0x00000024: NTFS_FILE_SYSTEM
Najczęstsze przyczyny
- uszkodzenie logiczne dysku, system plikowy ntfs
- uszkodzenie fizyczne dysku
- niewystarczająca ilość fizycznej pamięci ram
- sterownik
- usługa indeksowania
- program antywirusowy
- program do defragmentacji
- program do backupów
Do zrobienia
- przejrzenie podglądu zdarzeń systemowych (eventvwr.msc) czy w nie występują błędów dyskowych; dziennik można wyeksportować do analizy
- uruchomienie polecenia chkdsk /f/r
- diagnostyka dysku twardego np hd tune (skan powierzchni oraz smart)
- do wykonania sprawdzenie podpisów sterowników (sigverif.exe) jak i przeprowadzenie weryfikacji (verifier.exe - opis podawany nie raz na forum, poszukaj).
Sterowniki firm trzecich
Dziadostwo typu Avast wywalić, to samo z programami do ładowania Apple, Daemon Tools;a zamienić np na Power ISO itp.
Resztę zaktualizować. Ze strony intela albo gigabyte'a zaktualizować sterownik chipsetu.
Kod:
AppleCharger.sys Mon Jan 10 10: 58: 02 2011 (4D2AD82A)
AtihdLH3.sys Tue Oct 18 09: 08: 36 2011 (4E9D25F4)
----------------------------------------------------------------------------------------
Bluetooth
BtHidBus.sys Tue Apr 6 12: 31: 27 2010 (4BBB0D7F)
IvtBtBus.sys Tue Apr 6 12: 31: 32 2010 (4BBB0D84)
----------------------------------------------------------------------------------------
Sieciówka Atheros AR813x/AR815x PCI-E Ethernet Controller
L1C60x86.sys Tue Mar 22 06: 30: 51 2011 (4D88340B)
----------------------------------------------------------------------------------------
Sonic do nagrywania
PxHelp20.sys Thu Jun 21 00: 26: 00 2007 (4679A978)
----------------------------------------------------------------------------------------
Dźwiękówka Realteka
RTKVHDA.sys Tue Dec 14 10: 08: 45 2010 (4D07341D)
----------------------------------------------------------------------------------------
Avast
aswFsBlk.SYS Thu Mar 7 00: 22: 00 2013 (5137CF98)
aswMonFlt.sys Thu Mar 7 00: 22: 05 2013 (5137CF9D)
aswRdr.SYS Thu Mar 7 00: 22: 08 2013 (5137CFA0)
aswSP.SYS Thu Mar 7 00: 22: 43 2013 (5137CFC3)
aswSnx.SYS Thu Mar 7 00: 22: 54 2013 (5137CFCE)
aswTdi.SYS Thu Mar 7 00: 22: 07 2013 (5137CF9F)
---------------------------------------------------------------------------------------
Grafika
atikmdag.sys Tue Jan 3 03: 57: 36 2012 (4F026EA0)
atikmpag.sys Tue Jan 3 03: 25: 33 2012 (4F02671D)
---------------------------------------------------------------------------------------
AVG
avgtpx86.sys Tue Jan 29 11: 44: 39 2013 (5107A817)
---------------------------------------------------------------------------------------
Bluetooth
btcombus.sys Thu Aug 26 15: 28: 06 2010 (4C766BE6)
btnetBus.sys Tue Apr 6 12: 31: 57 2010 (4BBB0D9D)
----------------------------------------------------------------------------------------
Daemon Tools
dtsoftbus01.sys Fri Jan 13 14: 45: 57 2012 (4F103595)
----------------------------------------------------------------------------------------
Gigabyte Easy Saver - mobo power utility driver
gdrv.sys Fri Mar 13 04: 17: 32 2009 (49B9D04C)
----------------------------------------------------------------------------------------
hamachi.sys Thu Feb 19 11: 36: 27 2009 (499D362B)
----------------------------------------------------------------------------------------
Chipset
iastor.sys Fri Jun 15 04: 53: 29 2007 (4671FF29)
intelide.sys Sat Jan 19 06: 49: 42 2008 (47918F76)
intelppm.sys Sat Jan 19 06: 27: 20 2008 (47918A38)
Kod:
Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C: \Users\user\Desktop\bsody\47\Mini042713-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: symsrv*symsrv.dll*c: \symb*http: //msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6001.18538.x86fre.vistasp1_gdr.101014-0432
Machine Name:
Kernel base = 0x82e1e000 PsLoadedModuleList = 0x82f35c70
Debug session time: Sat Apr 27 21: 17: 22.893 2013 (UTC + 2: 00)
System Uptime: 0 days 10: 28: 36.887
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 24, {1904aa, 89b4f7c8, 89b4f4c4, 82e6a116}
Unable to load image \SystemRoot\System32\Drivers\aswSP.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswSP.SYS
*** ERROR: Module load completed but symbols could not be loaded for aswSP.SYS
Probably caused by : Ntfs.sys ( Ntfs!NtfsDeleteFcb+283 )
Followup: MachineOwner
---------
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 001904aa
Arg2: 89b4f7c8
Arg3: 89b4f4c4
Arg4: 82e6a116
Debugging Details:
------------------
EXCEPTION_RECORD: 89b4f7c8 -- (.exr 0xffffffff89b4f7c8)
ExceptionAddress: 82e6a116 (nt!SwapSplayLinks+0x00000044)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000004
Attempt to read from address 00000004
CONTEXT: 89b4f4c4 -- (.cxr 0xffffffff89b4f4c4)
eax=00070006 ebx=00000000 ecx=a0b1a3b4 edx=00000000 esi=00000004 edi=a0b1a3b4
eip=82e6a116 esp=89b4f890 ebp=89b4f8a8 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!SwapSplayLinks+0x44:
82e6a116 3906 cmp dword ptr [esi],eax ds: 0023: 00000004=??
