Stop Msg: 0x0000001E in RDR.SYS Caused by Corrupted SMBs
Article ID: 149395
Article Last Modified on 11/1/2006
APPLIES TO
- Microsoft Windows NT Workstation 3.5
- Microsoft Windows NT Workstation 3.51
- Microsoft Windows NT Server 3.5
- Microsoft Windows NT Server 3.51
This article was previously published under Q149395
SYMPTOMS
A Windows NT Server or Workstation shows the following Stop error message
if it receives a corrupted Server Message Block (SMB) while connecting to
a remote computer:
STOP: 0x0000001E (0xC0000005, 0x801353D3, 0x0, 0x00001104)
KMODE_EXCEPTION_NOT_HANDLED - RDR.SYS
Prior to the appearance of this error message, the system event log
records the following information:
Event ID: 8006 Source: Rdr Type: Warning
The browser has received an illegal datagram from the remote computer
<computer name> to name <domain name> on transport Nbf <adapter>.
The data is the datagram.
The Stop message occurs on Windows NT Servers and Workstations that are
connected to remote computers using NetBEUI.
CAUSE
The Windows NT machine received a corrupted SMB with an improper word
count. The SMB from the remote computer may have been corrupted by an
intermediate router.
STATUS
Microsoft has confirmed this to be a problem in Windows NT versions 3.5
and 3.51. This problem was corrected in the latest Windows NT 3.51 U.S.
Service Pack. For information on obtaining the Service Pack, query on the
following word in the Microsoft Knowledge Base (without the spaces):
Additional query words: 3.50 3.51 prodnt ntblue debug
Keywords: kbnetwork KB149395