KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
Powstaje poprzez wyrzucenie wyjątku lecz nie zostaje przechwycony przez sterownik w trybie jądra (kernel mode - dostęp uprzywilejowany do warstwy sprzętowej czyli do zasobów).
Pierwszy argument z listy bsoda
0xc0000005 (STATUS_ACCESS_VIOLATION)
Mówi to o tym iż natknięto się na niezidentyfikowane uszkodzenie struktury danych w pamięci wirtualnej przez jeden lub więcej sterowników. Przeważnie nie jest to ten który widnieje jako probably caused by.
Zaleca się wykonanie weryfikacji sterowników w tym zakresie poprzez narzędzie verifier.exe
Pisałem już o tym więc sobie poradzi to znaleźć.
sbhips.sys - Sunbelt Personal Firewall host intrusion protection system driver (HIPS)
Kod:
Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Symbol search path is: srv*c: \symbols*http: //msdl.microsoft.com/download/symbols;symsrv*symsrv.dll*c: \symb*http: //msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt
Built by: 2600.xpsp_sp3_qfe.130704-0421
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805634c0
Debug session time: Thu Jul 31 21: 54: 01.796 2014 (UTC + 2: 00)
System Uptime: 0 days 1: 46: 51.486
Loading Kernel Symbols
...............................................................
................................................................
.................................
Loading User Symbols
Loading unloaded module list
.............
*** WARNING: Unable to verify timestamp for sbhips.sys
*** ERROR: Module load completed but symbols could not be loaded for sbhips.sys
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000008E, {c0000005, 9f446bb1, 9d9b5b88, 0}
Probably caused by : sbhips.sys ( sbhips+1bb1 )
Followup: MachineOwner
---------
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 9f446bb1, The address that the exception occurred at
Arg3: 9d9b5b88, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Instrukcja spod 0x%08lx odwo
FAULTING_IP:
sbhips+1bb1
9f446bb1 ? ?
TRAP_FRAME: 9d9b5b88 -- (.trap 0xffffffff9d9b5b88)
.trap 0xffffffff9d9b5b88
Unable to read trap frame at 9d9b5b88
.trap
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
LAST_CONTROL_TRANSFER: from 804e68e6 to 9f446bb1
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
9d9b5bf8 804e68e6 0012f828 86388fc0 9d9b5d34 sbhips+0x1bb1
9d9b5c10 00000000 7c800000 9d9b5d64 0012f780 nt!KeWaitForSingleObject+0x1c6
STACK_COMMAND: kb
FOLLOWUP_IP:
sbhips+1bb1
9f446bb1 ? ?
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: sbhips+1bb1
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: sbhips
IMAGE_NAME: sbhips.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 0
FAILURE_BUCKET_ID: 0x8E_sbhips+1bb1
BUCKET_ID: 0x8E_sbhips+1bb1
Followup: MachineOwner
---------
Drugi bsod który częściej się pojawiał
NO_MORE_IRP_STACK_LOCATIONS (35)
W dużym skrócie pojawia się kiedy sterownik z trybu jądra (uprzywilejowany do zasobów) poprzez funkcję nt!IopfCallDriver próbuje załadować sterownik z trybu użytkownika (brak dostępu do pamięci kernela ze względów bezpieczeństwa unikania crashów) i nadać mu pewne informacje.
Tu mamy taką sytuację iż sterownik Afd.sys próbuje ładować sterownik SbFw.sys
Objawia się to dalszymi problemami w użyciu funkcji związanych z operacjami na plikach np nt!NtDeviceIoControlFile
Afd.sys jest sterownikiem obsługującym Winsock odpowiedzialnym za cały networking w systemie. Jest pomostem pomiędzy aplikacjami użytkownika i elementami systemu a warstwą sprzętową, tak aby zestawiać połączenia w sieci LAN/WLAN i poza w świat.
SbFw.sys - Sunbelt Personal Firewall
Kod:
Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Symbol search path is: srv*c: \symbols*http: //msdl.microsoft.com/download/symbols;symsrv*symsrv.dll*c: \symb*http: //msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt
Built by: 2600.xpsp_sp3_gdr.101209-1647
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805634c0
Debug session time: Sat Jul 23 20: 20: 26.953 2011 (UTC + 2: 00)
System Uptime: 0 days 0: 02: 33.640
Loading Kernel Symbols
...............................................................