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - Instrukcja spod 0x%08lx odwo
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Instrukcja spod 0x%08lx odwo
EXCEPTION_PARAMETER1: 00000000
EXCEPTION_PARAMETER2: 00000004
READ_ADDRESS: GetPointerFromAddress: unable to read from 82f55868
Unable to read MiSystemVaType memory at 82f35420
00000004
FOLLOWUP_IP:
Ntfs!NtfsDeleteFcb+283
890b2ac8 8b06 mov eax,dword ptr [esi]
FAULTING_IP:
nt!SwapSplayLinks+44
82e6a116 3906 cmp dword ptr [esi],eax
BUGCHECK_STR: 0x24
DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE
LAST_CONTROL_TRANSFER: from 82e6369e to 82e6a116
STACK_TEXT:
89b4f894 82e6369e 858fad8c a0b1a3b4 a0b1a3b4 nt!SwapSplayLinks+0x44
89b4f8a8 88afdd0f a0b1a3b4 858ead80 a0b1a3b4 nt!RtlDeleteNoSplay+0x2d
89b4f8bc 88afdfca a0b1a3b4 869bfe18 858fad88 fltmgr!TreeUnlinkNoBalance+0x13
89b4f8d4 88b075a7 858fad8c ffffffff ffffffff fltmgr!TreeUnlinkMulti+0x22
89b4f8f0 88b0a2ca 858fad8c 858fad88 ffffffff fltmgr!FltpDeleteContextList+0x2f
89b4f90c 88b0a501 858fad60 87986d40 858fad64 fltmgr!CleanupFileListCtrl+0x1a
89b4f924 830452a8 858fad64 24bc8223 00000723 fltmgr!DeleteFileListCtrlCallback+0x63
89b4f95c 890b2ac8 87986d40 00000000 869d2238 nt!FsRtlTeardownPerFileContexts+0xba
89b4f980 89027e14 88699370 89b4f9b0 89b4f9ba Ntfs!NtfsDeleteFcb+0x283
89b4f9d4 8909dce0 88699370 869d20d8 898fb888 Ntfs!NtfsTeardownFromLcb+0x250
89b4fa24 89025bde 88699370 898fb978 018fbb18 Ntfs!NtfsTeardownStructures+0xed
89b4fa4c 890a3b66 88699370 898fb978 898fbb18 Ntfs!NtfsDecrementCloseCounts+0xad
89b4faac 890a33b5 88699370 898fb978 898fb888 Ntfs!NtfsCommonClose+0x4da
89b4fb48 9073533e 00000000 858f5158 00000000 Ntfs!NtfsFsdClose+0x3e6
WARNING: Stack unwind information not available. Following frames may be wrong.
89b4fb64 82eda053 869d2020 858f5158 858f5158 aswSP+0x1e33e
89b4fb7c 88af9ba7 869c9978 858f5158 00000000 nt!IofCallDriver+0x63
89b4fba0 88af9d64 89b4fbc0 869c9978 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x251
89b4fbd8 82eda053 869c9978 858f5158 86cb9f00 fltmgr!FltpDispatch+0xc2
89b4fbf0 8303d500 00000000 00000000 86cb9ee8 nt!IofCallDriver+0x63
89b4fc34 83062b07 86cb9f00 831de110 86cb9ee8 nt!IopDeleteFile+0x178
89b4fc50 82e6f89d 86cb9f00 00000000 853fa9b8 nt!ObpRemoveObjectRoutine+0x13d
89b4fc78 82e6bcc4 86cb9f00 853fa9fc 853fa9b8 nt!ObfDereferenceObject+0xa1
89b4fca0 82e5f1a8 00000001 86cb9f00 82f54128 nt!CcDeleteSharedCacheMap+0x19b
89b4fcec 82e587fe 853fa9b8 89b4fd10 00000000 nt!CcWriteBehind+0x582
89b4fd44 82e5641d 84c86188 00000000 84c7a580 nt!CcWorkerThread+0x11e
89b4fd7c 82ff3e88 84c86188 24bc86bf 00000000 nt!ExpWorkerThread+0xfd
89b4fdc0 82e4ca3e 82e56320 00000000 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
SYMBOL_STACK_INDEX: 8
SYMBOL_NAME: Ntfs!NtfsDeleteFcb+283
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 47918a96
STACK_COMMAND: .cxr 0xffffffff89b4f4c4 ; kb
FAILURE_BUCKET_ID: 0x24_Ntfs!NtfsDeleteFcb+283
BUCKET_ID: 0x24_Ntfs!NtfsDeleteFcb+283
Followup: MachineOwner
---------
eax=82f16920 ebx=89b4f7c8 ecx=82f1e1f8 edx=00000101 esi=82f1693c edi=89b4ef10
eip=82eeb1cb esp=89b4f280 ebp=89b4f29c iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
nt!KeBugCheckEx+0x1e:
82eeb1cb 8be5 mov esp,ebp
ChildEBP RetAddr Args to Child
89b4f29c 89029316 00000024 001904aa 89b4f7c8 nt!KeBugCheckEx+0x1e
89b4f2c4 890a33d5 88699370 89b4f2f8 8901df54 Ntfs!NtfsExceptionFilter+0xad (FPO: [Non-Fpo])
89b4f2d0 8901df54 00000000 89b4fb48 89042de8 Ntfs!NtfsFsdClose+0x401 (FPO: [SEH])
89b4f2e4 890280ba 00000000 00000000 00000000 Ntfs!_EH4_CallFilterFunc+0x12 (FPO: [Uses EBP] [0,0,4])
89b4f30c 82ed3b62 fffffffe 89b4fb38 89b4f4c4 Ntfs!_except_handler4+0x8e (FPO: [Non-Fpo])
89b4f330 82ed3b34 89b4f7c8 89b4fb38 89b4f4c4 nt!ExecuteHandler2+0x26
