates, even Ctrl + Scroll Scroll doesnt work.
The machine has no COM ports nor do I have any 1394 adapters lying around.
What on earth would cause windows to lock up in this manner?

It’s not even really my drivers that im troubleshooting, they are the Intel Wireless 2200 BG drivers… I have two cards ive swapped with, neither does it. I’ve swapped motherboards in this thing thinking it was a MiniPCI issue, nope. I’ve even gone as far as loading a vanilla OS + just the intel drivers, but to no avail.

Im not asking for detailed troubleshooting information, thats Offtopic. What im looking for
is basically an arrow pointing me in the direction to look.

Thanks everyone.

Asa


Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

You need to generate a crash dump. If the keyboard method doesn’t work,
then I think OSR might be selling a “NMI Board” - a PCI device that will
generate an NMI for your system, or at least they were talking about
selling one. That might work. If they aren’t, we have discussed the
basic design of this device here on this list.

Also - install driver verifier and turn it on for all drivers. This
might get you to a bugcheck in advance of your hang.

Finally - if your system has USB ports it is possible to hook up windbg
through the USB interface. You will need some sort of hardware widget.
Check the http://www.microsoft.com/whdc/default.mspx site - I think this
is described somewhere there.

Really finally - 1394 cards are like dirt cheap. Go buy one and debug
through that.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Faraz Ahmed
Sent: Wednesday, February 01, 2006 3:37 AM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] Crash Debug

The recent virus BlackEmal has the same symptoms that you are describing
:).

Thanks and Regards
Faraz.

On 2/1/06, Asa Yeamans wrote:
> I need help determining where to start looking in order to root-cause
a
> crash im experiencing. Symptoms of the crash are a complete halt of
windows.
> No mouse, no keyboard.
> No screen updates, even Ctrl + Scroll Scroll doesnt work.
> The machine has no COM ports nor do I have any 1394 adapters lying
around.
> What on earth would cause windows to lock up in this manner?
>
> It’s not even really my drivers that im troubleshooting, they are the
Intel
> Wireless 2200 BG drivers… I have two cards ive swapped with,
neither
> does it. I’ve swapped motherboards in this thing thinking it was a
MiniPCI
> issue, nope. I’ve even gone as far as loading a vanilla OS + just the
intel
> drivers, but to no avail.
>
> Im not asking for detailed troubleshooting information, thats
Offtopic. What
> im looking for
> is basically an arrow pointing me in the direction to look.
>
> Thanks everyone.
>
> Asa
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: unknown lmsubst tag
argument: ‘’
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>


Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

It cant be bad hardware as two of the intel cards do it on two different motherboards…
But at least its still “up” enough that a 8 second or so power button hold shuts it off.
I’ll try the liveKd thing, but im not sure thats gonna help in the event of a system-wide
lockup…

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]On Behalf Of MM
Sent: Wednesday, February 01, 2006 3:14 AM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] Crash Debug

Oh, just re-read your post. So you’ve re-installed the OS and everything
and it’s still locking up? An you replaced the MB too? You have bad
hardware apparently. I had a PCI modem do this crap to me several years
ago, I removed cards until the problem stopped. Once that modem came
out, it never did this again until I plugged it back it…

Also had a different HW problem that was very similar in behavior where
the 3.3v power lead was flaking out.

Question, when this system gets flaky and locks, do you have to manually
unplug it, or will holding the power button for 10 sec’s shut it down?

Asa Yeamans wrote:

I need help determining where to start looking in order to root-cause a crash im experiencing. Symptoms of the crash are a complete halt of windows. No mouse, no keyboard.
No screen updates, even Ctrl + Scroll Scroll doesnt work.
The machine has no COM ports nor do I have any 1394 adapters lying around.
What on earth would cause windows to lock up in this manner?

It’s not even really my drivers that im troubleshooting, they are the Intel Wireless 2200 BG drivers… I have two cards ive swapped with, neither does it. I’ve swapped motherboards in this thing thinking it was a MiniPCI issue, nope. I’ve even gone as far as loading a vanilla OS + just the intel drivers, but to no avail.

Im not asking for detailed troubleshooting information, thats Offtopic. What im looking for
is basically an arrow pointing me in the direction to look.

Thanks everyone.

Asa


Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: xxxxx@rivin.net
To unsubscribe send a blank email to xxxxx@lists.osr.com

Asa Yeamans wrote:

I need help determining where to start looking in order to root-cause a crash im experiencing.

Is “root-cause” now a verb? :wink:


Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

Is “root-cause” now a verb? :wink:
[Roddy, Mark] Yup.


Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.


Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: xxxxx@stratus.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

Are there such things as NMI board for laptops… like a PCMCIA version
but last i read, PCMCIA/PC Card devices can not assert an NMI interrupt.
Also, would 1394 debugging work over a PCMCIA card? what about USB-based serial
port debugging… is that supported either?

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]On Behalf Of Roddy, Mark
Sent: Wednesday, February 01, 2006 7:58 AM
To: Windows System Software Devs Interest List
Subject: RE: [ntdev] Crash Debug

You need to generate a crash dump. If the keyboard method doesn’t work,
then I think OSR might be selling a “NMI Board” - a PCI device that will
generate an NMI for your system, or at least they were talking about
selling one. That might work. If they aren’t, we have discussed the
basic design of this device here on this list.

Also - install driver verifier and turn it on for all drivers. This
might get you to a bugcheck in advance of your hang.

Finally - if your system has USB ports it is possible to hook up windbg
through the USB interface. You will need some sort of hardware widget.
Check the http://www.microsoft.com/whdc/default.mspx site - I think this
is described somewhere there.