................................................................
.....................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 35, {843ec480, 0, 0, 0}
*** WARNING: Unable to verify timestamp for SbFw.sys
*** ERROR: Module load completed but symbols could not be loaded for SbFw.sys
Probably caused by : SbFw.sys ( SbFw+158fc )
Followup: MachineOwner
---------
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
NO_MORE_IRP_STACK_LOCATIONS (35)
A higher level driver has attempted to call a lower level driver through
the IoCallDriver() interface, but there are no more stack locations in the
packet, hence, the lower level driver would not be able to access its
parameters, as there are no parameters for it. This is a disasterous
situation, since the higher level driver "thinks" it has filled in the
parameters for the lower level driver (something it MUST do before it calls
it), but since there is no stack location for the latter driver, the former
has written off of the end of the packet. This means that some other memory
has probably been trashed at this point.
Arguments:
Arg1: 843ec480, Address of the IRP
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x35
LAST_CONTROL_TRANSFER: from 80520346 to 805376ba
STACK_TEXT:
a8c3c9e8 80520346 00000035 843ec480 00000000 nt!KeBugCheckEx+0x1b
a8c3ca00 aa1908fc 840d4840 843ec480 00000001 nt!IopfCallDriver+0x17
WARNING: Stack unwind information not available. Following frames may be wrong.
a8c3ca14 aa190cad 855756e8 843ec480 aa190aac SbFw+0x158fc
a8c3ca38 aa1917fc 855756e8 00000000 8555f6e8 SbFw+0x15cad
a8c3ca50 aa191acd 8555f6e8 855756e8 843ec480 SbFw+0x167fc
a8c3ca70 aa17e324 8555f6e8 843ec480 a8c3ca98 SbFw+0x16acd
a8c3ca80 804e13eb 8555f6e8 843ec480 84476d10 SbFw+0x3324
a8c3cad8 804e13eb 855576e0 843ec480 8636cdf0 nt!IopfCallDriver+0x31
a8c3cb8c 804e13eb 855576e0 843ec480 855677f8 nt!IopfCallDriver+0x31
a8c3cbbc 804e13eb 85567740 843ec480 843d352c nt!IopfCallDriver+0x31
a8c3cbcc aa0a2ec3 00012007 aa0a2c55 843ec480 nt!IopfCallDriver+0x31
a8c3cc30 aa0aa2d7 84a1a580 864dc420 a8c3cc64 afd!AfdConnect+0x3ac
a8c3cc40 804e13eb 863e28a8 843ec480 80702410 afd!AfdDispatchDeviceControl+0x53
a8c3cc50 805738eb 843ec55c 84a1a580 843ec480 nt!IopfCallDriver+0x31
a8c3cc64 80582ad7 863e28a8 843ec480 84a1a580 nt!IopSynchronousServiceTail+0x70
a8c3cd00 80588ce0 00000120 000000fc 00000000 nt!IopXxxControlFile+0x5ef
a8c3cd34 804dd99f 00000120 000000fc 00000000 nt!NtDeviceIoControlFile+0x2a
a8c3cd34 7c90e514 00000120 000000fc 00000000 nt!KiFastCallEntry+0xfc
0012f7b0 00000000 00000000 00000000 00000000 0x7c90e514
STACK_COMMAND: kb
FOLLOWUP_IP:
SbFw+158fc
aa1908fc ? ?
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: SbFw+158fc
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: SbFw
IMAGE_NAME: SbFw.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 0
FAILURE_BUCKET_ID: 0x35_SbFw+158fc
BUCKET_ID: 0x35_SbFw+158fc
Followup: MachineOwner
---------
sysinfo: could not find necessary interfaces.
sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
sysinfo: could not find necessary interfaces.
sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
start end module name
f78bb000 f78c8080 1394BUS 1394BUS.SYS Sun Apr 13 20: 46: 18 2008 (480254FA)
f7c03000 f7c09000 Aavmker4 Aavmker4.SYS unavailable (00000000)
f77fb000 f7829080 ACPI ACPI.sys Sun Apr 13 20: 36: 33 2008 (480252B1)
f7c67000 f7c69f00 ACPIEC ACPIEC.sys Fri Aug 17 22: 57: 55 2001 (3B7D8553)
a8e4f000 a8e71d00 aec aec.sys Thu May 24 21: 53: 32 2007 (4655ED3C)
f7b5b000 f7b5fba0 AegisP AegisP.sys Thu Sep 28 17: 44: 52 2006 (451BEDF4)
aa09f000 aa0c0d00 afd afd.sys Wed Feb 16 14: 22: 47 2011 (4D5BCFA7)
aa1dc000 aa2f77c0 AGRSM AGRSM.sys Wed Aug 30 20: 52: 55 2006 (44F5DE87)
f2f46000 f2f48d00 ANC ANC.SYS Mon Mar 22 06: 08: 44 2004 (405E74DC)
f588c000 f589ad80 arp1394 arp1394.sys Sun Apr 13 20: 51: 22 2008 (4802562A)
a9d73000 a9d76000 aswFsBlk aswFsBlk.SYS unavailable (00000000)
a9c2c000 a9c43000 aswMon2 aswMon2.SYS unavailable (00000000)
f7be3000 f7be8000 aswRdr aswRdr.SYS unavailable (00000000)
a9f4a000 a9fba000 aswSnx aswSnx.SYS Mon Jul 04 13: 36: 42 2011 (4E11A5CA)
a9fba000 aa004000 aswSP aswSP.SYS unavailable (00000000)
f0499000 f04a2000 aswTdi aswTdi.SYS unavailable (00000000)
f778d000 f77a4900 atapi atapi.sys Sun Apr 13 20: 40: 29 2008 (4802539D)
bf453000 bf499e80 ATMFD ATMFD.DLL Tue Feb 15 13: 56: 39 2011 (4D5A7807)
a9f27000 a9f4a000 ATSwpDrv ATSwpDrv.sys unavailable (00000000)
f7e7c000 f7e7cc00 audstub audstub.sys Fri Aug 17 22: 59: 40 2001 (3B7D85BC)
efcd2000 efcfd000 b57xp32 b57xp32.sys Sat Feb 17 00: 46: 40 2007 (45D64260)
f7c63000 f7c66780 BATTC BATTC.SYS Sun Apr 13 20: 36: 32 2008 (480252B0)
f12f2000 f12f3080 Beep Beep.SYS Fri Aug 17 22: 47: 33 2001 (3B7D82E5)
f7c5b000 f7c5e000 BOOTVID BOOTVID.dll Fri Aug 17 22: 49: 09 2001 (3B7D8345)
efa32000 efa80320 btaudio btaudio.sys Sun Oct 15 23: 02: 18 2006 (4532A1DA)
efb37000 efc05860 btkrnl btkrnl.sys Thu Nov 09 04: 11: 11 2006 (45529C4F)
f2aa1000 f2aa7e60 btport btport.sys Tue Oct 10 07: 00: 24 2006 (452B28E8)
a9dec000 a9e09240 btwdndis btwdndis.sys Sun Oct 15 23: 01: 53 2006 (4532A1C1)
f790b000 f791ae80 btwusb btwusb.sys Sun Oct 15 22: 59: 31 2006 (4532A133)
f589c000 f58ab900 Cdfs Cdfs.SYS Sun Apr 13 21: 14: 21 2008 (48025B8D)
f13e4000 f13f3600 cdrom cdrom.sys Sun Apr 13 20: 40: 45 2008 (480253AD)
f788b000 f7897180 CLASSPNP CLASSPNP.SYS Sun Apr 13 21: 16: 21 2008 (48025C05)
f2811000 f2814680 CmBatt CmBatt.sys Sun Apr 13 20: 36: 36 2008 (480252B4)
f7c5f000 f7c61800 compbatt compbatt.sys Sun Apr 13 20: 36: 36 2008 (480252B4)
f787b000 f7883e00 disk disk.sys Sun Apr 13 20: 40: 46 2008 (480253AE)
f77a5000 f77ca900 dmio dmio.sys Sun Apr 13 20: 44: 45 2008 (4802549D)
f7d4f000 f7d50700 dmload dmload.sys Fri Aug 17 22: 58: 15 2001 (3B7D8567)
