0000169: Dumped on 'undelete'

Viewing Issue Simple Details [ Jump to Notes ]

[ View Advanced ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0000169

[Gemini] misc

crash

always

02 Dec 09 16:52

23 Mar 10 23:12

Reporter

JNicoll

View Status

public

Assigned To

Priority

normal

Resolution

open

Status

feedback

Summary

0000169: Dumped on 'undelete'

Description

2.29i 3.3.8 WinXPPro

(I do realise this is not an uptodate version, but you may still be interested in this.)

I went to the Waste Basket and found a (threaded) pair of messages. I expanded
the thread to show both, selected the parent one, then did Edit -> Undelete.
Gemini dumped. I restarted and tried the same thing. It dumped again. I then
restarted and selected the whole thread (ie both items) and did an undelete for
them. That worked.

I have both DrWatson summary dumps, and the user.dmp file from the second occurrence. The first DrW summary dump is below (converted from unicode to plain ascii).

Additional Information

First DrWatson dump:

Application exception occurred:
        App: C:\Program Files\~I-folder\Intellegit\Gemini229i\gemini.exe (pid=3356)
        When: 02/12/2009 @ 16:26:04.649
        Exception number: c0000005 (access violation)

*----> System Information <----*
        Computer Name: IPC-87259456E3E
        User Name: Laptop
        Terminal Session Id: 0
        Number of Processors: 1
        Processor Type: x86 Family 15 Model 44 Stepping 2
        Windows Version: 5.1
        Current Build: 2600
        Service Pack: 3
        Current Type: Uniprocessor Free
        Registered Organization:
        Registered Owner: Laptop

*----> Task List <----*
   0 System Process
   4 System
576 smss.exe
656 csrss.exe
688 winlogon.exe
740 services.exe
752 lsass.exe
908 Ati2evxx.exe
920 svchost.exe
1020 svchost.exe
1112 MsMpEng.exe
1156 svchost.exe
1188 svchost.exe
1364 EvtEng.exe
1404 S24EvMon.exe
1544 svchost.exe
1628 svchost.exe
1676 Error 0xD0000022
2036 aawservice.exe
240 spoolsv.exe
360 svchost.exe
408 ekrn.exe
440 inetinfo.exe
476 jqs.exe
516 mdm.exe
1092 OProtSvc.exe
1212 RegSrvc.exe
1492 rxapi.exe
1524 snmp.exe
1448 svchost.exe
1724 uphclean.exe
1824 SearchIndexer.exe
2628 alg.exe
3016 ZcfgSvc.exe
3144 wscntfy.exe
3320 Ati2evxx.exe
3468 Explorer.EXE
3484 AboutTime.exe
372 SynTPEnh.exe
1564 ifrmewrk.exe
1592 EOUWiz.exe
2108 SOUNDMAN.EXE
952 AGRSMMSG.exe
2592 pptd40nt.exe
3060 E_FATIAGE.EXE
3136 MSASCui.exe
3184 jusched.exe
3208 ATIPTAXX.EXE
3280 Error 0xD0000022
3408 egui.exe
3756 ctfmon.exe
732 SecCopy.exe
3700 NetMeter.exe
1324 ABackup.exe
2276 SetPoint.exe
3328 KHALMNPR.EXE
1896 taskmgr.exe
3932 jucheck.exe
3356 gemini.exe
2992 VirtualRPC-AdjustSA.exe
3220 firefox.exe
3712 iexplore.exe
3684 iexplore.exe
932 drwtsn32.exe

