Wątek zamknięty

Blue screen - problem z plikiem ntoskrnl.exe.

 
Macu
Nowy
Liczba postów: 2
Post: #1

Blue screen - problem z plikiem ntoskrnl.exe.


Witam, ostatnio pojawił mi się blue screen. Według debugera problem jest z plikiem ntoskrnl.exe.
Wie ktoś jak to naprawić. Z góry dziękuje za pomoc i pozdrawiam

Oto raport z Windows Debuger:

Kod:
Microsoft (R) Windows Debugger Version 6.11.0001.402 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C: \Windows\Minidump\071613-44959-01.dmp]
Mini Kernel Dump File:  Only registers and stack trace are available

Symbol search path is:  *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path.           *
* Use .symfix to have the debugger choose a symbol path.                   *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:  
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
*                                                                   *
* The Symbol Path can be set by:                                     *
*   using the _NT_SYMBOL_PATH environment variable.                 *
*   using the -y <symbol_path> argument when starting the debugger. *
*   using .sympath and .sympath+                                    *
*********************************************************************
Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** WARNING:  Unable to verify timestamp for ntoskrnl.exe
*** ERROR:  Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product:  WinNt, suite:  TerminalServer SingleUserTS Personal
Built by:  7600.17273.amd64fre.win7_gdr.130318-1532
Machine Name:
Kernel base = 0xfffff800`03064000 PsLoadedModuleList = 0xfffff800`032a0e70
Debug session time:  Tue Jul 16 21: 14: 43.523 2013 (GMT+2)
System Uptime:  0 days 4: 32: 46.694
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
*                                                                   *
* The Symbol Path can be set by:                                     *
*   using the _NT_SYMBOL_PATH environment variable.                 *
*   using the -y <symbol_path> argument when starting the debugger. *
*   using .sympath and .sympath+                                    *
*********************************************************************
Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** WARNING:  Unable to verify timestamp for ntoskrnl.exe
*** ERROR:  Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
................................................................
.........................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C4, {91, 2, fffffa8008834b60, 0}

*** WARNING:  Unable to verify timestamp for mssmbios.sys
*** ERROR:  Module load completed but symbols could not be loaded for mssmbios.sys
***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced:  nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced:  nt!KPRCB                                      ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced:  nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced:  nt!KPRCB                                      ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced:  nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced:  nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced:  nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced:  nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
*                                                                   *
* The Symbol Path can be set by:                                     *
*   using the _NT_SYMBOL_PATH environment variable.                 *
*   using the -y <symbol_path> argument when starting the debugger. *
*   using .sympath and .sympath+                                    *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
*                                                                   *
* The Symbol Path can be set by:                                     *
*   using the _NT_SYMBOL_PATH environment variable.                 *
*   using the -y <symbol_path> argument when starting the debugger. *
*   using .sympath and .sympath+                                    *
*********************************************************************
Probably caused by :  ntoskrnl.exe ( nt+6f880 )

Followup:  MachineOwner
---------
Notatka została dodana 16.07.2013 22:47. Ostatnia edycja dokonana 16.07.2013 22:47 przez Nostromo:

Logi wstawiamy w znaczniki code.
Poprawiłem.

(Ten post był ostatnio modyfikowany: 16.07.2013 21:27 przez Macu.)

16.07.2013 20:56

Znajdź wszystkie posty użytkownika
thermalfake
Ostatni Mohikanin

Liczba postów: 13.580
Post: #2

RE: Blue screen - problem z plikiem ntoskrnl.exe.


Plik dmp jest źle zdebugowany, do niczego się nie nadaje. Podrzuć pliki to sam je sobie posprawdzam. Dwa - ntoskrnl.exe czyli jądro systemowe przechwytuje błąd ale nie jest sprawcą zamieszania.

[Obrazek: 2089620800_1406976151.png]

W zamian za pomoc oczekuję poprawnej pisowni. Stop niechlujstwu.
Jak mądrze zadawać pytania? - przejrzyj poradnik na forum.
Nie udzielam porad via PW.

17.07.2013 12:32

Znajdź wszystkie posty użytkownika
Macu
Nowy
Liczba postów: 2
Post: #3

RE: Blue screen - problem z plikiem ntoskrnl.exe.


(17.07.2013 12:32)thermalfake napisał(a):  Plik dmp jest źle zdebugowany, do niczego się nie nadaje. Podrzuć pliki to sam je sobie posprawdzam. Dwa - ntoskrnl.exe czyli jądro systemowe przechwytuje błąd ale nie jest sprawcą zamieszania.

Dzięki za odpowiedź. Trzymaj plik dmp:

http://www.sendspace.pl/file/48c6be778b8...3-44959-01
(Ten post był ostatnio modyfikowany: 17.07.2013 13:32 przez Macu.)

17.07.2013 13:32

Znajdź wszystkie posty użytkownika
thermalfake
Ostatni Mohikanin

Liczba postów: 13.580
Post: #4

RE: Blue screen - problem z plikiem ntoskrnl.exe.