89b4f3e8 82e54567 89b4f7c8 89b4f4c4 24bc8cd3 nt!ExecuteHandler+0x24
89b4f7ac 82e765ea 89b4f7c8 00000000 89b4f81c nt!KiDispatchException+0x170
89b4f814 82e7659e 89b4f8a8 82e6a116 badb0d00 nt!CommonDispatchException+0x4a (FPO: [0,20,0])
89b4f828 831de6dc 00000057 89b4f844 82ed6039 nt!Kei386EoiHelper+0x186
89b4f8a8 88afdd0f a0b1a3b4 858ead80 a0b1a3b4 hal!HalEndSystemInterrupt+0x7a (FPO: [Non-Fpo])
89b4f8bc 88afdfca a0b1a3b4 869bfe18 858fad88 fltmgr!TreeUnlinkNoBalance+0x13 (FPO: [Non-Fpo])
89b4f8d4 88b075a7 858fad8c ffffffff ffffffff fltmgr!TreeUnlinkMulti+0x22 (FPO: [Non-Fpo])
89b4f8f0 88b0a2ca 858fad8c 858fad88 ffffffff fltmgr!FltpDeleteContextList+0x2f (FPO: [Non-Fpo])
89b4f90c 88b0a501 858fad60 87986d40 858fad64 fltmgr!CleanupFileListCtrl+0x1a (FPO: [Non-Fpo])
89b4f924 830452a8 858fad64 24bc8223 00000723 fltmgr!DeleteFileListCtrlCallback+0x63 (FPO: [Non-Fpo])
89b4f95c 890b2ac8 87986d40 00000000 869d2238 nt!FsRtlTeardownPerFileContexts+0xba
89b4f980 89027e14 88699370 89b4f9b0 89b4f9ba Ntfs!NtfsDeleteFcb+0x283 (FPO: [Non-Fpo])
89b4f9d4 8909dce0 88699370 869d20d8 898fb888 Ntfs!NtfsTeardownFromLcb+0x250 (FPO: [Non-Fpo])
89b4fa24 89025bde 88699370 898fb978 018fbb18 Ntfs!NtfsTeardownStructures+0xed (FPO: [Non-Fpo])
89b4fa4c 890a3b66 88699370 898fb978 898fbb18 Ntfs!NtfsDecrementCloseCounts+0xad (FPO: [Non-Fpo])
89b4faac 890a33b5 88699370 898fb978 898fb888 Ntfs!NtfsCommonClose+0x4da (FPO: [Non-Fpo])
89b4fb48 9073533e 00000000 858f5158 00000000 Ntfs!NtfsFsdClose+0x3e6 (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
89b4fb64 82eda053 869d2020 858f5158 858f5158 aswSP+0x1e33e
89b4fb7c 88af9ba7 869c9978 858f5158 00000000 nt!IofCallDriver+0x63
89b4fba0 88af9d64 89b4fbc0 869c9978 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x251 (FPO: [Non-Fpo])
89b4fbd8 82eda053 869c9978 858f5158 86cb9f00 fltmgr!FltpDispatch+0xc2 (FPO: [Non-Fpo])
89b4fbf0 8303d500 00000000 00000000 86cb9ee8 nt!IofCallDriver+0x63
89b4fc34 83062b07 86cb9f00 831de110 86cb9ee8 nt!IopDeleteFile+0x178
89b4fc50 82e6f89d 86cb9f00 00000000 853fa9b8 nt!ObpRemoveObjectRoutine+0x13d
89b4fc78 82e6bcc4 86cb9f00 853fa9fc 853fa9b8 nt!ObfDereferenceObject+0xa1
89b4fca0 82e5f1a8 00000001 86cb9f00 82f54128 nt!CcDeleteSharedCacheMap+0x19b
89b4fcec 82e587fe 853fa9b8 89b4fd10 00000000 nt!CcWriteBehind+0x582
89b4fd44 82e5641d 84c86188 00000000 84c7a580 nt!CcWorkerThread+0x11e
89b4fd7c 82ff3e88 84c86188 24bc86bf 00000000 nt!ExpWorkerThread+0xfd
89b4fdc0 82e4ca3e 82e56320 00000000 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
80601000 80609000 kdcom kdcom.dll Sat Jan 19 08: 31: 53 2008 (4791A769)
80609000 80669000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Jan 19 08: 29: 43 2008 (4791A6E7)
80669000 8067a000 PSHED PSHED.dll Sat Jan 19 08: 31: 21 2008 (4791A749)
8067a000 80682000 BOOTVID BOOTVID.dll Sat Jan 19 08: 27: 15 2008 (4791A653)
80682000 806c3000 CLFS CLFS.SYS Sat Jan 19 06: 28: 01 2008 (47918A61)
806c3000 807a3000 CI CI.dll Fri Feb 22 06: 00: 56 2008 (47BE5708)
807a3000 807c6000 ndiswan ndiswan.sys Sat Jan 19 06: 56: 32 2008 (47919110)
807c6000 807d5000 raspppoe raspppoe.sys Sat Jan 19 06: 56: 33 2008 (47919111)
807d5000 807e9000 raspptp raspptp.sys Sat Jan 19 06: 56: 34 2008 (47919112)
807e9000 807fe000 rassstp rassstp.sys Sat Jan 19 06: 56: 43 2008 (4791911B)
82e1e000 831d7000 nt ntkrpamp.exe Thu Oct 14 16: 38: 24 2010 (4CB715E0)
831d7000 8320a000 hal halmacpi.dll Sat Jan 19 06: 27: 20 2008 (47918A38)
88802000 8887e000 Wdf01000 Wdf01000.sys Sat Jan 19 06: 52: 21 2008 (47919015)
8887e000 8888b000 WDFLDR WDFLDR.SYS Sat Jan 19 06: 52: 19 2008 (47919013)
8888b000 888d1000 acpi acpi.sys Sat Jan 19 06: 32: 48 2008 (47918B80)
888d1000 888da000 WMILIB WMILIB.SYS Sat Jan 19 06: 53: 08 2008 (47919044)