*----> Module List <----*
(0000000000400000 - 0000000000658000: C:\Program Files\~I-folder\Intellegit\Gemini229i\gemini.exe
(0000000000660000 - 000000000075c000: C:\Program Files\~I-folder\Intellegit\Gemini229i\LIBEAY32.dll
(0000000000c40000 - 0000000000c4d000: C:\Program Files\Auto Backup\ABscr.dll
(0000000004d40000 - 0000000005005000: C:\WINDOWS\system32\xpsp2res.dll
(0000000006c50000 - 0000000006d82000: C:\WINDOWS\system32\urlmon.dll
(0000000006db0000 - 0000000006dfd000: C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll
(0000000006e00000 - 0000000006e09000: C:\WINDOWS\system32\Normaliz.dll
(0000000010000000 - 0000000010031000: C:\Program Files\~I-folder\Intellegit\Gemini229i\SSLEAY32.dll
(0000000010100000 - 000000001010e000: C:\Program Files\~L-folder\Logitech\SetPoint\lgscroll.dll
(0000000032520000 - 0000000032532000: C:\Program Files\Microsoft Office\Office10\msohev.dll
(0000000039d00000 - 000000003a237000: C:\Program Files\~I-folder\Intellegit\Gemini229i\qt-mt338.dll
(000000003d930000 - 000000003da16000: C:\WINDOWS\system32\WININET.dll
(000000003dfd0000 - 000000003e1b8000: C:\WINDOWS\system32\iertutil.dll
(000000003e1c0000 - 000000003ec53000: C:\WINDOWS\system32\ieframe.dll
(000000005ad70000 - 000000005ada8000: C:\WINDOWS\system32\uxtheme.dll
(000000005b860000 - 000000005b8b5000: C:\WINDOWS\system32\netapi32.dll
(000000005d090000 - 000000005d12a000: C:\WINDOWS\system32\comctl32.dll
(000000005f800000 - 000000005f816000: C:\PROGRA~1\WIFD1F~1\MpShHook.dll
(00000000605d0000 - 00000000605d9000: C:\WINDOWS\system32\mslbui.dll
(00000000662b0000 - 0000000066308000: C:\WINDOWS\system32\hnetcfg.dll
(0000000068000000 - 0000000068036000: C:\WINDOWS\system32\rsaenh.dll
(0000000071a50000 - 0000000071a8f000: C:\WINDOWS\system32\mswsock.dll
(0000000071a90000 - 0000000071a98000: C:\WINDOWS\System32\wshtcpip.dll
(0000000071aa0000 - 0000000071aa8000: C:\WINDOWS\system32\WS2HELP.dll
(0000000071ab0000 - 0000000071ac7000: C:\WINDOWS\system32\WS2_32.dll
(0000000071ad0000 - 0000000071ad9000: C:\WINDOWS\system32\WSOCK32.dll
(0000000071bf0000 - 0000000071c03000: C:\WINDOWS\system32\SAMLIB.dll
(0000000072d10000 - 0000000072d18000: C:\WINDOWS\system32\msacm32.drv
(0000000072d20000 - 0000000072d29000: C:\WINDOWS\system32\wdmaud.drv
(0000000073000000 - 0000000073026000: C:\WINDOWS\system32\WINSPOOL.DRV
(0000000074720000 - 000000007476c000: C:\WINDOWS\system32\MSCTF.dll
(0000000074d90000 - 0000000074dfb000: C:\WINDOWS\system32\usp10.dll
(00000000755c0000 - 00000000755ee000: C:\WINDOWS\system32\msctfime.ime
(0000000076380000 - 0000000076385000: C:\WINDOWS\system32\msimg32.dll
(0000000076390000 - 00000000763ad000: C:\WINDOWS\system32\IMM32.dll
(0000000076600000 - 000000007661d000: C:\WINDOWS\System32\CSCDLL.dll
(0000000076780000 - 0000000076789000: C:\WINDOWS\system32\SHFOLDER.dll
(0000000076b40000 - 0000000076b6d000: C:\WINDOWS\system32\WINMM.dll
(0000000076c30000 - 0000000076c5e000: C:\WINDOWS\system32\WINTRUST.dll
(0000000076c90000 - 0000000076cb8000: C:\WINDOWS\system32\IMAGEHLP.dll
(0000000076f20000 - 0000000076f47000: C:\WINDOWS\system32\DNSAPI.dll
(0000000076f60000 - 0000000076f8c000: C:\WINDOWS\system32\WLDAP32.dll
(0000000076fb0000 - 0000000076fb8000: C:\WINDOWS\System32\winrnr.dll
(0000000076fc0000 - 0000000076fc6000: C:\WINDOWS\system32\rasadhlp.dll
(0000000076fd0000 - 000000007704f000: C:\WINDOWS\system32\CLBCATQ.DLL
(0000000077050000 - 0000000077115000: C:\WINDOWS\system32\COMRes.dll
(0000000077120000 - 00000000771ab000: C:\WINDOWS\system32\OLEAUT32.dll
(00000000773d0000 - 00000000774d3000: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
(00000000774e0000 - 000000007761d000: C:\WINDOWS\system32\ole32.dll
(0000000077690000 - 00000000776b1000: C:\WINDOWS\system32\NTMARTA.DLL
(0000000077920000 - 0000000077a13000: C:\WINDOWS\system32\SETUPAPI.dll
(0000000077a20000 - 0000000077a74000: C:\WINDOWS\System32\cscui.dll
(0000000077a80000 - 0000000077b15000: C:\WINDOWS\system32\CRYPT32.dll
(0000000077b20000 - 0000000077b32000: C:\WINDOWS\system32\MSASN1.dll
(0000000077b40000 - 0000000077b62000: C:\WINDOWS\system32\appHelp.dll
(0000000077bd0000 - 0000000077bd7000: C:\WINDOWS\system32\midimap.dll
(0000000077be0000 - 0000000077bf5000: C:\WINDOWS\system32\MSACM32.dll
(0000000077c00000 - 0000000077c08000: C:\WINDOWS\system32\VERSION.dll
(0000000077c10000 - 0000000077c68000: C:\WINDOWS\system32\msvcrt.dll
(0000000077dd0000 - 0000000077e6b000: C:\WINDOWS\system32\ADVAPI32.dll
(0000000077e70000 - 0000000077f02000: C:\WINDOWS\system32\RPCRT4.dll
(0000000077f10000 - 0000000077f59000: C:\WINDOWS\system32\GDI32.dll
(0000000077f60000 - 0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll
(0000000077fe0000 - 0000000077ff1000: C:\WINDOWS\system32\Secur32.dll
(0000000078130000 - 00000000781cb000: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\MSVCR80.dll
(000000007c420000 - 000000007c4a7000: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\MSVCP80.dll
(000000007c800000 - 000000007c8f6000: C:\WINDOWS\system32\kernel32.dll
(000000007c900000 - 000000007c9b2000: C:\WINDOWS\system32\ntdll.dll
(000000007c9c0000 - 000000007d1d7000: C:\WINDOWS\system32\SHELL32.dll
(000000007e410000 - 000000007e4a1000: C:\WINDOWS\system32\USER32.dll