DRIVER_VERIFIER_DETECTED_VIOLATION

Powoduje go jakiś sterownik urządzenia działający wadliwie, może to być tez jakiś sterownik wirtualnego urządzenia.
http://msdn.microsoft.com/en-us/library/...85%29.aspx

Masz na wstępie do wykonania następujące rzeczy:
- zainstalować SP1 gdyż go nie ma
- uruchomić sprawdzenie certyfikowanych podpisów WHQL dla sterowników, używać sterowników wydanych tylko przez producenta lapka
- uruchomić weryfikację sterowników
Kod:
- Kliknij Start, wpisz cmd a potem verifier.exe
- Zaznacz opcję "Utwórz ustawienia niestandardowe".
- Kliknij "Wybierz indywidualne ustawienia z pełnej listy".
- Zaznacz opcje -> Pula specjalna - Śledzenie puli - Wymuszanie sprawdzenia IRQL.
- Kliknij "Wybierz nazwy sterowników z listy" po czym chwilę czekamy.
- Zaznaczamy wszystkie sterowniki nie pochodzące od Microsoft (sortujemy wg kolumny Dostawca).
- Klikamy zakończ, uruchamiamy ponownie komputer i czekamy pracując sobie na złe lub dobre wieści przez kilka godzin czy system się wysypie bsodem czy nie.
- Wpisujemy verifier.exe /reset aby zakończyć diagnostykę sterowników i uruchamiamy sprzęt ponownie.
- odstawić na czas testów TuneUpUtilites, Daemon Tools i nawet AVG, to są wskazania doświadczonych specjalistów z tytułami z zakresu inżynierii systemów operacyjnych
- jest jakaś dodatkowa infekcja - ajrjqzq7.SYS



Zdebugowany bsod po obróbce, błąd wypluty przez aplikację zarządzającą touchpadem. Debugger wskazuje na sterownik grafiki - widzę, że pociągnięty refetent nvidii a to często rodzi problemy.

Kod:
Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C: \Users\user\Downloads\071613-44959-01.dmp]
Mini Kernel Dump File:  Only registers and stack trace are available

Symbol search path is:  symsrv*symsrv.dll*c: \symb*http: //msdl.microsoft.com/download/symbols
Executable search path is:  
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product:  WinNt, suite:  TerminalServer SingleUserTS Personal
Built by:  7600.17273.amd64fre.win7_gdr.130318-1532
Machine Name:
Kernel base = 0xfffff800`03064000 PsLoadedModuleList = 0xfffff800`032a0e70
Debug session time:  Tue Jul 16 21: 14: 43.523 2013 (UTC + 2: 00)
System Uptime:  0 days 4: 32: 46.694
Loading Kernel Symbols
...............................................................
................................................................
.........................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C4, {91, 2, fffffa8008834b60, 0}

Unable to load image \SystemRoot\system32\DRIVERS\nvlddmkm.sys, Win32 error 0n2
*** WARNING:  Unable to verify timestamp for nvlddmkm.sys
*** ERROR:  Module load completed but symbols could not be loaded for nvlddmkm.sys
Probably caused by :  nvlddmkm.sys ( nvlddmkm+1bb8c5 )

Followup:  MachineOwner
---------

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught.  This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1:  0000000000000091, A driver switched stacks using a method that is not supported by
    the operating system. The only supported way to extend a kernel
    mode stack is by using KeExpandKernelStackAndCallout.
Arg2:  0000000000000002
Arg3:  fffffa8008834b60
Arg4:  0000000000000000

Debugging Details:
------------------


BUGCHECK_STR:   0xc4_91

CUSTOMER_CRASH_COUNT:   1

DEFAULT_BUCKET_ID:   VISTA_DRIVER_FAULT

PROCESS_NAME:   ETDCtrl.exe

CURRENT_IRQL:   2

LAST_CONTROL_TRANSFER:   from fffff80003127aea to fffff800030d3880

STACK_TEXT:  
fffff800`04764fe8 fffff800`03127aea :  00000000`000000c4 00000000`00000091 00000000`00000002 fffffa80`08834b60 :  nt!KeBugCheckEx
fffff800`04764ff0 fffff800`03073405 :  00000000`00000000 fffff800`04765120 00000000`00000003 00000000`00000000 :  nt! ? : FNODOBFM: `string'+0x4894
fffff800`04765030 fffff800`030737c9 :  fffff880`0ac1d000 fffff880`0ac26000 fffff800`047650a0 fffff880`04c1e87d :  nt!RtlEnoughStackSpaceForStackCapture+0x15
fffff800`04765060 fffff800`03196bdb :  00000000`00000001 fffff800`047650e0 00000000`00000000 fffff880`04bd226b :  nt!RtlWalkFrameChain+0x59
fffff800`04765090 fffff880`04bd48c5 :  00000000`00000000 fffff800`04765120 fffffa80`06a74000 fffff880`04c20b8b :  nt!RtlCaptureStackBackTrace+0x4b
fffff800`047650c0 00000000`00000000 :  fffff800`04765120 fffffa80`06a74000 fffff880`04c20b8b fffffa80`07fbc000 :  nvlddmkm+0x1bb8c5


STACK_COMMAND:   kb

FOLLOWUP_IP:  
nvlddmkm+1bb8c5
fffff880`04bd48c5 ?              ?