888da000 888e2000 msisadrv msisadrv.sys Sat Jan 19 06: 32: 51 2008 (47918B83)
888e2000 88909000 pci pci.sys Sat Jan 19 06: 32: 57 2008 (47918B89)
88909000 88918000 partmgr partmgr.sys Sat Jan 19 06: 49: 54 2008 (47918F82)
88918000 88927000 volmgr volmgr.sys Sat Jan 19 06: 49: 51 2008 (47918F7F)
88927000 88971000 volmgrx volmgrx.sys Sat Jan 19 06: 50: 00 2008 (47918F88)
88971000 88978000 intelide intelide.sys Sat Jan 19 06: 49: 42 2008 (47918F76)
88978000 88986000 PCIIDEX PCIIDEX.SYS Sat Jan 19 06: 49: 40 2008 (47918F74)
88986000 88996000 mountmgr mountmgr.sys Sat Jan 19 06: 49: 13 2008 (47918F59)
88996000 889d7000 storport storport.sys Sat Jan 19 06: 49: 49 2008 (47918F7D)
889d7000 889ee000 rasl2tp rasl2tp.sys Sat Jan 19 06: 56: 33 2008 (47919111)
889ee000 889f9000 ndistapi ndistapi.sys Sat Jan 19 06: 56: 24 2008 (47919108)
88a07000 88ace000 iastor iastor.sys Fri Jun 15 04: 53: 29 2007 (4671FF29)
88ace000 88ad6000 atapi atapi.sys Sat Jan 19 06: 49: 40 2008 (47918F74)
88ad6000 88af4000 ataport ataport.SYS Sat Jan 19 06: 49: 40 2008 (47918F74)
88af4000 88b26000 fltmgr fltmgr.sys Sat Jan 19 06: 28: 10 2008 (47918A6A)
88b26000 88b36000 fileinfo fileinfo.sys Sat Jan 19 06: 34: 27 2008 (47918BE3)
88b36000 88b3ede0 PxHelp20 PxHelp20.sys Thu Jun 21 00: 26: 00 2007 (4679A978)
88b3f000 88bb0000 ksecdd ksecdd.sys Mon Jun 15 14: 58: 01 2009 (4A364559)
88bb0000 88bc8000 cdrom cdrom.sys Sat Jan 19 06: 49: 50 2008 (47918F7E)
88bc8000 88bf6000 msiscsi msiscsi.sys Sat Jan 19 06: 50: 44 2008 (47918FB4)
88c03000 88d0e000 ndis ndis.sys Sat Jan 19 06: 55: 51 2008 (479190E7)
88d0e000 88d39000 msrpc msrpc.sys unavailable (00000000)
88d39000 88d73000 NETIO NETIO.SYS Sat Jan 19 06: 56: 19 2008 (47919103)
88d73000 88db1000 USBPORT USBPORT.SYS Sat Jan 19 06: 53: 23 2008 (47919053)
88db1000 88dcb000 serial serial.sys Sat Jan 19 06: 49: 34 2008 (47918F6E)
88dcb000 88dd5000 serenum serenum.sys Sat Jan 19 06: 49: 29 2008 (47918F69)
88dd5000 88ded000 parport parport.sys Sat Jan 19 06: 49: 32 2008 (47918F6C)
88ded000 88df8000 TDI TDI.SYS Sat Jan 19 06: 57: 10 2008 (47919136)
88e07000 88ef0000 tcpip tcpip.sys Wed Jun 16 15: 37: 47 2010 (4C18D3AB)
88ef0000 88f0b000 fwpkclnt fwpkclnt.sys Sat Jan 19 06: 55: 44 2008 (479190E0)
88f0b000 88f1a000 intelppm intelppm.sys Sat Jan 19 06: 27: 20 2008 (47918A38)
88f1a000 88f59000 atikmpag atikmpag.sys Wed Mar 09 05: 17: 24 2011 (4D76FF54)
88f59000 88ff8000 dxgkrnl dxgkrnl.sys Sat Aug 02 03: 01: 19 2008 (4893B1DF)
88ff8000 88ffcc00 hamachi hamachi.sys Thu Feb 19 11: 36: 27 2009 (499D362B)
89000000 89009000 tunmp tunmp.sys Sat Jan 19 06: 55: 40 2008 (479190DC)
89009000 8900d000 IvtBtBus IvtBtBus.sys Tue Apr 06 12: 31: 32 2010 (4BBB0D84)
8900f000 8911e000 Ntfs Ntfs.sys Sat Jan 19 06: 28: 54 2008 (47918A96)
8911e000 89157000 volsnap volsnap.sys Sat Jan 19 06: 50: 10 2008 (47918F92)
89157000 8915f000 spldr spldr.sys Fri Jun 22 02: 29: 17 2007 (467B17DD)
8915f000 8916e000 mup mup.sys Sat Jan 19 06: 28: 20 2008 (47918A74)
8916e000 89195000 ecache ecache.sys Sat Jan 19 06: 50: 47 2008 (47918FB7)
89195000 891a6000 disk disk.sys Sat Jan 19 06: 49: 47 2008 (47918F7B)
891a6000 891c7000 CLASSPNP CLASSPNP.SYS Sat Jan 19 06: 49: 36 2008 (47918F70)
891c7000 891d0000 crcdisk crcdisk.sys Thu Nov 02 09: 52: 27 2006 (4549B1CB)
891d0000 891d3480 BtHidBus BtHidBus.sys Tue Apr 06 12: 31: 27 2010 (4BBB0D7F)
891d4000 891f3000 mrxsmb mrxsmb.sys Fri Apr 29 14: 49: 32 2011 (4DBAB3DC)
891f4000 891ff000 tunnel tunnel.sys Thu Feb 18 12: 52: 00 2010 (4B7D29E0)
8cc00000 8cc0f000 usbehci usbehci.sys Sat Jan 19 06: 53: 21 2008 (47919051)
8cc0f000 8d3bb000 atikmdag atikmdag.sys Wed Mar 09 05: 26: 58 2011 (4D770192)
8d3bb000 8d3c8000 watchdog watchdog.sys Sat Jan 19 06: 35: 29 2008 (47918C21)