*----> State Dump for Thread Id 0xac4 <----*

eax=03255e08 ebx=00000000 ecx=03381dd8 edx=03378ee8 esi=39d04c50 edi=0012fd48
eip=03255e08 esp=0012f438 ebp=0012f44c iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202

function: <nosymbols>
No prior disassembly possible
        03255e08 d83cd2 fdivr dword ptr [edx+edx*8]
        03255e0b 00d2 add dl,dl
        03255e0d 1900 sbb [eax],eax
        03255e0f 00d0 add al,dl
        03255e11 5b pop ebx
        03255e12 48 dec eax
        03255e13 0390fc1302b0 add edx,[eax+0xb00213fc]
        03255e19 5b pop ebx
        03255e1a 48 dec eax
FAULT ->03255e08 d83cd2 fdivr dword ptr [edx+edx*8] ds:0023:1cf40628=????????
        03255e0b 00d2 add dl,dl
        03255e0d 1900 sbb [eax],eax
        03255e0f 00d0 add al,dl
        03255e11 5b pop ebx
        03255e12 48 dec eax
        03255e13 0390fc1302b0 add edx,[eax+0xb00213fc]
        03255e19 5b pop ebx
        03255e1a 48 dec eax
        03255e1b 03f0 add esi,eax
        03255e1d 5b pop ebx

*----> Stack Back Trace <----*
*** WARNING: Unable to verify checksum for C:\Program Files\~I-folder\Intellegit\Gemini229i\gemini.exe
*** ERROR: Module load completed but symbols could not be loaded for C:\Program Files\~I-folder\Intellegit\Gemini229i\gemini.exe
WARNING: Stack unwind information not available. Following frames may be wrong.
*** WARNING: Unable to verify checksum for C:\Program Files\~I-folder\Intellegit\Gemini229i\qt-mt338.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\~I-folder\Intellegit\Gemini229i\qt-mt338.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\USER32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0012f44c 004b8a1c 03381dd8 00000001 03214820 0x3255e08
0012f494 004fa01c 00000000 00000001 032c00b0 gemini+0xb8a1c
0012f4a8 00597831 0000003e 032c00b0 0012f500 gemini+0xfa01c
0012f4b8 39d8c0c0 0000007f 0012f52c ffffffff gemini+0x197831
0012f500 39d8be43 033b8340 0012f52c 0335d308 qt-mt338!QObject__activate_signal+0xe0
0012f54c 3a038c9c 00000002 0335d308 0012f568 qt-mt338!QObject__activate_signal+0xe3
0012f55c 39e9650f 0335d308 0012f578 3a038db7 qt-mt338!QAction__activated+0x1c
0012f568 3a038db7 00000006 0335d308 0012f5c0 qt-mt338!QAction__internalActivation+0x3f
0012f578 39d8c0c0 00000008 0012f5d4 39d04c50 qt-mt338!QAction__qt_invoke+0xe7
0012f5c0 3a01fd88 03083eb0 0012f5d4 032fb110 qt-mt338!QObject__activate_signal+0xe0
0012f60c 39dacf62 032fb138 032fb110 030fd148 qt-mt338!QSignal__signal+0x78
0012f620 39e660a3 39d04c50 02f99260 032f26b0 qt-mt338!QSignal__activate+0x52
0012f6a8 39dc0d0f 0012f9a4 02f99840 030052f8 qt-mt338!QPopupMenu__mouseReleaseEvent+0x343
0012f734 39d456f4 0012f9a4 0012f828 0012fe90 qt-mt338!QWidget__event+0xcf
0012f760 39d44fc1 032f26b0 0012f9a4 0344bd38 qt-mt338!QApplication__internalNotify+0x1c4
0012f884 39d0bd8d 032f26b0 0012f9a4 0012f9a4 qt-mt338!QApplication__notify+0x421
0012f898 39d07a5d 032f26b0 0012f9a4 39d04c50 qt-mt338!QApplication__sendSpontaneousEvent+0x3d
0012fa50 39d05202 0012fcc0 39d04c50 7c91005d qt-mt338!QApplication__winMouseButtonUp+0x6ad
0012fce0 7e418734 00240902 00000202 00000000 qt-mt338!QApplication__winFocus+0x6a2
0012fd0c 7e418816 39d04c50 00240902 00000202 USER32!GetDC+0x6d
0012fd74 7e4189cd 00000000 39d04c50 00240902 USER32!GetDC+0x14f
0012fdd4 7e418a10 0012fe10 00000000 0012fe34 USER32!GetWindowLongW+0x127
0012fde4 39d147f3 0012fe10 00cddf08 00000004 USER32!DispatchMessageW+0xf
0012fe34 39d54226 00000004 00000000 03048ba8 qt-mt338!QEventLoop__processEvents+0x293
0012fe4c 39d540df 03048ba8 0012fe68 39d4589e qt-mt338!QEventLoop__enterLoop+0x76
0012fe58 39d4589e 03048ba8 0012fe90 0012fef8 qt-mt338!QEventLoop__exec+0x1f
0012fe68 004eaee9 7c90e920 7c910060 ffffffff qt-mt338!QApplication__exec+0x1e
0012fef8 005b0961 00000001 003f9660 00400000 gemini+0xeaee9
0012ffc0 7c817077 00410057 00450052 7ffdc000 gemini+0x1b0961
0012fff0 00000000 005b02a0 00000000 78746341 kernel32!RegisterWaitForInputIdle+0x49