a912f000 a913be80 DMusic DMusic.sys Sun Apr 13 20: 45: 00 2008 (480254AC)
f09de000 f09ecb00 drmk drmk.sys Sun Apr 13 20: 45: 12 2008 (480254B8)
f7ecb000 f7ecbb80 drmkaud drmkaud.sys Sun Apr 13 20: 45: 13 2008 (480254B9)
a9e32000 a9ef0000 dump_iaStor dump_iaStor.sys Mon Feb 12 21: 46: 47 2007 (45D0D237)
f756e000 f7570900 Dxapi Dxapi.sys Fri Aug 17 22: 53: 19 2001 (3B7D843F)
bf000000 bf011600 dxg dxg.sys Sun Apr 13 20: 38: 27 2008 (48025323)
f7f88000 f7f88d00 dxgthk dxgthk.sys Fri Aug 17 22: 53: 12 2001 (3B7D8438)
a9dd3000 a9dec000 ewusbmdm ewusbmdm.sys unavailable (00000000)
f7a4b000 f7a55e80 Fips Fips.SYS Sun Apr 13 20: 33: 27 2008 (480251F7)
f76af000 f76ceb00 fltmgr fltmgr.sys Sun Apr 13 20: 32: 58 2008 (480251DA)
f12f6000 f12f7f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 22: 49: 37 2001 (3B7D8361)
f77cb000 f77e9a80 ftdisk ftdisk.sys Fri Aug 17 22: 52: 41 2001 (3B7D8419)
80700000 80720d00 hal halmacpi.dll Sun Apr 13 20: 31: 27 2008 (4802517F)
efe9f000 efec7000 HDAudBus HDAudBus.sys Thu May 26 17: 46: 29 2005 (4295EF55)
f78fb000 f7904000 HIDCLASS HIDCLASS.SYS Sun Apr 13 20: 45: 25 2008 (480254C5)
f7bbb000 f7bc1180 HIDPARSE HIDPARSE.SYS Sun Apr 13 20: 45: 22 2008 (480254C2)
f31b8000 f31ba880 hidusb hidusb.sys Sun Apr 13 20: 45: 27 2008 (480254C7)
f5b39000 f5b3b180 i2omgmt i2omgmt.SYS Sun Apr 13 20: 41: 22 2008 (480253D2)
f1404000 f1411000 i8042prt i8042prt.sys Sun Apr 13 21: 17: 59 2008 (48025C67)
f76cf000 f778d000 iaStor iaStor.sys Mon Feb 12 21: 46: 47 2007 (45D0D237)
f7dd1000 f7dd3000 IBMBLDID IBMBLDID.sys unavailable (00000000)
bf04e000 bf1d7b20 igxpdv32 igxpdv32.DLL Mon Feb 26 20: 58: 29 2007 (45E33BE5)
bf1d8000 bf453000 igxpdx32 igxpdx32.DLL Mon Feb 26 20: 59: 35 2007 (45E33C27)
bf024000 bf04e000 igxpgd32 igxpgd32.dll Mon Feb 26 20: 58: 44 2007 (45E33BF4)
efeff000 f046ea00 igxpmp32 igxpmp32.sys Mon Feb 26 20: 59: 09 2007 (45E33C0D)
bf012000 bf024000 igxprd32 igxprd32.dll Mon Feb 26 20: 58: 51 2007 (45E33BFB)
f13f4000 f13fe480 imapi imapi.sys Sun Apr 13 20: 40: 57 2008 (480253B9)
f1434000 f143de00 intelppm intelppm.sys Sun Apr 13 20: 31: 31 2008 (48025183)
aa0e9000 aa10e500 ipnat ipnat.sys Sun Apr 13 20: 57: 10 2008 (48025786)
aa168000 aa17a600 ipsec ipsec.sys Sun Apr 13 21: 19: 42 2008 (48025CCE)
f784b000 f7854300 isapnp isapnp.sys Sun Apr 13 20: 36: 40 2008 (480252B8)
f2c94000 f2c99200 iviaspi iviaspi.sys Thu Sep 11 08: 36: 53 2003 (3F601805)
f7bab000 f7bb1180 kbdclass kbdclass.sys Sun Apr 13 20: 39: 46 2008 (48025372)
f7d4b000 f7d4cb80 kdcom kdcom.dll Fri Aug 17 22: 49: 10 2001 (3B7D8346)
a8e24000 a8e4e180 kmixer kmixer.sys Sun Apr 13 20: 45: 07 2008 (480254B3)
efc06000 efc28700 ks ks.sys Sun Apr 13 21: 16: 34 2008 (48025C12)