Really finally - 1394 cards are like dirt cheap. Go buy one and debug
through that.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Faraz Ahmed
Sent: Wednesday, February 01, 2006 3:37 AM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] Crash Debug

The recent virus BlackEmal has the same symptoms that you are describing
:).

Thanks and Regards
Faraz.

On 2/1/06, Asa Yeamans wrote:
> I need help determining where to start looking in order to root-cause
a
> crash im experiencing. Symptoms of the crash are a complete halt of
windows.
> No mouse, no keyboard.
> No screen updates, even Ctrl + Scroll Scroll doesnt work.
> The machine has no COM ports nor do I have any 1394 adapters lying
around.
> What on earth would cause windows to lock up in this manner?
>
> It’s not even really my drivers that im troubleshooting, they are the
Intel
> Wireless 2200 BG drivers… I have two cards ive swapped with,
neither
> does it. I’ve swapped motherboards in this thing thinking it was a
MiniPCI
> issue, nope. I’ve even gone as far as loading a vanilla OS + just the
intel
> drivers, but to no avail.
>
> Im not asking for detailed troubleshooting information, thats
Offtopic. What
> im looking for
> is basically an arrow pointing me in the direction to look.
>
> Thanks everyone.
>
> Asa
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: unknown lmsubst tag
argument: ‘’
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>


Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

ASA:

As far as connectivity:

I wouldn’t even attempt the PCMCIA/CardBus option (if it is one). Many
more pedestrian 1394 chipsets do not work reliably (or at all) with 1394
debugging.

If you mean connecting a multiport serial hub to a USB port to the
target computer by USB serial ports, I do not know the answer, but I
also would not try this. Just use USB connectivity for WinDbg (not that
I ever have).

As far as the problem itself:

When is this lock up occurring? That is, are you doing something, or
does it just occur after a certain amount of runtime (and if so, how
much (about))? If (Right) Ctrl-Scroll-Scroll is not working (assuming
that (1) you have it configured correctly in the registry and (2) this
sort of thing works for laptop keyboards (I assume it does; I have no
idea)), then the system will not respond to an NMI (as that is what that
key sequence produces via the APIC). This would probably indicate a
problem with the way that your APIC is configured to handle external
source interrupts. In addition to NMI, SMI is another possibility, as
an NMI would not be handled while in SMM. As SMI is used for power
management, and laptops have been known to do some very hinky things in
this area, this might be part of the problem. I would try disabling
power management in the BIOS and then in the OS (if you get that far)
and see what happens. If this is the problem, you will probably not be
able to debug this without a JTAG device or some other form of hardware
debugger, although the ACPI KD Extensions (!nstree, !nsobj, !fadt,
!facs, !amli, et. c.) might be of use. Another thing that might be
worth looking at is the info (!arbiter, !pci, !idt) associated with
interrupt 9. This interrupt is generally used by systems for ACPI/power
management, despite being listed as something like a coprocessor segment
overrrun exception (it hasn’t been used for this since something like
386).

None of these is likely to help you a great deal, but, without a
hardware debugger of some kind, these are my best ideas, such as they
are.

MM

>> xxxxx@rivin.net 2006-02-02 03:21 >>>
Are there such things as NMI board for laptops… like a PCMCIA
version
but last i read, PCMCIA/PC Card devices can not assert an NMI
interrupt.
Also, would 1394 debugging work over a PCMCIA card? what about
USB-based serial
port debugging… is that supported either?

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]On Behalf Of Roddy, Mark
Sent: Wednesday, February 01, 2006 7:58 AM
To: Windows System Software Devs Interest List
Subject: RE: [ntdev] Crash Debug

You need to generate a crash dump. If the keyboard method doesn’t
work,
then I think OSR might be selling a “NMI Board” - a PCI device that
will
generate an NMI for your system, or at least they were talking about
selling one. That might work. If they aren’t, we have discussed the
basic design of this device here on this list.

Also - install driver verifier and turn it on for all drivers. This
might get you to a bugcheck in advance of your hang.

Finally - if your system has USB ports it is possible to hook up
windbg
through the USB interface. You will need some sort of hardware widget.
Check the http://www.microsoft.com/whdc/default.mspx site - I think
this
is described somewhere there.

Really finally - 1394 cards are like dirt cheap. Go buy one and debug
through that.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Faraz Ahmed
Sent: Wednesday, February 01, 2006 3:37 AM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] Crash Debug

The recent virus BlackEmal has the same symptoms that you are
describing
:).

Thanks and Regards
Faraz.

On 2/1/06, Asa Yeamans wrote:
> I need help determining where to start looking in order to
root-cause
a
> crash im experiencing. Symptoms of the crash are a complete halt of
windows.
> No mouse, no keyboard.
> No screen updates, even Ctrl + Scroll Scroll doesnt work.
> The machine has no COM ports nor do I have any 1394 adapters lying
around.
> What on earth would cause windows to lock up in this manner?
>
> It’s not even really my drivers that im troubleshooting, they are
the
Intel
> Wireless 2200 BG drivers… I have two cards ive swapped with,
neither
> does it. I’ve swapped motherboards in this thing thinking it was a
MiniPCI
> issue, nope. I’ve even gone as far as loading a vanilla OS + just
the
intel
> drivers, but to no avail.
>
> Im not asking for detailed troubleshooting information, thats
Offtopic. What
> im looking for
> is basically an arrow pointing me in the direction to look.
>
> Thanks everyone.
>
> Asa
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: unknown lmsubst tag
argument: ‘’
> To unsubscribe send a blank email to
xxxxx@lists.osr.com
>


Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag
argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com