8d3c8000 8d3da000 HDAudBus HDAudBus.sys Wed Nov 28 00: 18: 41 2007 (474CA5D1)
8d3da000 8d3ec000 L1C60x86 L1C60x86.sys Tue Mar 22 06: 30: 51 2011 (4D88340B)
8d3ec000 8d3f7000 usbuhci usbuhci.sys Sat Jan 19 06: 53: 20 2008 (47919050)
8d3f7000 8d3fbb00 btnetBus btnetBus.sys Tue Apr 06 12: 31: 57 2010 (4BBB0D9D)
8d3fc000 8d3ffc00 btcombus btcombus.sys Thu Aug 26 15: 28: 06 2010 (4C766BE6)
8d806000 8d816000 termdd termdd.sys Sat Jan 19 07: 01: 06 2008 (47919222)
8d816000 8d821000 kbdclass kbdclass.sys Sat Jan 19 06: 49: 14 2008 (47918F5A)
8d821000 8d82c000 mouclass mouclass.sys Sat Jan 19 06: 49: 14 2008 (47918F5A)
8d82c000 8d82d380 swenum swenum.sys Sat Jan 19 06: 49: 20 2008 (47918F60)
8d82e000 8d858000 ks ks.sys Sat Jan 19 06: 49: 21 2008 (47918F61)
8d858000 8d898000 dtsoftbus01 dtsoftbus01.sys Fri Jan 13 14: 45: 57 2012 (4F103595)
8d898000 8d8a2000 mssmbios mssmbios.sys Sat Jan 19 06: 32: 55 2008 (47918B87)
8d8a2000 8d8af000 umbus umbus.sys Sat Jan 19 06: 53: 40 2008 (47919064)
8d8af000 8d8e3000 usbhub usbhub.sys Sat Jan 19 06: 53: 40 2008 (47919064)
8d8e3000 8d8f4000 NDProxy NDProxy.SYS Sat Jan 19 06: 56: 28 2008 (4791910C)
8d8f4000 8d90f000 AtihdLH3 AtihdLH3.sys Wed Nov 17 13: 00: 05 2010 (4CE3C3C5)
8d90f000 8d93c000 portcls portcls.sys Sat Jan 19 06: 53: 17 2008 (4791904D)
8d93c000 8d961000 drmk drmk.sys Sat Jan 19 07: 53: 02 2008 (47919E4E)
8d961000 8d982000 VIDEOPRT VIDEOPRT.SYS Sat Jan 19 06: 52: 10 2008 (4791900A)
8d982000 8d990000 Npfs Npfs.SYS Sat Jan 19 06: 28: 09 2008 (47918A69)
8d990000 8d9a6000 tdx tdx.sys Sat Jan 19 06: 55: 58 2008 (479190EE)
8d9a6000 8d9b0d80 aswTdi aswTdi.SYS Mon Nov 28 18: 52: 14 2011 (4ED3CA4E)
8d9b1000 8d9c5000 smb smb.sys Sat Jan 19 06: 55: 27 2008 (479190CF)
8d9c5000 8d9fd000 aswMonFlt aswMonFlt.sys Mon Nov 28 18: 52: 06 2011 (4ED3CA46)
90000000 90002f00 aswFsBlk aswFsBlk.SYS Mon Nov 28 18: 51: 49 2011 (4ED3CA35)
90008000 90336040 RTKVHDA RTKVHDA.sys Tue Dec 14 10: 08: 45 2010 (4D07341D)
90337000 903a4000 aswSnx aswSnx.SYS Mon Nov 28 18: 53: 52 2011 (4ED3CAB0)
903a4000 903ad000 Fs_Rec Fs_Rec.SYS unavailable (00000000)
903ad000 903b4000 Null Null.SYS unavailable (00000000)
903b4000 903bb000 Beep Beep.SYS Sat Jan 19 06: 49: 10 2008 (47918F56)
903bb000 903c7000 avgtpx86 avgtpx86.sys Tue Jan 29 11: 44: 39 2013 (5107A817)
903c7000 903d0000 rasacd rasacd.sys Sat Jan 19 06: 56: 31 2008 (4791910F)
903d0000 903d6380 HIDPARSE HIDPARSE.SYS Sat Jan 19 06: 53: 16 2008 (4791904C)
903d7000 903e3000 vga vga.sys Sat Jan 19 06: 52: 06 2008 (47919006)
903e3000 903eb000 RDPCDD RDPCDD.sys Sat Jan 19 07: 01: 08 2008 (47919224)
903eb000 903f3000 rdpencdd rdpencdd.sys Sat Jan 19 07: 01: 09 2008 (47919225)
903f3000 903fe000 Msfs Msfs.SYS unavailable (00000000)
90602000 9064a000 afd afd.sys Thu Apr 21 15: 16: 39 2011 (4DB02E37)
9064a000 90650500 aswRdr aswRdr.SYS Mon Nov 28 18: 52: 17 2011 (4ED3CA51)
90651000 90683000 netbt netbt.sys Sat Jan 19 06: 55: 33 2008 (479190D5)
90683000 90699000 pacer pacer.sys Sat Apr 05 03: 21: 42 2008 (47F6D426)
90699000 906a7000 netbios netbios.sys Sat Jan 19 06: 55: 45 2008 (479190E1)
906a7000 906ba000 wanarp wanarp.sys Sat Jan 19 06: 56: 31 2008 (4791910F)
906ba000 906f6000 rdbss rdbss.sys Sat Jan 19 06: 28: 34 2008 (47918A82)
906f6000 90700000 nsiproxy nsiproxy.sys Sat Jan 19 06: 55: 50 2008 (479190E6)
90700000 90717000 dfsc dfsc.sys Thu Apr 14 16: 24: 14 2011 (4DA7038E)
90717000 90761b00 aswSP aswSP.SYS Mon Nov 28 18: 53: 33 2011 (4ED3CA9D)
90762000 90769000 AppleCharger AppleCharger.sys Mon Jan 10 10: 58: 02 2011 (4D2AD82A)
90769000 90776000 crashdmp crashdmp.sys Sat Jan 19 06: 49: 43 2008 (47918F77)
90776000 90781000 dump_dumpata dump_dumpata.sys Sat Jan 19 06: 49: 40 2008 (47918F74)