SYMBOL_STACK_INDEX:   5

SYMBOL_NAME:   nvlddmkm+1bb8c5

FOLLOWUP_NAME:   MachineOwner

MODULE_NAME:  nvlddmkm

IMAGE_NAME:   nvlddmkm.sys

DEBUG_FLR_IMAGE_TIMESTAMP:   51427b3c

FAILURE_BUCKET_ID:   X64_0xc4_91_nvlddmkm+1bb8c5

BUCKET_ID:   X64_0xc4_91_nvlddmkm+1bb8c5

Followup:  MachineOwner
---------

rax=0000000000000002 rbx=0000000000000000 rcx=00000000000000c4
rdx=0000000000000091 rsi=0000000000000009 rdi=0000000000000001
rip=fffff800030d3880 rsp=fffff80004764fe8 rbp=fffff800047650e0
r8=0000000000000002  r9=fffffa8008834b60 r10=fffff88004d99a0c
r11=fffff80004764fc0 r12=0000000000000100 r13=0000000000000400
r14=0000000000001100 r15=0000000000000001
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
nt!KeBugCheckEx:
fffff800`030d3880 48894c2408      mov     qword ptr [rsp+8],rcx ss: fffff800`04764ff0=00000000000000c4
Child-SP          RetAddr           :  Args to Child                                                           :  Call Site
fffff800`04764fe8 fffff800`03127aea :  00000000`000000c4 00000000`00000091 00000000`00000002 fffffa80`08834b60 :  nt!KeBugCheckEx
fffff800`04764ff0 fffff800`03073405 :  00000000`00000000 fffff800`04765120 00000000`00000003 00000000`00000000 :  nt! ? : FNODOBFM: `string'+0x4894
fffff800`04765030 fffff800`030737c9 :  fffff880`0ac1d000 fffff880`0ac26000 fffff800`047650a0 fffff880`04c1e87d :  nt!RtlEnoughStackSpaceForStackCapture+0x15
fffff800`04765060 fffff800`03196bdb :  00000000`00000001 fffff800`047650e0 00000000`00000000 fffff880`04bd226b :  nt!RtlWalkFrameChain+0x59
fffff800`04765090 fffff880`04bd48c5 :  00000000`00000000 fffff800`04765120 fffffa80`06a74000 fffff880`04c20b8b :  nt!RtlCaptureStackBackTrace+0x4b
fffff800`047650c0 00000000`00000000 :  fffff800`04765120 fffffa80`06a74000 fffff880`04c20b8b fffffa80`07fbc000 :  nvlddmkm+0x1bb8c5
start             end                 module name
fffff800`00b9a000 fffff800`00ba4000   kdcom    kdcom.dll    Sat Feb 05 13: 21: 45 2011 (4D4D40D9)
fffff800`0301b000 fffff800`03064000   hal      hal.dll      Tue Jul 14 03: 27: 36 2009 (4A5BDF08)
fffff800`03064000 fffff800`0363e000   nt       ntkrnlmp.exe Tue Mar 19 04: 32: 06 2013 (5147DC36)
fffff880`00c02000 fffff880`00c46000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 03: 29: 10 2009 (4A5BDF66)
fffff880`00c46000 fffff880`00c5a000   PSHED    PSHED.dll    Tue Jul 14 03: 32: 23 2009 (4A5BE027)
fffff880`00c5a000 fffff880`00cb8000   CLFS     CLFS.SYS     Tue Jul 14 01: 19: 57 2009 (4A5BC11D)
fffff880`00cb8000 fffff880`00d78000   CI       CI.dll       Tue Jul 14 03: 32: 13 2009 (4A5BE01D)
fffff880`00d78000 fffff880`00dd6000   msrpc    msrpc.sys    Tue Jul 14 01: 21: 32 2009 (4A5BC17C)
fffff880`00dd6000 fffff880`00df4000   tdx      tdx.sys      Tue Jul 14 01: 21: 15 2009 (4A5BC16B)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Tue Jul 14 01: 19: 51 2009 (4A5BC117)
fffff880`00e33000 fffff880`00e48000   partmgr  partmgr.sys  Sat Mar 17 06: 12: 46 2012 (4F641D4E)
fffff880`00e48000 fffff880`00e54000   BATTC    BATTC.SYS    Tue Jul 14 01: 31: 01 2009 (4A5BC3B5)
fffff880`00e54000 fffff880`00e69000   volmgr   volmgr.sys   Tue Jul 14 01: 19: 57 2009 (4A5BC11D)
fffff880`00e69000 fffff880`00ec5000   volmgrx  volmgrx.sys  Tue Jul 14 01: 20: 33 2009 (4A5BC141)
fffff880`00ec5000 fffff880`00ecc000   pciide   pciide.sys   Tue Jul 14 01: 19: 49 2009 (4A5BC115)
fffff880`00ecc000 fffff880`00edc000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 01: 19: 48 2009 (4A5BC114)
fffff880`00edc000 fffff880`00ef6000   mountmgr mountmgr.sys Tue Jul 14 01: 19: 54 2009 (4A5BC11A)
fffff880`00efb000 fffff880`00fbd000   Wdf01000 Wdf01000.sys Thu Jul 26 04: 25: 13 2012 (5010AA89)
fffff880`00fbd000 fffff880`00fcd000   WDFLDR   WDFLDR.SYS   Thu Jul 26 04: 29: 04 2012 (5010AB70)
fffff880`00fcd000 fffff880`00fda000   vdrvroot vdrvroot.sys Tue Jul 14 02: 01: 31 2009 (4A5BCADB)
fffff880`00fda000 fffff880`00fee000   fileinfo fileinfo.sys Tue Jul 14 01: 34: 25 2009 (4A5BC481)
fffff880`00fee000 fffff880`00fff000   Npfs     Npfs.SYS     Tue Jul 14 01: 19: 48 2009 (4A5BC114)
fffff880`01000000 fffff880`01009000   WMILIB   WMILIB.SYS   Tue Jul 14 01: 19: 51 2009 (4A5BC117)
fffff880`01009000 fffff880`01038000   SCSIPORT SCSIPORT.SYS Tue Jul 14 02: 01: 04 2009 (4A5BCAC0)
fffff880`01038000 fffff880`0108f000   ACPI     ACPI.sys     Tue Jul 14 01: 19: 34 2009 (4A5BC106)
fffff880`0108f000 fffff880`01099000   msisadrv msisadrv.sys Tue Jul 14 01: 19: 26 2009 (4A5BC0FE)
fffff880`01099000 fffff880`010a2000   compbatt compbatt.sys Tue Jul 14 01: 31: 02 2009 (4A5BC3B6)
fffff880`010a3000 fffff880`01200000   sptd     sptd.sys     Tue Aug 24 08: 13: 12 2010 (4C7362F8)