*----> Raw Stack Dump <----*
000000000012f438 44 e0 e4 39 01 00 00 00 - 30 69 1e 03 54 f4 12 00 D..9....0i..T...
000000000012f448 f9 e0 e4 00 94 f4 12 00 - 1c 8a 4b 00 d8 1d 38 03 ..........K...8.
000000000012f458 01 00 00 00 20 48 21 03 - d8 3c d2 00 f8 59 31 03 .... H!..<...Y1.
000000000012f468 70 f4 12 00 00 00 00 00 - b8 57 5d 00 00 e9 27 03 p........W]...'.
000000000012f478 80 77 22 03 80 77 22 03 - 80 77 22 03 00 00 00 00 .w"..w"..w".....
000000000012f488 01 00 00 00 a8 b1 39 03 - d8 1d 38 03 a8 f4 12 00 ......9...8.....
000000000012f498 1c a0 4f 00 00 00 00 00 - 01 00 00 00 b0 00 2c 03 ..O...........,.
000000000012f4a8 b8 f4 12 00 31 78 59 00 - 3e 00 00 00 b0 00 2c 03 ....1xY.>.....,.
000000000012f4b8 00 f5 12 00 c0 c0 d8 39 - 7f 00 00 00 2c f5 12 00 .......9....,...
000000000012f4c8 ff ff ff ff 5d 00 91 7c - 08 d3 35 03 00 00 3f 00 ....]..|..5...?.
000000000012f4d8 00 00 00 00 e8 06 1f 03 - f0 f4 12 00 43 2b fd 39 ............C+.9
000000000012f4e8 02 00 00 00 2c f5 12 00 - f0 af 2c 03 b0 00 2c 03 ....,.....,...,.
000000000012f4f8 90 d1 2a 03 00 00 00 00 - 4c f5 12 00 43 be d8 39 ..*.....L...C..9
000000000012f508 40 83 3b 03 2c f5 12 00 - 08 d3 35 03 fe ff ff ff @.;.,.....5.....
000000000012f518 58 4c 13 78 f8 a4 fb 39 - e0 99 08 03 c0 f5 12 00 XL.x...9........
000000000012f528 e0 99 08 03 08 ef 20 3a - a9 96 fb 39 e0 99 08 03 ...... :...9....
000000000012f538 c0 f5 12 00 00 00 00 00 - e0 6c 3c 03 17 0e 36 88 .........l<...6.
000000000012f548 40 83 3b 03 5c f5 12 00 - 9c 8c 03 3a 02 00 00 00 @.;.\......:....
000000000012f558 08 d3 35 03 68 f5 12 00 - 0f 65 e9 39 08 d3 35 03 ..5.h....e.9..5.
000000000012f568 78 f5 12 00 b7 8d 03 3a - 06 00 00 00 08 d3 35 03 x......:......5.