90781000 90789000 dump_atapi dump_atapi.sys Sat Jan 19 06: 49: 40 2008 (47918F74)
90789000 90792000 hidusb hidusb.sys Sat Jan 19 06: 53: 17 2008 (4791904D)
90792000 907a2000 HIDCLASS HIDCLASS.SYS Sat Jan 19 06: 53: 16 2008 (4791904C)
907a2000 907a3700 USBD USBD.SYS Sat Jan 19 06: 53: 17 2008 (4791904D)
907a4000 907ac000 mouhid mouhid.sys Sat Jan 19 06: 49: 16 2008 (47918F5C)
907ac000 907c3000 usbccgp usbccgp.sys Sat Jan 19 06: 53: 29 2008 (47919059)
907c3000 907cc000 kbdhid kbdhid.sys Sat Jan 19 06: 49: 17 2008 (47918F5D)
907cc000 907d6000 Dxapi Dxapi.sys Sat Jan 19 06: 36: 12 2008 (47918C4C)
907d6000 907e5000 monitor monitor.sys Sat Jan 19 06: 52: 19 2008 (47919013)
907e5000 90800000 luafv luafv.sys Sat Jan 19 06: 30: 35 2008 (47918AFB)
9a0a0000 9a2a4000 win32k win32k.sys unavailable (00000000)
9a2c0000 9a2c9000 TSDDD TSDDD.dll unavailable (00000000)
9a2e0000 9a2ee000 cdd cdd.dll unavailable (00000000)
9a2f0000 9a33d000 ATMFD ATMFD.DLL unavailable (00000000)
9da0b000 9daba000 spsys spsys.sys Fri Jun 22 02: 33: 02 2007 (467B18BE)
9daba000 9daca000 lltdio lltdio.sys Sat Jan 19 06: 55: 03 2008 (479190B7)
9daca000 9daf4000 nwifi nwifi.sys Tue May 20 04: 07: 27 2008 (4832325F)
9daf4000 9dafe000 ndisuio ndisuio.sys Sat Jan 19 06: 55: 40 2008 (479190DC)
9dafe000 9db11000 rspndr rspndr.sys Sat Jan 19 06: 55: 03 2008 (479190B7)
9db11000 9db7e000 HTTP HTTP.sys Sat Feb 20 22: 18: 38 2010 (4B8051AE)
9db7e000 9db9b000 srvnet srvnet.sys Fri Apr 29 14: 49: 54 2011 (4DBAB3F2)
9db9b000 9dbb4000 bowser bowser.sys Tue Feb 22 13: 51: 50 2011 (4D63B166)
9dbb4000 9dbc9000 mpsdrv mpsdrv.sys Sat Jan 19 06: 54: 45 2008 (479190A5)
9dbc9000 9dbe9000 mrxdav mrxdav.sys Sat Jan 19 06: 28: 44 2008 (47918A8C)
a8404000 a843d000 mrxsmb10 mrxsmb10.sys Wed Jul 06 16: 56: 44 2011 (4E1477AC)
a843d000 a8455000 mrxsmb20 mrxsmb20.sys Fri Apr 29 14: 49: 43 2011 (4DBAB3E7)
a8455000 a847d000 srv2 srv2.sys Fri Apr 29 14: 49: 56 2011 (4DBAB3F4)
a847d000 a84cc000 srv srv.sys Fri Feb 18 14: 31: 20 2011 (4D5E74A8)
a84cc000 a84d3000 parvdm parvdm.sys unavailable (00000000)
a84d3000 a85b1000 peauth peauth.sys Mon Oct 23 10: 55: 32 2006 (453C8384)
a85b1000 a85bb000 secdrv secdrv.SYS Wed Sep 13 15: 18: 32 2006 (45080528)
a85bb000 a85c7000 tcpipreg tcpipreg.sys Sat Jan 19 06: 56: 07 2008 (479190F7)
a85c7000 a85c96c0 gdrv gdrv.sys Fri Mar 13 04: 17: 32 2009 (49B9D04C)
a85ca000 a85d5000 tdtcp tdtcp.sys Sat Jan 19 07: 01: 08 2008 (47919224)
a85d5000 a85e1000 tssecsrv tssecsrv.sys Sat Jan 19 07: 01: 15 2008 (4791922B)
aae0f000 aae42000 RDPWD RDPWD.SYS Sat Jan 19 07: 01: 16 2008 (4791922C)
aae42000 aae58000 cdfs cdfs.sys Sat Jan 19 06: 28: 02 2008 (47918A62)
Unloaded modules:
891d4000 891dc000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00008000
891d4000 891e1000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
891e1000 891ec000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
891ec000 891f4000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00008000
903c7000 903d0000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
Bugcheck code 00000024
Arguments 001904aa 89b4f7c8 89b4f4c4 82e6a116
[CPU Information]
~MHz = REG_DWORD 2200
Component Information = REG_BINARY 0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0
Configuration Data = REG_FULL_RESOURCE_DESCRIPTOR ff,ff,ff,ff,ff,ff,ff,ff,0,0,0,0,0,0,0,0
Identifier = REG_SZ x86 Family 6 Model 15 Stepping 13
ProcessorNameString = REG_SZ Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz
Update Signature = REG_BINARY 0,0,0,0,a4,0,0,0
Update Status = REG_DWORD 7
VendorIdentifier = REG_SZ GenuineIntel
MSR8B = REG_QWORD a400000000
Machine ID Information [From Smbios 2.4, DMIVersion 36, Size=1146]
BiosVendor = Award Software International, Inc.