fffff880`01209000 fffff880`0135d000   iaStor   iaStor.sys   Tue Sep 14 03: 23: 32 2010 (4C8ECE94)
fffff880`0135d000 fffff880`01366000   atapi    atapi.sys    Tue Jul 14 01: 19: 47 2009 (4A5BC113)
fffff880`01366000 fffff880`01390000   ataport  ataport.SYS  Tue Jul 14 01: 19: 52 2009 (4A5BC118)
fffff880`01390000 fffff880`0139b000   msahci   msahci.sys   Tue Jul 14 02: 01: 01 2009 (4A5BCABD)
fffff880`0139b000 fffff880`013a6000   amdxata  amdxata.sys  Fri Mar 19 17: 18: 18 2010 (4BA3A3CA)
fffff880`013a6000 fffff880`013f2000   fltmgr   fltmgr.sys   Tue Jul 14 01: 19: 59 2009 (4A5BC11F)
fffff880`01400000 fffff880`0140d000   TDI      TDI.SYS      Tue Jul 14 01: 21: 18 2009 (4A5BC16E)
fffff880`0140e000 fffff880`015af000   Ntfs     Ntfs.sys     Sat Mar 02 04: 14: 02 2013 (51316E7A)
fffff880`015af000 fffff880`015c9000   ksecdd   ksecdd.sys   Sat Jun 02 04: 47: 00 2012 (4FC97EA4)
fffff880`015c9000 fffff880`015f4000   ksecpkg  ksecpkg.sys  Sat Jun 02 05: 20: 48 2012 (4FC98690)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Tue Jul 14 01: 21: 46 2009 (4A5BC18A)
fffff880`01673000 fffff880`016e5000   cng      cng.sys      Sat Jun 02 05: 19: 52 2012 (4FC98658)
fffff880`016e5000 fffff880`016f6000   pcw      pcw.sys      Tue Jul 14 01: 19: 27 2009 (4A5BC0FF)
fffff880`016f6000 fffff880`01700000   Fs_Rec   Fs_Rec.sys   Thu Mar 01 04: 54: 36 2012 (4F4EF2FC)
fffff880`01700000 fffff880`017f2000   ndis     ndis.sys     Tue Jul 14 01: 21: 40 2009 (4A5BC184)
fffff880`017f2000 fffff880`017fd000   Msfs     Msfs.SYS     Tue Jul 14 01: 19: 47 2009 (4A5BC113)
fffff880`01803000 fffff880`01a00000   tcpip    tcpip.sys    Fri Jan 04 04: 03: 34 2013 (50E64686)
fffff880`01a00000 fffff880`01a13000   avgidsha avgidsha.sys Mon Oct 15 03: 22: 54 2012 (507B656E)
fffff880`01a17000 fffff880`01a60000   fwpkclnt fwpkclnt.sys Fri Jan 04 04: 00: 34 2013 (50E645D2)
fffff880`01a60000 fffff880`01aac000   volsnap  volsnap.sys  Thu Sep 06 16: 55: 02 2012 (5048B946)
fffff880`01aac000 fffff880`01ab4000   spldr    spldr.sys    Mon May 11 18: 56: 27 2009 (4A0858BB)
fffff880`01ab4000 fffff880`01aee000   rdyboost rdyboost.sys Sat Jun 19 06: 25: 06 2010 (4C1C46A2)
fffff880`01aee000 fffff880`01af8000   nvpciflt nvpciflt.sys Fri Mar 15 02: 37: 25 2013 (51427B55)
fffff880`01af8000 fffff880`01b0a000   mup      mup.sys      Tue Jul 14 01: 23: 45 2009 (4A5BC201)
fffff880`01b0a000 fffff880`01b13000   hwpolicy hwpolicy.sys Tue Jul 14 01: 19: 22 2009 (4A5BC0FA)
fffff880`01b13000 fffff880`01b4d000   fvevol   fvevol.sys   Thu Jan 24 04: 02: 05 2013 (5100A42D)
fffff880`01b4d000 fffff880`01b63000   disk     disk.sys     Tue Jul 14 01: 19: 57 2009 (4A5BC11D)
fffff880`01b63000 fffff880`01b93000   CLASSPNP CLASSPNP.SYS Tue Jul 14 01: 19: 58 2009 (4A5BC11E)
fffff880`01b93000 fffff880`01b9f000   avgrkx64 avgrkx64.sys Fri Sep 14 02: 41: 40 2012 (50527D44)
fffff880`01b9f000 fffff880`01bd7000   avgloga  avgloga.sys  Fri Sep 21 03: 23: 51 2012 (505BC1A7)
fffff880`01bd7000 fffff880`01bf6000   avgmfx64 avgmfx64.sys Thu Nov 15 23: 03: 50 2012 (50A566C6)
fffff880`01bf6000 fffff880`01bff000   rdprefmp rdprefmp.sys Tue Jul 14 02: 16: 35 2009 (4A5BCE63)
fffff880`02e13000 fffff880`02e3d000   cdrom    cdrom.sys    Tue Jul 14 01: 19: 54 2009 (4A5BC11A)
fffff880`02e3d000 fffff880`02e46000   Null     Null.SYS     Tue Jul 14 01: 19: 37 2009 (4A5BC109)
fffff880`02e46000 fffff880`02e4d000   Beep     Beep.SYS     Tue Jul 14 02: 00: 13 2009 (4A5BCA8D)
fffff880`02e4d000 fffff880`02e5b000   vga      vga.sys      Tue Jul 14 01: 38: 47 2009 (4A5BC587)
fffff880`02e5b000 fffff880`02e80000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 01: 38: 51 2009 (4A5BC58B)
fffff880`02e80000 fffff880`02e90000   watchdog watchdog.sys Tue Jul 14 01: 37: 35 2009 (4A5BC53F)
fffff880`02e90000 fffff880`02e99000   RDPCDD   RDPCDD.sys   Tue Jul 14 02: 16: 34 2009 (4A5BCE62)
fffff880`02e99000 fffff880`02ea2000   rdpencdd rdpencdd.sys Tue Jul 14 02: 16: 34 2009 (4A5BCE62)
fffff880`02ea2000 fffff880`02ff6000   dump_iaStor dump_iaStor.sys Tue Sep 14 03: 23: 32 2010 (4C8ECE94)
fffff880`04000000 fffff880`04014000   termdd   termdd.sys   Tue Jul 14 02: 16: 36 2009 (4A5BCE64)
fffff880`04014000 fffff880`04065000   rdbss    rdbss.sys    Tue Jul 14 01: 24: 09 2009 (4A5BC219)
fffff880`04065000 fffff880`04071000   nsiproxy nsiproxy.sys Tue Jul 14 01: 21: 02 2009 (4A5BC15E)
fffff880`04071000 fffff880`0407c000   mssmbios mssmbios.sys Tue Jul 14 01: 31: 10 2009 (4A5BC3BE)
fffff880`04083000 fffff880`040b7000   avgtdia  avgtdia.sys  Fri Sep 21 03: 25: 33 2012 (505BC20D)
fffff880`040b7000 fffff880`040fc000   netbt    netbt.sys    Tue Jul 14 01: 21: 28 2009 (4A5BC178)