*----> State Dump for Thread Id 0x804 <----*

eax=00000006 ebx=c0000000 ecx=00171c00 edx=00195bc0 esi=00000000 edi=71a8793c
eip=7c90e514 esp=0572ff7c ebp=0572ffb4 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202

*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll -
function: ntdll!KiFastSystemCallRet
        7c90e4fa e829000000 call ntdll!RtlRaiseException (7c90e528)
        7c90e4ff 8b0424 mov eax,[esp]
        7c90e502 8be5 mov esp,ebp
        7c90e504 5d pop ebp
        7c90e505 c3 ret
        7c90e506 8da42400000000 lea esp,[esp]
        7c90e50d 8d4900 lea ecx,[ecx]
        ntdll!KiFastSystemCall:
        7c90e510 8bd4 mov edx,esp
        7c90e512 0f34 sysenter
        ntdll!KiFastSystemCallRet:
        7c90e514 c3 ret
        7c90e515 8da42400000000 lea esp,[esp]
        7c90e51c 8d642400 lea esp,[esp]
        ntdll!KiIntSystemCall:
        7c90e520 8d542408 lea edx,[esp+0x8]
        7c90e524 cd2e int 2e
        7c90e526 c3 ret
        7c90e527 90 nop
        ntdll!RtlRaiseException:
        7c90e528 55 push ebp
        7c90e529 8bec mov ebp,esp

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0572ffb4 7c80b729 71a67b03 0012f734 7c90e920 ntdll!KiFastSystemCallRet
0572ffec 00000000 71a5d2c6 00172b50 00000000 kernel32!GetModuleFileNameA+0x1ba

*----> Raw Stack Dump <----*
000000000572ff7c 4a da 90 7c 20 d3 a5 71 - 70 01 00 00 bc ff 72 05 J..| ..qp.....r.
000000000572ff8c b0 ff 72 05 a4 ff 72 05 - 68 d3 a5 71 34 f7 12 00 ..r...r.h..q4...
000000000572ff9c 20 e9 90 7c 50 2b 17 00 - 00 00 00 00 1c 00 00 00 ..|P+..........
000000000572ffac 00 00 a5 71 e8 9d 1a 00 - ec ff 72 05 29 b7 80 7c ...q......r.)..|
000000000572ffbc 03 7b a6 71 34 f7 12 00 - 20 e9 90 7c 50 2b 17 00 .{.q4... ..|P+..
000000000572ffcc 00 b0 fd 7f 00 06 bc 86 - c0 ff 72 05 60 5b a5 85 ..........r.`[..
000000000572ffdc ff ff ff ff d8 9a 83 7c - 30 b7 80 7c 00 00 00 00 .......|0..|....
000000000572ffec 00 00 00 00 00 00 00 00 - c6 d2 a5 71 50 2b 17 00 ...........qP+..
000000000572fffc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000573000c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000573001c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000573002c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000573003c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000573004c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000573005c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000573006c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000573007c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000573008c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000573009c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000057300ac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> State Dump for Thread Id 0xff8 <----*

eax=00000001 ebx=0015f23c ecx=7ffda000 edx=00153374 esi=00174890 edi=7c9010e0
eip=7c90e514 esp=0582ff70 ebp=0582ff88 iopl=0 nv up ei ng nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000286

function: ntdll!KiFastSystemCallRet
        7c90e4fa e829000000 call ntdll!RtlRaiseException (7c90e528)
        7c90e4ff 8b0424 mov eax,[esp]
        7c90e502 8be5 mov esp,ebp
        7c90e504 5d pop ebp
        7c90e505 c3 ret
        7c90e506 8da42400000000 lea esp,[esp]
        7c90e50d 8d4900 lea ecx,[ecx]
        ntdll!KiFastSystemCall:
        7c90e510 8bd4 mov edx,esp
        7c90e512 0f34 sysenter
        ntdll!KiFastSystemCallRet:
        7c90e514 c3 ret
        7c90e515 8da42400000000 lea esp,[esp]
        7c90e51c 8d642400 lea esp,[esp]
        ntdll!KiIntSystemCall:
        7c90e520 8d542408 lea edx,[esp+0x8]
        7c90e524 cd2e int 2e
        7c90e526 c3 ret
        7c90e527 90 nop
        ntdll!RtlRaiseException:
        7c90e528 55 push ebp
        7c90e529 8bec mov ebp,esp

*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\RPCRT4.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0582ff88 77e76b1c 00007530 00110010 7c80903c ntdll!KiFastSystemCallRet
0582ffa8 77e76c97 0015f1b0 0582ffec 7c80b729 RPCRT4!I_RpcBCacheFree+0x489
0582ffb4 7c80b729 00172bc8 00110010 7c80903c RPCRT4!I_RpcBCacheFree+0x604
0582ffec 00000000 77e76c7d 00172bc8 00000000 kernel32!GetModuleFileNameA+0x1ba