f7686000 f769cb00 KSecDD KSecDD.sys Wed Jun 24 13: 18: 40 2009 (4A420B90)
f12ee000 f12ef080 mnmdd mnmdd.SYS Fri Aug 17 22: 57: 28 2001 (3B7D8538)
f7c53000 f7c5a600 Modem Modem.SYS Sun Apr 13 21: 00: 18 2008 (48025842)
f2cac000 f2cb1b00 mouclass mouclass.sys Sun Apr 13 20: 39: 47 2008 (48025373)
f31b0000 f31b2f80 mouhid mouhid.sys Fri Aug 17 22: 47: 57 2001 (3B7D82FD)
f785b000 f7865580 MountMgr MountMgr.sys Sun Apr 13 20: 39: 45 2008 (48025371)
a9a97000 a9ac3180 mrxdav mrxdav.sys Sun Apr 13 20: 32: 42 2008 (480251CA)
aa004000 aa073680 mrxsmb mrxsmb.sys Fri Apr 29 18: 19: 41 2011 (4DBAE51D)
f2c9c000 f2ca0a80 Msfs Msfs.SYS Sun Apr 13 20: 32: 38 2008 (480251C6)
f0a2e000 f0a36900 msgpc msgpc.sys Sun Apr 13 20: 56: 32 2008 (48025760)
f05cb000 f05cec80 mssmbios mssmbios.sys Sun Apr 13 20: 36: 45 2008 (480252BD)
f75b2000 f75cbc00 Mup Mup.sys Thu Apr 21 15: 37: 43 2011 (4DB03327)
f75cc000 f75f8980 NDIS NDIS.sys Sun Apr 13 21: 20: 35 2008 (48025D03)
f1356000 f1358780 ndistapi ndistapi.sys Sun Apr 13 20: 57: 27 2008 (48025797)
a9cbf000 a9cc2900 ndisuio ndisuio.sys Sun Apr 13 20: 55: 57 2008 (4802573D)
efb20000 efb36580 ndiswan ndiswan.sys Sun Apr 13 21: 20: 41 2008 (48025D09)
f09ce000 f09d8000 NDProxy NDProxy.SYS Tue Nov 02 16: 17: 02 2010 (4CD02B6E)
f0489000 f0491780 netbios netbios.sys Sun Apr 13 20: 56: 01 2008 (48025741)
aa0c1000 aa0e8c00 netbt netbt.sys Sun Apr 13 21: 20: 59 2008 (48025D1B)
efcfd000 efe9f000 NETw3x32 NETw3x32.sys unavailable (00000000)
f78db000 f78ea180 nic1394 nic1394.sys Sun Apr 13 20: 51: 22 2008 (4802562A)
f2a89000 f2a90880 Npfs Npfs.SYS Sun Apr 13 20: 32: 38 2008 (480251C6)
804d7000 80700000 nt ntkrnlmp.exe Thu Dec 09 14: 42: 14 2010 (4D00DCB6)
f75f9000 f7685600 Ntfs Ntfs.sys Sun Apr 13 21: 15: 49 2008 (48025BE5)
f7f0d000 f7f0db80 Null Null.SYS Fri Aug 17 22: 47: 39 2001 (3B7D82EB)
f78ab000 f78ba100 ohci1394 ohci1394.sys Sun Apr 13 20: 46: 18 2008 (480254FA)
f7e14000 f7e14d80 OPRGHDLR OPRGHDLR.SYS Fri Aug 17 22: 57: 55 2001 (3B7D8553)
f7ad3000 f7ad7d00 PartMgr PartMgr.sys Sun Apr 13 20: 40: 48 2008 (480253B0)
f77ea000 f77fac00 pci pci.sys Sun Apr 13 20: 36: 43 2008 (480252BB)
f7e13000 f7e13d80 pciide pciide.sys Fri Aug 17 22: 51: 49 2001 (3B7D83E5)
f7acb000 f7ad1180 PCIIDEX PCIIDEX.SYS Sun Apr 13 20: 40: 29 2008 (4802539D)
f7dc5000 f7dc6400 pmemnt pmemnt.sys Tue May 04 18: 13: 04 2004 (4097C110)
f05c3000 f05c6000 PMHler PMHler.sys unavailable (00000000)
efa0e000 efa31a80 portcls portcls.sys Sun Apr 13 21: 19: 40 2008 (48025CCC)
f2a59000 f2a60000 PROCDD PROCDD.SYS Mon Nov 06 23: 59: 07 2006 (454FBE3B)
f2a91000 f2a97000 psadd psadd.sys unavailable (00000000)
efb0f000 efb1fe00 psched psched.sys Sun Apr 13 20: 56: 36 2008 (48025764)