fffff880`040fc000 fffff880`04185000   afd      afd.sys      Wed Dec 28 04: 59: 08 2011 (4EFA940C)
fffff880`04185000 fffff880`0418e000   wfplwf   wfplwf.sys   Tue Jul 14 02: 09: 26 2009 (4A5BCCB6)
fffff880`0418e000 fffff880`041b4000   pacer    pacer.sys    Tue Jul 14 02: 09: 41 2009 (4A5BCCC5)
fffff880`041b4000 fffff880`041ca000   vwififlt vwififlt.sys Tue Jul 14 02: 07: 22 2009 (4A5BCC3A)
fffff880`041ca000 fffff880`041d9000   netbios  netbios.sys  Tue Jul 14 02: 09: 26 2009 (4A5BCCB6)
fffff880`041d9000 fffff880`041f4000   wanarp   wanarp.sys   Tue Jul 14 02: 10: 21 2009 (4A5BCCED)
fffff880`041f4000 fffff880`041ff000   ElRawDsk ElRawDsk.sys Tue Oct 26 11: 34: 13 2010 (4CC6A095)
fffff880`04200000 fffff880`04221000   raspptp  raspptp.sys  Tue Jul 14 02: 10: 18 2009 (4A5BCCEA)
fffff880`04221000 fffff880`0423b000   rassstp  rassstp.sys  Tue Jul 14 02: 10: 25 2009 (4A5BCCF1)
fffff880`0423b000 fffff880`0427e000   ks       ks.sys       Thu Mar 04 05: 32: 25 2010 (4B8F37D9)
fffff880`0427e000 fffff880`042ab000   mrxsmb   mrxsmb.sys   Wed May 04 04: 51: 06 2011 (4DC0BF1A)
fffff880`042c5000 fffff880`042d4000   discache discache.sys Tue Jul 14 01: 37: 18 2009 (4A5BC52E)
fffff880`042d4000 fffff880`042f2000   dfsc     dfsc.sys     Wed Apr 27 04: 57: 39 2011 (4DB78623)
fffff880`042f2000 fffff880`04303000   blbdrive blbdrive.sys Tue Jul 14 01: 35: 59 2009 (4A5BC4DF)
fffff880`04303000 fffff880`04334000   avgldx64 avgldx64.sys Tue Oct 02 03: 05: 50 2012 (506A3DEE)
fffff880`04334000 fffff880`04368000   avgidsdrivera avgidsdrivera.sys Mon Oct 22 12: 47: 11 2012 (5085242F)
fffff880`04368000 fffff880`04371000   atkwmiacpi64 atkwmiacpi64.sys Mon Jul 26 07: 56: 49 2010 (4C4D23A1)
fffff880`04371000 fffff880`04397000   tunnel   tunnel.sys   Tue Jul 14 02: 09: 37 2009 (4A5BCCC1)
fffff880`04397000 fffff880`043c6000   ndiswan  ndiswan.sys  Tue Jul 14 02: 10: 11 2009 (4A5BCCE3)
fffff880`043c6000 fffff880`043e1000   raspppoe raspppoe.sys Tue Jul 14 02: 10: 17 2009 (4A5BCCE9)
fffff880`04400000 fffff880`04444000   ajrjqzq7 ajrjqzq7.SYS Sat Mar 21 15: 48: 32 2009 (49C4FE40)
fffff880`04444000 fffff880`04448500   CmBatt   CmBatt.sys   Tue Jul 14 01: 31: 03 2009 (4A5BC3B7)
fffff880`04449000 fffff880`04452000   wmiacpi  wmiacpi.sys  Tue Jul 14 01: 31: 02 2009 (4A5BC3B6)
fffff880`04452000 fffff880`04468000   intelppm intelppm.sys Tue Jul 14 01: 19: 25 2009 (4A5BC0FD)
fffff880`04468000 fffff880`04478000   CompositeBus CompositeBus.sys Tue Jul 14 02: 00: 33 2009 (4A5BCAA1)
fffff880`0447f000 fffff880`04725000   athrx    athrx.sys    Tue Jun 21 10: 03: 39 2011 (4E00505B)
fffff880`04725000 fffff880`04732000   vwifibus vwifibus.sys Tue Jul 14 02: 07: 21 2009 (4A5BCC39)
fffff880`04732000 fffff880`04785000   Rt64win7 Rt64win7.sys Mon May 31 05: 46: 43 2010 (4C033123)
fffff880`04785000 fffff880`047a3000   i8042prt i8042prt.sys Tue Jul 14 01: 19: 57 2009 (4A5BC11D)
fffff880`047a3000 fffff880`047b2000   kbdclass kbdclass.sys Tue Jul 14 01: 19: 50 2009 (4A5BC116)
fffff880`047b2000 fffff880`047d6000   ETD      ETD.sys      Mon Dec 13 14: 08: 38 2010 (4D061AD6)
fffff880`047d6000 fffff880`047e5000   mouclass mouclass.sys Tue Jul 14 01: 19: 50 2009 (4A5BC116)
fffff880`047e5000 fffff880`047fb000   AgileVpn AgileVpn.sys Tue Jul 14 02: 10: 24 2009 (4A5BCCF0)
fffff880`047fb000 fffff880`047fc480   swenum   swenum.sys   Tue Jul 14 02: 00: 18 2009 (4A5BCA92)
fffff880`04a19000 fffff880`054c4000   nvlddmkm nvlddmkm.sys Fri Mar 15 02: 37: 00 2013 (51427B3C)
fffff880`054c4000 fffff880`054c5180   nvBridge nvBridge.kmd Sat Jan 29 00: 01: 46 2011 (4D434ADA)
fffff880`054c6000 fffff880`055ba000   dxgkrnl  dxgkrnl.sys  Wed Jan 26 05: 22: 56 2011 (4D3FA1A0)
fffff880`055ba000 fffff880`05600000   dxgmms1  dxgmms1.sys  Wed Jan 26 05: 22: 12 2011 (4D3FA174)
fffff880`05800000 fffff880`05824000   rasl2tp  rasl2tp.sys  Tue Jul 14 02: 10: 11 2009 (4A5BCCE3)
fffff880`05826000 fffff880`05d421c0   igdkmd64 igdkmd64.sys Sat Mar 09 03: 10: 00 2013 (513A99F8)
fffff880`05d43000 fffff880`05d54000   HECIx64  HECIx64.sys  Wed Oct 20 01: 33: 43 2010 (4CBE2AD7)
fffff880`05d54000 fffff880`05d65000   usbehci  usbehci.sys  Tue Mar 29 05: 32: 16 2011 (4D9152C0)
fffff880`05d65000 fffff880`05dbb000   USBPORT  USBPORT.SYS  Tue Mar 29 05: 32: 20 2011 (4D9152C4)
fffff880`05dbb000 fffff880`05ddf000   HDAudBus HDAudBus.sys Tue Jul 14 02: 06: 13 2009 (4A5BCBF5)
fffff880`05ddf000 fffff880`05deb000   ndistapi ndistapi.sys Tue Jul 14 02: 10: 00 2009 (4A5BCCD8)
fffff880`05deb000 fffff880`05dfd000   umbus    umbus.sys    Tue Jul 14 02: 06: 56 2009 (4A5BCC20)
fffff880`06000000 fffff880`0600a000   mbam     mbam.sys     Mon Aug 20 18: 49: 41 2012 (50326AA5)