*----> Raw Stack Dump <----*
000000000582ff70 1a d2 90 7c 99 6b e7 77 - 01 00 00 00 80 ff 82 05 ...|.k.w........
000000000582ff80 00 5d 1e ee ff ff ff ff - a8 ff 82 05 1c 6b e7 77 .]...........k.w
000000000582ff90 30 75 00 00 10 00 11 00 - 3c 90 80 7c c8 2b 17 00 0u......<..|.+..
000000000582ffa0 c8 2b 17 00 30 75 00 00 - b4 ff 82 05 97 6c e7 77 .+..0u.......l.w
000000000582ffb0 b0 f1 15 00 ec ff 82 05 - 29 b7 80 7c c8 2b 17 00 ........)..|.+..
000000000582ffc0 10 00 11 00 3c 90 80 7c - c8 2b 17 00 00 a0 fd 7f ....<..|.+......
000000000582ffd0 00 06 bc 86 c0 ff 82 05 - 00 bf c7 85 ff ff ff ff ................
000000000582ffe0 d8 9a 83 7c 30 b7 80 7c - 00 00 00 00 00 00 00 00 ...|0..|........
000000000582fff0 00 00 00 00 7d 6c e7 77 - c8 2b 17 00 00 00 00 00 ....}l.w.+......
0000000005830000 c8 00 00 00 58 01 00 00 - ff ee ff ee 02 10 00 00 ....X...........
0000000005830010 00 00 00 00 00 fe 00 00 - 00 00 10 00 00 20 00 00 ............. ..
0000000005830020 00 02 00 00 00 20 00 00 - 2f fc 01 00 ff ef fd 7f ..... ../.......
0000000005830030 0a 00 08 06 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000005830040 00 00 00 00 88 05 83 05 - 0f 00 00 00 f8 ff ff ff ................
0000000005830050 50 00 83 05 50 00 83 05 - 40 06 83 05 00 00 00 00 P...P...@.......
0000000005830060 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000005830070 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000005830080 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000005830090 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000058300a0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> State Dump for Thread Id 0xf44 <----*

eax=72d230e8 ebx=05a2fef8 ecx=0000008f edx=00181628 esi=00000000 edi=7ffdc000
eip=7c90e514 esp=05a2fed0 ebp=05a2ff6c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

function: ntdll!KiFastSystemCallRet
        7c90e4fa e829000000 call ntdll!RtlRaiseException (7c90e528)
        7c90e4ff 8b0424 mov eax,[esp]
        7c90e502 8be5 mov esp,ebp
        7c90e504 5d pop ebp
        7c90e505 c3 ret
        7c90e506 8da42400000000 lea esp,[esp]
        7c90e50d 8d4900 lea ecx,[ecx]
        ntdll!KiFastSystemCall:
        7c90e510 8bd4 mov edx,esp
        7c90e512 0f34 sysenter
        ntdll!KiFastSystemCallRet:
        7c90e514 c3 ret
        7c90e515 8da42400000000 lea esp,[esp]
        7c90e51c 8d642400 lea esp,[esp]
        ntdll!KiIntSystemCall:
        7c90e520 8d542408 lea edx,[esp+0x8]
        7c90e524 cd2e int 2e
        7c90e526 c3 ret
        7c90e527 90 nop
        ntdll!RtlRaiseException:
        7c90e528 55 push ebp
        7c90e529 8bec mov ebp,esp

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\wdmaud.drv -
ChildEBP RetAddr Args to Child
05a2ff6c 7c80a115 00000002 05a2ffa4 00000000 ntdll!KiFastSystemCallRet
05a2ff88 72d2312a 00000002 05a2ffa4 00000000 kernel32!WaitForMultipleObjects+0x18
05a2ffb4 7c80b729 00000000 00000080 00150000 wdmaud!midMessage+0x348
05a2ffec 00000000 72d230e8 00000000 00000000 kernel32!GetModuleFileNameA+0x1ba

*----> Raw Stack Dump <----*
0000000005a2fed0 4a df 90 7c 90 95 80 7c - 02 00 00 00 f8 fe a2 05 J..|...|........
0000000005a2fee0 01 00 00 00 00 00 00 00 - 00 00 00 00 80 00 00 00 ................
0000000005a2fef0 00 00 00 00 00 00 00 00 - 00 02 00 00 ac 01 00 00 ................
0000000005a2ff00 28 ec 3e f1 f9 e9 97 f6 - a4 a4 0d f1 30 ec 3e f1 (.>.........0.>.
0000000005a2ff10 04 00 00 00 94 c7 a5 85 - 14 00 00 00 01 00 00 00 ................
0000000005a2ff20 00 00 00 00 00 00 00 00 - 10 00 00 00 2c c6 a5 85 ............,...
0000000005a2ff30 00 00 00 00 24 a4 63 80 - 00 c0 fd 7f 00 e0 fd 7f ....$.c.........
0000000005a2ff40 00 e0 fd 7f 00 00 00 00 - f8 fe a2 05 00 00 00 00 ................
0000000005a2ff50 02 00 00 00 ec fe a2 05 - 00 00 00 00 dc ff a2 05 ................
0000000005a2ff60 d8 9a 83 7c 80 96 80 7c - 00 00 00 00 88 ff a2 05 ...|...|........
0000000005a2ff70 15 a1 80 7c 02 00 00 00 - a4 ff a2 05 00 00 00 00 ...|............
0000000005a2ff80 ff ff ff ff 00 00 00 00 - b4 ff a2 05 2a 31 d2 72 ............*1.r
0000000005a2ff90 02 00 00 00 a4 ff a2 05 - 00 00 00 00 ff ff ff ff ................
0000000005a2ffa0 00 00 15 00 00 02 00 00 - ac 01 00 00 00 00 00 00 ................
0000000005a2ffb0 1a da 90 7c ec ff a2 05 - 29 b7 80 7c 00 00 00 00 ...|....)..|....
0000000005a2ffc0 80 00 00 00 00 00 15 00 - 00 00 00 00 00 e0 fd 7f ................
0000000005a2ffd0 00 06 bc 86 c0 ff a2 05 - d8 fb 9f 86 ff ff ff ff ................
0000000005a2ffe0 d8 9a 83 7c 30 b7 80 7c - 00 00 00 00 00 00 00 00 ...|0..|........
0000000005a2fff0 00 00 00 00 e8 30 d2 72 - 00 00 00 00 00 00 00 00 .....0.r........
0000000005a30000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> State Dump for Thread Id 0xb5c <----*