BiosVersion = F7
BiosReleaseDate = 08/03/2011
SystemManufacturer = Gigabyte Technology Co., Ltd.
SystemProductName = G41MT-S2
SystemFamily =
SystemVersion =
SystemSKU =
BaseBoardManufacturer = Gigabyte Technology Co., Ltd.
BaseBoardProduct = G41MT-S2
BaseBoardVersion = x.x
CPUID: "Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz"
MaxSpeed: 2200
CurrentSpeed: 2200
[SMBIOS Data Tables v2.4]
[DMI Version - 36]
[2.0 Calling Convention - No]
[Table Size - 1146 bytes]
[BIOS Information (Type 0) - Length 24 - Handle 0000h]
Vendor Award Software International, Inc.
BIOS Version F7
BIOS Starting Address Segment e000
BIOS Release Date 08/03/2011
BIOS ROM Size 100000
BIOS Characteristics
07: - PCI Supported
09: - Plug and Play Supported
10: - APM Supported
11: - Upgradeable FLASH BIOS
12: - BIOS Shadowing Supported
15: - CD-Boot Supported
16: - Selectable Boot Supported
19: - EDD Supported
22: - 360KB Floppy Supported
23: - 1.2MB Floppy Supported
24: - 720KB Floppy Supported
25: - 2.88MB Floppy Supported
26: - Print Screen Device Supported
27: - Keyboard Services Supported
28: - Serial Services Supported
29: - Printer Services Supported
30: - CGA/Mono Services Supported
BIOS Characteristic Extensions
00: - ACPI Supported
01: - USB Legacy Supported
08: - BIOS Boot Specification Supported
10: - Specification Reserved
BIOS Major Revision 255
BIOS Minor Revision 255
EC Firmware Major Revision 255
EC Firmware Minor Revision 255
[System Information (Type 1) - Length 27 - Handle 0001h]
Manufacturer Gigabyte Technology Co., Ltd.
Product Name G41MT-S2
Version
Serial Number
UUID 00000000-0000-0000-0000-000000000000
Wakeup Type Power Switch
SKUNumber
Family
[BaseBoard Information (Type 2) - Length 8 - Handle 0002h]
Manufacturer Gigabyte Technology Co., Ltd.
Product G41MT-S2
Version x.x
Serial Number
[System Enclosure (Type 3) - Length 17 - Handle 0003h]
Manufacturer Gigabyte Technology Co., Ltd.
Chassis Type Desktop
Version
Serial Number
Asset Tag Number
Bootup State Unknown
Power Supply State Unknown
Thermal State Unknown
Security Status Unknown
OEM Defined 0
[Processor Information (Type 4) - Length 35 - Handle 0004h]
Socket Designation Socket 775
Processor Type Central Processor
Processor Family 01h - Other
Processor Manufacturer Intel
Processor ID fd060000fffbebbf
Processor Version Intel(R) Core(TM)2 Duo CPU
Processor Voltage 8ah - 1.0V
External Clock 200MHz
Max Speed 4000MHz
Current Speed 2200MHz
Status Enabled Populated
Processor Upgrade Socket 478
L1 Cache Handle 000ah
L2 Cache Handle 000bh
L3 Cache Handle [Not Present]
Serial Number
Asset Tag Number
Part Number
[Memory Controller Information (Type 5) - Length 24 - Handle 0005h]
Error Detecting Method 04h - 8-bit Parity
Error Correcting Capability 04h - None
Supported Interleave 03h - One Way Interleave
Current Interleave 03h - One Way Interleave
Maximum Memory Module Size 0ah - 1024MB
Supported Speeds 0001h - Other
Supported Memory Types 0001h - Other
Memory Module Voltage 5V
Number of Memory Slots 4
Memory Slot Handle 0006h
Memory Slot Handle 0007h
Memory Slot Handle 0008h
Memory Slot Handle 0009h
Enabled Err Correcting Caps 04h - None
[Memory Module Information (Type 6) - Length 12 - Handle 0006h]
Socket Designation A0
Bank Connections 1fh - 1
Current Speed 31ns
Current Memory Type 0002h - Unknown
Installed Size 7fh - [Not Installed] [single bank]
Enabled Size 7fh - [Not Installed] [single bank]
Error Status 00h - [No Errors]
[Memory Module Information (Type 6) - Length 12 - Handle 0007h]
Socket Designation A1
Bank Connections 2fh - 2
Current Speed 47ns
Current Memory Type 0002h - Unknown
Installed Size 7fh - [Not Installed] [single bank]
Enabled Size 7fh - [Not Installed] [single bank]
Error Status 00h - [No Errors]
[Memory Module Information (Type 6) - Length 12 - Handle 0008h]
Socket Designation A2
Bank Connections 3fh - 3
Current Speed 63ns
Current Memory Type 0001h - Other
Installed Size 0bh - 2048 [single bank]
Enabled Size 0bh - 2048 [single bank]
Error Status 00h - [No Errors]
[Memory Module Information (Type 6) - Length 12 - Handle 0009h]
Socket Designation A3
Bank Connections 4fh - 4
Current Speed 79ns
Current Memory Type 0002h - Unknown
Installed Size 7fh - [Not Installed] [single bank]
Enabled Size 7fh - [Not Installed] [single bank]
Error Status 00h - [No Errors]
[Cache Information (Type 7) - Length 19 - Handle 000ah]