fffff880`0600a000 fffff880`0601f000   lltdio   lltdio.sys   Tue Jul 14 02: 08: 50 2009 (4A5BCC92)
fffff880`0601f000 fffff880`06072000   nwifi    nwifi.sys    Tue Jul 14 02: 07: 23 2009 (4A5BCC3B)
fffff880`06072000 fffff880`06085000   ndisuio  ndisuio.sys  Tue Jul 14 02: 09: 25 2009 (4A5BCCB5)
fffff880`06085000 fffff880`0609d000   rspndr   rspndr.sys   Tue Jul 14 02: 08: 50 2009 (4A5BCC92)
fffff880`0609d000 fffff880`060a4000   TurboB   TurboB.sys   Sat Apr 17 01: 07: 26 2010 (4BC8EDAE)
fffff880`060a4000 fffff880`060ae000   vwifimp  vwifimp.sys  Tue Jul 14 02: 07: 28 2009 (4A5BCC40)
fffff880`060ae000 fffff880`060b6000   ASMMAP64 ASMMAP64.sys Thu Jul 02 11: 13: 26 2009 (4A4C7A36)
fffff880`060c0000 fffff880`0611a000   usbhub   usbhub.sys   Tue Mar 29 05: 32: 44 2011 (4D9152DC)
fffff880`0611a000 fffff880`0612f000   NDProxy  NDProxy.SYS  Tue Jul 14 02: 10: 05 2009 (4A5BCCDD)
fffff880`0612f000 fffff880`0614d000   bowser   bowser.sys   Wed Feb 23 06: 15: 06 2011 (4D6497DA)
fffff880`0614d000 fffff880`06165000   mpsdrv   mpsdrv.sys   Tue Jul 14 02: 08: 25 2009 (4A5BCC79)
fffff880`06179000 fffff880`06192000   HIDCLASS HIDCLASS.SYS Tue Jul 14 02: 06: 21 2009 (4A5BCBFD)
fffff880`06192000 fffff880`061a0000   kbdhid   kbdhid.sys   Tue Jul 14 02: 00: 20 2009 (4A5BCA94)
fffff880`061a0000 fffff880`061ad000   mouhid   mouhid.sys   Tue Jul 14 02: 00: 20 2009 (4A5BCA94)
fffff880`061ad000 fffff880`061bb000   crashdmp crashdmp.sys Tue Jul 14 02: 01: 01 2009 (4A5BCABD)
fffff880`061bb000 fffff880`061ce000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 01: 21: 51 2009 (4A5BC18F)
fffff880`061ce000 fffff880`061dc000   monitor  monitor.sys  Tue Jul 14 01: 38: 52 2009 (4A5BC58C)
fffff880`061dc000 fffff880`061ff000   luafv    luafv.sys    Tue Jul 14 01: 26: 13 2009 (4A5BC295)
fffff880`06a00000 fffff880`06a2d200   usbvideo usbvideo.sys Thu Mar 04 05: 40: 57 2010 (4B8F39D9)
fffff880`06a2e000 fffff880`06a3c000   hidusb   hidusb.sys   Tue Jul 14 02: 06: 22 2009 (4A5BCBFE)
fffff880`06a42000 fffff880`06cd8400   RTKVHD64 RTKVHD64.sys Wed Jan 19 03: 51: 46 2011 (4D3651C2)
fffff880`06cd9000 fffff880`06d16000   portcls  portcls.sys  Tue Jul 14 02: 06: 27 2009 (4A5BCC03)
fffff880`06d16000 fffff880`06d38000   drmk     drmk.sys     Tue Jul 14 03: 01: 25 2009 (4A5BD8E5)
fffff880`06d38000 fffff880`06d3d200   ksthunk  ksthunk.sys  Tue Jul 14 02: 00: 19 2009 (4A5BCA93)
fffff880`06d3e000 fffff880`06d96000   IntcDAud IntcDAud.sys Tue Jun 19 16: 40: 51 2012 (4FE08F73)
fffff880`06d96000 fffff880`06dcc000   fastfat  fastfat.SYS  Tue Jul 14 01: 23: 28 2009 (4A5BC1F0)
fffff880`06dcc000 fffff880`06de9000   usbccgp  usbccgp.sys  Tue Mar 29 05: 32: 29 2011 (4D9152CD)
fffff880`06de9000 fffff880`06deaf00   USBD     USBD.SYS     Tue Mar 29 05: 32: 09 2011 (4D9152B9)
fffff880`06deb000 fffff880`06df3080   HIDPARSE HIDPARSE.SYS Tue Jul 14 02: 06: 17 2009 (4A5BCBF9)
fffff880`06df4000 fffff880`06e00000   Dxapi    Dxapi.sys    Tue Jul 14 01: 38: 28 2009 (4A5BC574)
fffff880`08407000 fffff880`084ad000   peauth   peauth.sys   Tue Jul 14 03: 01: 19 2009 (4A5BD8DF)
fffff880`084ad000 fffff880`084b8000   secdrv   secdrv.SYS   Wed Sep 13 15: 18: 38 2006 (4508052E)
fffff880`084b8000 fffff880`084e5000   srvnet   srvnet.sys   Fri Apr 29 05: 12: 35 2011 (4DBA2CA3)
fffff880`084e5000 fffff880`084f7000   tcpipreg tcpipreg.sys Tue Jul 14 02: 09: 49 2009 (4A5BCCCD)
fffff880`084f7000 fffff880`0855e000   srv2     srv2.sys     Fri Apr 29 05: 12: 51 2011 (4DBA2CB3)
fffff880`0855e000 fffff880`085f3000   srv      srv.sys      Fri Apr 29 05: 13: 05 2011 (4DBA2CC1)
fffff880`085f3000 fffff880`085fb000   TuneUpUtilitiesDriver64 TuneUpUtilitiesDriver64.sys Thu Sep 17 13: 54: 52 2009 (4AB2238C)
fffff880`09a13000 fffff880`09a61000   mrxsmb10 mrxsmb10.sys Sat Jul 09 04: 44: 55 2011 (4E17C0A7)
fffff880`09a61000 fffff880`09a84000   mrxsmb20 mrxsmb20.sys Wed May 04 04: 51: 05 2011 (4DC0BF19)
fffff880`09a84000 fffff880`09ad3000   atksgt   atksgt.sys   Sun May 17 15: 36: 34 2009 (4A1012E2)
fffff880`09ad3000 fffff880`09b9b000   HTTP     HTTP.sys     Tue Jul 14 01: 22: 16 2009 (4A5BC1A8)
fffff880`09b9b000 fffff880`09ba8000   lirsgt   lirsgt.sys   Sun May 17 15: 06: 57 2009 (4A100BF1)
fffff880`09ba8000 fffff880`09bb1000   ALSysIO64 ALSysIO64.sys Sun Jul 10 02: 27: 45 2011 (4E18F201)
fffff960`000b0000 fffff960`003c6000   win32k   win32k.sys   Fri Mar 01 04: 31: 58 2013 (5130212E)
fffff960`00530000 fffff960`0053a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`00790000 fffff960`007b7000   cdd      cdd.dll      Wed Jan 26 07: 31: 34 2011 (4D3FBFC6)
fffff960`00910000 fffff960`00971000   ATMFD    ATMFD.DLL    Sun Dec 16 15: 40: 45 2012 (50CDDD6D)

