Post Reply

Forums -> UltraMon™ -> RTSUltraMonHook.dll STOP error
Justin   2005-06-23 11:11
Hi, I'm trying out the new 2.6 version of Ultramon. Recently I've been getting Blue Screens of death. Recent changes to my system include: Windows updates, Norton AV updates, and Ultramon. I don't know that it's Ultramon, but it's the only program mentioned by the Windows debugger. The debugger cant give me much info though since it doesnt know the correct symbols. Any help would be much appreciated. Here's the debug output:

--------------
BugCheck 34306847, {34306847, 0, 0, f76ee28c}

*** WARNING: Unable to verify checksum for RTSUltraMonHook.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for RTSUltraMonHook.dll -
Probably caused by : win32k.sys ( win32k!xxxCallNextHookEx+2d )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Unknown bugcheck code (34306847)
Unknown bugcheck description
Arguments:
Arg1: 34306847
Arg2: 00000000
Arg3: 00000000
Arg4: f76ee28c

Debugging Details:
------------------


DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x34306847

LAST_CONTROL_TRANSFER: from 00000000 to ffdff120

SYMBOL_ON_RAW_STACK: 1

STACK_TEXT:
ffffffff 00000000 00000000 00000000 00000000 0xffdff120


STACK_COMMAND: dds @$csp ; kb

FOLLOWUP_IP:
win32k!xxxCallNextHookEx+2d
bf8f5a94 5d pop ebp

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: win32k!xxxCallNextHookEx+2d

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 422511a2

FAILURE_BUCKET_ID: 0x34306847_win32k!xxxCallNextHookEx+2d

BUCKET_ID: 0x34306847_win32k!xxxCallNextHookEx+2d

Followup: MachineOwner
---------
Christian Studer   2005-06-23 21:38
Please make sure you have version 2.6.25.0 of RTSUltraMonHook.dll installed, if not you can get the patch here.

If the latest version is installed, please mail the crash dump to support@realtimesoft.com.

By default the dumps are stored in C:\Windows\Minidump, you can get the location of the folder on your system under Control Panel > System > Advanced > Startup and Recovery. Also make sure that 'Small memory dump' is selected.

Which operating system are you using?

Christian Studer - www.realtimesoft.com
Forums -> UltraMon™ -> RTSUltraMonHook.dll STOP error

Post Reply