Socket Designation Internal Cache
Cache Configuration 0180h - WB Enabled Int NonSocketed L1
Maximum Cache Size 0040h - 64K
Installed Size 0040h - 64K
Supported SRAM Type 0020h - Synchronous
Current SRAM Type 0020h - Synchronous
Cache Speed 0ns
Error Correction Type Unknown
System Cache Type Unknown
Associativity Unknown
[Cache Information (Type 7) - Length 19 - Handle 000bh]
Socket Designation External Cache
Cache Configuration 0181h - WB Enabled Int NonSocketed L2
Maximum Cache Size 0800h - 2048K
Installed Size 0800h - 2048K
Supported SRAM Type 0020h - Synchronous
Current SRAM Type 0020h - Synchronous
Cache Speed 0ns
Error Correction Type Unknown
System Cache Type Unknown
Associativity Unknown
[Physical Memory Array (Type 16) - Length 15 - Handle 0018h]
Location 03h - SystemBoard/Motherboard
Use 03h - System Memory
Memory Error Correction 03h - None
Maximum Capacity 33554432KB
Memory Error Inf Handle [Not Provided]
Number of Memory Devices 4
[Memory Device (Type 17) - Length 27 - Handle 0019h]
Physical Memory Array Handle 0018h
Memory Error Info Handle [Not Provided]
Total Width [Unknown]
Data Width [Unknown]
Size [Not Populated]
Form Factor 09h - DIMM
Device Set [None]
Device Locator A0
Bank Locator Bank0/1
Memory Type 02h - Unknown
Type Detail 0000h -
Speed 0MHz
Manufacturer
Serial Number
Asset Tag Number
Part Number
[Memory Device (Type 17) - Length 27 - Handle 001ah]
Physical Memory Array Handle 0018h
Memory Error Info Handle [Not Provided]
Total Width [Unknown]
Data Width [Unknown]
Size [Not Populated]
Form Factor 09h - DIMM
Device Set [None]
Device Locator A1
Bank Locator Bank2/3
Memory Type 02h - Unknown
Type Detail 0000h -
Speed 0MHz
Manufacturer
Serial Number
Asset Tag Number
Part Number
[Memory Device (Type 17) - Length 27 - Handle 001bh]
Physical Memory Array Handle 0018h
Memory Error Info Handle [Not Provided]
Total Width 256 bits
Data Width 196 bits
Size 2048MB
Form Factor 09h - DIMM
Device Set [None]
Device Locator A2
Bank Locator Bank4/5
Memory Type 02h - Unknown
Type Detail 0000h -
Speed 400MHz
Manufacturer
Serial Number
Asset Tag Number
Part Number
[Memory Device (Type 17) - Length 27 - Handle 001ch]
Physical Memory Array Handle 0018h
Memory Error Info Handle [Not Provided]
Total Width [Unknown]
Data Width [Unknown]
Size [Not Populated]
Form Factor 09h - DIMM
Device Set [None]
Device Locator A3
Bank Locator Bank6/7
Memory Type 02h - Unknown
Type Detail 0000h -
Speed 0MHz
Manufacturer
Serial Number
Asset Tag Number
Part Number
[Memory Array Mapped Address (Type 19) - Length 15 - Handle 001dh]
Starting Address 00000000h
Ending Address 001fffffh
Memory Array Handle 0018h
Partition Width 01
[Memory Device Mapped Address (Type 20) - Length 19 - Handle 001eh]
Starting Address 00000000h
Ending Address 00000000h
Memory Device Handle 0019h
Mem Array Mapped Adr Handle 001dh
Partition Row Position 01
Interleave Position [None]
Interleave Data Depth [None]
[Memory Device Mapped Address (Type 20) - Length 19 - Handle 001fh]
Starting Address 00000000h
Ending Address 00000000h
Memory Device Handle 001ah
Mem Array Mapped Adr Handle 001dh
Partition Row Position 01
Interleave Position [None]
Interleave Data Depth [None]
[Memory Device Mapped Address (Type 20) - Length 19 - Handle 0020h]
Starting Address 00000000h
Ending Address 001fffffh
Memory Device Handle 001bh
Mem Array Mapped Adr Handle 001dh
Partition Row Position 01
Interleave Position [None]
Interleave Data Depth [None]
[Memory Device Mapped Address (Type 20) - Length 19 - Handle 0021h]
Starting Address 00000000h
Ending Address 00000000h
Memory Device Handle 001ch
Mem Array Mapped Adr Handle 001dh
Partition Row Position 01
Interleave Position [None]
Interleave Data Depth [None]
0: kd> .cxr 89b4f4c4
eax=00070006 ebx=00000000 ecx=a0b1a3b4 edx=00000000 esi=00000004 edi=a0b1a3b4
eip=82e6a116 esp=89b4f890 ebp=89b4f8a8 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!SwapSplayLinks+0x44:
82e6a116 3906 cmp dword ptr [esi],eax ds: 0023: 00000004=??
0x0000001A: MEMORY_MANAGEMENT
Najczęściej powoduje go sterownik urządzenia, uszkodzenie fizyczne pamięci, błędy jądra systemowego. Tutaj jest inicjowany przez różne aplikacje (nie są źródłem problemów).
Do uruchomienia memtest86 na kilka godzin. Po uporządkowaniu sterowników coś już powinno się wyjaśnić. Vista wymaga także instalacji Service Packa 2.