Unloaded modules:
fffff880`0b235000 fffff880`0b2a6000   spsys.sys
    Timestamp:  unavailable (00000000)
    Checksum:   00000000
    ImageSize:   00071000
fffff880`01660000 fffff880`0166e000   crashdmp.sys
    Timestamp:  unavailable (00000000)
    Checksum:   00000000
    ImageSize:   0000E000
fffff880`02ea9000 fffff880`02ffd000   dump_iaStor.
    Timestamp:  unavailable (00000000)
    Checksum:   00000000
    ImageSize:   00154000
fffff880`02e00000 fffff880`02e13000   dump_dumpfve
    Timestamp:  unavailable (00000000)
    Checksum:   00000000
    ImageSize:   00013000
fffff880`0612f000 fffff880`06179000   RtsUVStor.sy
    Timestamp:  unavailable (00000000)
    Checksum:   00000000
    ImageSize:   0004A000
Bugcheck code 000000C4
Arguments 00000000`00000091 00000000`00000002 fffffa80`08834b60 00000000`00000000
[CPU Information]
~MHz = REG_DWORD 2294
Component Information = REG_BINARY 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
Configuration Data = REG_FULL_RESOURCE_DESCRIPTOR ff,ff,ff,ff,ff,ff,ff,ff,0,0,0,0,0,0,0,0
Identifier = REG_SZ Intel64 Family 6 Model 42 Stepping 7
ProcessorNameString = REG_SZ Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
Update Signature = REG_BINARY 0,0,0,0,6,0,0,0
Update Status = REG_DWORD 2
VendorIdentifier = REG_SZ GenuineIntel
MSR8B = REG_QWORD 600000000
sysinfo:  could not find necessary interfaces.
sysinfo:  note that mssmbios.sys must be loaded (XPSP2+).
CPUID:         "Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz"
MaxSpeed:      2300
CurrentSpeed:  2294
sysinfo:  could not find necessary interfaces.
sysinfo:  note that mssmbios.sys must be loaded (XPSP2+).