eax=0000bd67 ebx=00000218 ecx=0000c133 edx=0000c133 esi=05b2ff98 edi=7e42772b
eip=7c90e514 esp=05b2ff54 ebp=05b2ff78 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

function: ntdll!KiFastSystemCallRet
        7c90e4fa e829000000 call ntdll!RtlRaiseException (7c90e528)
        7c90e4ff 8b0424 mov eax,[esp]
        7c90e502 8be5 mov esp,ebp
        7c90e504 5d pop ebp
        7c90e505 c3 ret
        7c90e506 8da42400000000 lea esp,[esp]
        7c90e50d 8d4900 lea ecx,[ecx]
        ntdll!KiFastSystemCall:
        7c90e510 8bd4 mov edx,esp
        7c90e512 0f34 sysenter
        ntdll!KiFastSystemCallRet:
        7c90e514 c3 ret
        7c90e515 8da42400000000 lea esp,[esp]
        7c90e51c 8d642400 lea esp,[esp]
        ntdll!KiIntSystemCall:
        7c90e520 8d542408 lea edx,[esp+0x8]
        7c90e524 cd2e int 2e
        7c90e526 c3 ret
        7c90e527 90 nop
        ntdll!RtlRaiseException:
        7c90e528 55 push ebp
        7c90e529 8bec mov ebp,esp

*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\WINMM.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
05b2ff78 76b44e31 05b2ff98 00000000 00000000 ntdll!KiFastSystemCallRet
05b2ffb4 7c80b729 00000218 00000200 0000002b WINMM!PlaySoundW+0x7e2
05b2ffec 00000000 76b44dca 00000218 00000000 kernel32!GetModuleFileNameA+0x1ba

*----> Raw Stack Dump <----*
0000000005b2ff54 be 91 41 7e 6b 77 42 7e - 98 ff b2 05 00 00 00 00 ..A~kwB~........
0000000005b2ff64 00 00 00 00 00 00 00 00 - 18 02 00 00 2b 77 42 7e ............+wB~
0000000005b2ff74 00 00 00 00 b4 ff b2 05 - 31 4e b4 76 98 ff b2 05 ........1N.v....
0000000005b2ff84 00 00 00 00 00 00 00 00 - 00 00 00 00 00 02 00 00 ................
0000000005b2ff94 2b 00 00 00 54 08 0a 00 - 1e 00 00 00 00 00 00 00 +...T...........
0000000005b2ffa4 00 00 00 00 f8 18 8d 00 - ed 04 00 00 07 00 00 00 ................
0000000005b2ffb4 ec ff b2 05 29 b7 80 7c - 18 02 00 00 00 02 00 00 ....)..|........
0000000005b2ffc4 2b 00 00 00 18 02 00 00 - 00 d0 fd 7f 00 06 bc 86 +...............
0000000005b2ffd4 c0 ff b2 05 d8 fb 9f 86 - ff ff ff ff d8 9a 83 7c ...............|
0000000005b2ffe4 30 b7 80 7c 00 00 00 00 - 00 00 00 00 00 00 00 00 0..|............
0000000005b2fff4 ca 4d b4 76 18 02 00 00 - 00 00 00 00 00 00 00 80 .M.v............
0000000005b30004 00 00 00 80 00 00 00 80 - 00 00 00 80 00 00 00 80 ................
0000000005b30014 00 00 00 80 00 00 00 80 - 00 00 00 80 00 00 00 80 ................
0000000005b30024 00 00 00 80 00 00 00 80 - 00 00 00 80 00 00 00 80 ................
0000000005b30034 00 00 00 80 00 00 00 80 - 00 00 00 80 00 00 00 80 ................
0000000005b30044 00 00 00 80 00 00 00 80 - 00 00 00 80 00 00 00 80 ................
0000000005b30054 00 00 00 80 00 00 00 80 - 00 00 00 80 00 00 00 80 ................
0000000005b30064 00 00 00 80 00 00 00 80 - 00 00 00 80 00 00 00 00 ................
0000000005b30074 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 80 ................
0000000005b30084 26 26 26 80 41 41 41 80 - 17 17 17 80 35 35 35 80 &&&.AAA.....555.

