hallo zusammen
hoffe das ich es mal richtig gepostet habe
Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINXP\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols ;C:\symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_qfe.080814-1300
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805634c0
Debug session time: Sun Jun 14 00:29:18.734 2009 (GMT+2)
System Uptime: 0 days 0:36:34.358
Loading Kernel Symbols
..................................................................... .......................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details
Loading unloaded module list
.............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1A, {41284, dd345001, b005, c0c00000}
*** ERROR: Symbol file could not be found. Defaulted to export symbols for halmacpi.dll -
Probably caused by : memory_corruption ( nt!MiLocateWsle+c0 )
Followup: MachineOwner
---------
2: kd> .reload
Loading Kernel Symbols
..................................................................... .......................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details
Loading unloaded module list
.............
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 00041284, A PTE or the working set list is corrupt.
Arg2: dd345001
Arg3: 0000b005
Arg4: c0c00000
Debugging Details:
------------------
BUGCHECK_STR: 0x1a_41284
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: Bioshock.exe
LAST_CONTROL_TRANSFER: from 80529e59 to 8053767a
STACK_TEXT:
b7b0fa2c 80529e59 0000001a 00041284 dd345001 nt!KeBugCheckEx+0x1b
b7b0fa64 804f49d5 0000b005 89392ed0 8a319f80 nt!MiLocateWsle+0xc0
b7b0faa4 805709ac dd345000 891a85a0 00000001 nt!MmUnmapViewInSystemCache+0xc2
b7b0fabc 804f48c0 8a319f80 89392ed0 00000001 nt!CcUnmapVacb+0x2a
b7b0faf0 804f5b06 00100000 00000001 00000000 nt!CcUnmapVacbArray+0x117
b7b0fb58 804f4fb2 89392ed0 0b600000 00000000 nt!CcGetVacbMiss+0x98
b7b0fb80 805df691 00392ed0 0b600000 00000000 nt!CcGetVirtualAddress+0x83
b7b0fc1c f7b72e9a 891bacc0 0b600000 00002a00 nt!CcFastCopyRead+0x27f
b7b0fc74 f746e9a2 891bacc0 b7b0fcd8 0000aa00 Ntfs!NtfsCopyReadA+0x1bf
b7b0fc9c 8057cf41 891bacc0 b7b0fcd8 0000aa00 sr!SrFastIoRead+0x40
b7b0fd38 804dd99f 00000384 00000000 00000000 nt!NtReadFile+0x2c4
b7b0fd38 7c91e4f4 00000384 00000000 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
1798ff74 00000000 00000000 00000000 00000000 0x7c91e4f4
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiLocateWsle+c0
80529e59 006a00 add byte ptr [edx],ch
SYMBOL_STACK_INDEX: 1
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 48a40b55
SYMBOL_NAME: nt!MiLocateWsle+c0
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: 0x1a_41284_nt!MiLocateWsle+c0
BUCKET_ID: 0x1a_41284_nt!MiLocateWsle+c0
Followup: MachineOwner
---------
der hersteller hat 2 mal den Speicher gewechselt
Betriebssystemname Microsoft Windows XP Professional
Version 5.1.2600 Service Pack 3 Build 2600
Betriebssystemhersteller Microsoft Corporation
Systemname CALENDE-015E27A
Systemhersteller ECS
Systemmodell GF7100/7050PVT-M3
Systemtyp X86-basierter PC
Prozessor x86 Family 6 Model 15 Stepping 11 GenuineIntel ~2400 Mhz
BIOS-Version/-Datum American Megatrends Inc. 080015, 07.07.2008
SMBIOS-Version 2.5
Startgerät \Device\HarddiskVolume1
Gebietsschema Deutschland
Hardwareabstraktionsebene Version = "5.1.2600.5512 (xpsp.080413-2111)"
Zeitzone Westeuropäische Sommerzeit
Gesamter realer Speicher 4.096,00 MB
Verfügbarer realer Speicher 2,82 GB
Gesamter virtueller Speicher 2,00 GB
Verfügbarer virtueller Speicher 1,96 GB
Größe der Auslagerungsdatei 3,10 GB
valentino.l Gast |