f7b7b000 f7b7f580 ptilink ptilink.sys Fri Aug 17 22: 49: 53 2001 (3B7D8371)
f789b000 f78a3b80 PxHelp20 PxHelp20.sys Fri Feb 02 22: 23: 57 2007 (45C3ABED)
f5b2d000 f5b2f280 rasacd rasacd.sys Fri Aug 17 22: 55: 39 2001 (3B7D84CB)
f13c4000 f13d0880 rasl2tp rasl2tp.sys Sun Apr 13 21: 19: 43 2008 (48025CCF)
f0a4e000 f0a58200 raspppoe raspppoe.sys Sun Apr 13 20: 57: 31 2008 (4802579B)
f0a3e000 f0a49d00 raspptp raspptp.sys Sun Apr 13 21: 19: 47 2008 (48025CD3)
f7b93000 f7b97080 raspti raspti.sys Fri Aug 17 22: 55: 32 2001 (3B7D84C4)
aa074000 aa09ee80 rdbss rdbss.sys Sun Apr 13 21: 28: 38 2008 (48025EE6)
f12ea000 f12eb080 RDPCDD RDPCDD.sys Fri Aug 17 22: 46: 56 2001 (3B7D82C0)
efadf000 efb0ee80 rdpdr rdpdr.sys Sun Apr 13 20: 32: 50 2008 (480251D2)
f13d4000 f13e2600 redbook redbook.sys Sun Apr 13 20: 40: 27 2008 (4802539B)
f1414000 f1423000 rimmptsk rimmptsk.sys Sat Feb 24 06: 42: 21 2007 (45DFD03D)
efcaa000 efcbe000 rimsptsk rimsptsk.sys Tue Jan 23 08: 40: 19 2007 (45B5BBE3)
efc59000 efcaa000 rixdptsk rixdptsk.sys Tue Jan 23 09: 03: 27 2007 (45B5C14F)
aa2f8000 aa780000 RtkHDAud RtkHDAud.sys Fri Aug 10 07: 52: 37 2007 (46BBFD25)
a9d2f000 a9d33000 s24trans s24trans.sys unavailable (00000000)
aa17b000 aa1bc000 SbFw SbFw.sys unavailable (00000000)
f0a0e000 f0a1d000 sbfwim sbfwim.sys unavailable (00000000)
f79bb000 f79ca000 sbhips sbhips.sys unavailable (00000000)
efcbe000 efcd1580 sdbus sdbus.sys Sun Apr 13 20: 36: 44 2008 (480252BC)
f7d9f000 f7da0880 splitter splitter.sys Sun Apr 13 20: 45: 07 2008 (480254B3)
f769d000 f76aef00 sr sr.sys Sun Apr 13 20: 36: 50 2008 (480252C2)
a9797000 a97ee600 srv srv.sys Thu Feb 17 14: 18: 01 2011 (4D5D2009)
f7c3b000 f7c41000 StarOpen StarOpen.SYS Tue Jun 27 21: 15: 56 2006 (44A183EC)
f7dc3000 f7dc4100 swenum swenum.sys Sun Apr 13 20: 39: 52 2008 (48025378)
a9557000 a9564d00 swmidi swmidi.sys Sun Apr 13 20: 45: 07 2008 (480254B3)
efc29000 efc58240 SynTP SynTP.sys Fri May 19 23: 24: 20 2006 (446E3784)
a903f000 a904dd80 sysaudio sysaudio.sys Sun Apr 13 21: 15: 55 2008 (48025BEB)
aa10f000 aa167480 tcpip tcpip.sys Fri Jun 20 13: 51: 09 2008 (485B99AD)
f098e000 f0993000 tcpipBM tcpipBM.SYS unavailable (00000000)
f7b53000 f7b57a80 TDI TDI.SYS Sun Apr 13 21: 00: 04 2008 (48025834)
f0a1e000 f0a27f00 termdd termdd.sys Sun Apr 13 20: 38: 36 2008 (4802532C)
f7c43000 f7c49000 TSMAPIP TSMAPIP.SYS Fri Jun 28 05: 59: 23 2002 (3D1BDF1B)
f2ece000 f2ed6300 tvtfilter tvtfilter.sys Tue Oct 17 21: 21: 56 2006 (45352D54)
f2a79000 f2a80000 Tvti2c Tvti2c.sys unavailable (00000000)
f7b0b000 f7b10000 tvtpktfilter tvtpktfilter.sys unavailable (00000000)
efa81000 efadef00 update update.sys Sun Apr 13 20: 39: 46 2008 (48025372)
f7c13000 f7c1ad80 usbccgp usbccgp.sys Sun Apr 13 20: 45: 38 2008 (480254D2)