*----> State Dump for Thread Id 0xd48 <----*

eax=77e76c7d ebx=00000000 ecx=7c910222 edx=ffffffff esi=00153338 edi=00000000
eip=7c90e514 esp=06f1fe18 ebp=06f1ff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

function: ntdll!KiFastSystemCallRet
        7c90e4fa e829000000 call ntdll!RtlRaiseException (7c90e528)
        7c90e4ff 8b0424 mov eax,[esp]
        7c90e502 8be5 mov esp,ebp
        7c90e504 5d pop ebp
        7c90e505 c3 ret
        7c90e506 8da42400000000 lea esp,[esp]
        7c90e50d 8d4900 lea ecx,[ecx]
        ntdll!KiFastSystemCall:
        7c90e510 8bd4 mov edx,esp
        7c90e512 0f34 sysenter
        ntdll!KiFastSystemCallRet:
        7c90e514 c3 ret
        7c90e515 8da42400000000 lea esp,[esp]
        7c90e51c 8d642400 lea esp,[esp]
        ntdll!KiIntSystemCall:
        7c90e520 8d542408 lea edx,[esp+0x8]
        7c90e524 cd2e int 2e
        7c90e526 c3 ret
        7c90e527 90 nop
        ntdll!RtlRaiseException:
        7c90e528 55 push ebp
        7c90e529 8bec mov ebp,esp

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
06f1ff80 77e76caf 06f1ffa8 77e76ad1 00153338 ntdll!KiFastSystemCallRet
06f1ff88 77e76ad1 00153338 0582fc94 7c90e920 RPCRT4!I_RpcBCacheFree+0x61c
06f1ffa8 77e76c97 0015f1b0 06f1ffec 7c80b729 RPCRT4!I_RpcBCacheFree+0x43e
06f1ffb4 7c80b729 0017cfe0 0582fc94 7c90e920 RPCRT4!I_RpcBCacheFree+0x604
06f1ffec 00000000 77e76c7d 0017cfe0 00000000 kernel32!GetModuleFileNameA+0x1ba

*----> Raw Stack Dump <----*
0000000006f1fe18 aa da 90 7c e3 65 e7 77 - 28 01 00 00 74 ff f1 06 ...|.e.w(...t...
0000000006f1fe28 00 00 00 00 40 5c 18 00 - 50 ff f1 06 00 00 00 00 ....@\..P.......
0000000006f1fe38 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000006f1fe48 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000006f1fe58 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000006f1fe68 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000006f1fe78 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000006f1fe88 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000006f1fe98 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000006f1fea8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000006f1feb8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000006f1fec8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000006f1fed8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000006f1fee8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000006f1fef8 08 00 00 00 04 00 00 00 - 28 dc 2c f4 f9 e9 97 f6 ........(.,.....
0000000006f1ff08 a4 a4 0d f1 30 dc 2c f4 - 04 00 00 00 44 1f cf 85 ....0.,.....D...
0000000006f1ff18 24 dc 2c f4 8d 9e 4f 80 - 95 9e 4f 80 14 1f cf 85 $.,...O...O.....
0000000006f1ff28 a8 1d cf 85 80 ff f1 06 - ae df e7 77 48 ff f1 06 ...........wH...
0000000006f1ff38 be df e7 77 e0 10 90 7c - b0 24 18 00 e0 cf 17 00 ...w...|.$......
0000000006f1ff48 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]......

Notes
(0000192) mark (administrator) 23 Mar 10 15:10	Any idea if this still happens with a more up to date release?

(0000198) JNicoll (reporter) 23 Mar 10 23:12	I'm not sure. I think I've seen instances when either undelete doesn't work at all or doesn't process as many items as you'd expect (if one originally, say, expanded a threaded set of items and selected them all). I've tended to be cautious using this recently - expanding a set and then selecting only the child item(s) then working back up the tree one at a time. I'd need to experiment a bit and let you know. It'll be a few days...

Issue History
Date Modified	Username	Field	Change
02 Dec 09 16:52	JNicoll	New Issue
15 Dec 09 14:37	mark	Status	new => acknowledged
23 Mar 10 15:10	mark	Note Added: 0000192
23 Mar 10 15:10	mark	Status	acknowledged => feedback
23 Mar 10 23:12	JNicoll	Note Added: 0000198

Relationships