[Obrazek: 2089620800_1406976151.png]

W zamian za pomoc oczekuję poprawnej pisowni. Stop niechlujstwu.
Jak mądrze zadawać pytania? - przejrzyj poradnik na forum.
Nie udzielam porad via PW.

18.07.2013 22:54

Znajdź wszystkie posty użytkownika
Wątek zamknięty

Podobne wątki
Wątek: Autor Odpowiedzi: Wyświetleń: Ostatni post
Windows 7 64bit Blue Screen 116 MisterDui 5 1.967 02.03.2017 16:24
Ostatni post: thermalfake
Częsty blue screen - ASUS viOoluSkAaa 3 1.462 20.12.2016 18:29
Ostatni post: dyzio2
błąd 124 blue screen podczas grania w wymagające gry paczkaxd 1 1.327 05.12.2016 18:57
Ostatni post: supcio12343
Blue screen podczas zamykania systemu Gasiu93 0 1.020 30.08.2016 23:06
Ostatni post: Gasiu93
Problem Blue Screen - Driver irql not less or equal Danielkg 1 1.923 19.07.2016 21:22
Ostatni post: thermalfake
problem z ntoskrnl.exe Arek101 0 1.440 26.05.2016 20:03
Ostatni post: Arek101
« Starszy wątek | Nowszy wątek »

Temat został oceniony na 0 w skali 1-5 gwiazdek.
Zebrano 1 głosów.