f7dbd000 f7dbe280 USBD USBD.SYS Fri Aug 17 23: 02: 58 2001 (3B7D8682)
f2a99000 f2aa0600 usbehci usbehci.sys Sun Apr 13 20: 45: 34 2008 (480254CE)
f0509000 f0517880 usbhub usbhub.sys Sun Apr 13 20: 45: 36 2008 (480254D0)
efec7000 efeea200 USBPORT USBPORT.SYS Sun Apr 13 20: 45: 34 2008 (480254CE)
f18bd000 f18c3700 USBSTOR USBSTOR.SYS Sun Apr 13 20: 45: 37 2008 (480254D1)
f2cb4000 f2cb9080 usbuhci usbuhci.sys Sun Apr 13 20: 45: 34 2008 (480254CE)
a9ef0000 a9f0dc80 usbvideo usbvideo.sys Sun Apr 13 20: 46: 18 2008 (480254FA)
f7b3b000 f7b40200 vga vga.sys Sun Apr 13 20: 44: 40 2008 (48025498)
efeeb000 efefef00 VIDEOPRT VIDEOPRT.SYS Sun Apr 13 20: 44: 39 2008 (48025497)
f786b000 f7877e80 VolSnap VolSnap.sys Sun Apr 13 20: 41: 00 2008 (480253BC)
f58ac000 f58b4700 wanarp wanarp.sys Sun Apr 13 20: 57: 20 2008 (48025790)
f4097000 f409b500 watchdog watchdog.sys Sun Apr 13 20: 44: 59 2008 (480254AB)
a8f12000 a8f26480 wdmaud wdmaud.sys Sun Apr 13 21: 17: 18 2008 (48025C3E)
bf800000 bf9c5e80 win32k win32k.sys Thu Jun 02 16: 01: 55 2011 (4DE797D3)
f2d17000 f2d19280 wmiacpi wmiacpi.sys Sun Apr 13 20: 36: 37 2008 (480252B5)
f7d4d000 f7d4e100 WMILIB WMILIB.SYS Fri Aug 17 23: 07: 23 2001 (3B7D878B)
f7572000 f7574f00 ws2ifsl ws2ifsl.sys Fri Aug 17 22: 55: 58 2001 (3B7D84DE)
Unloaded modules:
a9f0e000 a9f27000 ewusbmdm.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00019000
f79ab000 f79b5000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000A000
f0479000 f0489000 serial.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00010000
f7b2b000 f7b30000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00005000
quit:
Z tych dwóch typów bsod jakie na razie można wnioski wyciągnąć:
Na początek wykonać małą zmianę w rejestrze ponieważ dogrzebałem się do takiej informacji na forum WSS'a
Cytat:NO_MORE_IRP_STACK_LOCATIONS
With this code, if you've added a new virus scanner or someone has accessed a shared volume over the network for the first time on the machine, the Server device driver can be at fault. The Server device driver constructs I/O request packets with a slot for every device driver on the path to the disk. Sometimes the number of I/O request packets the Server device driver allocates is insufficient, resulting in this Stop Code. Try increasing the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ServicesLanmanServer\IrpStackSize setting to a number higher than 4 (or whatever it's set to) and see whether the problem goes away.
Potem wykonać defragmentację, przelecieć dysk "czekdiskiem" czyli chkdsk /f/r
Dla świętego spokoju zrobiłbym jego diagnostykę bo to już starszy lapek.
WinDirStatem przejrzyj jak wygląda obłożenie dysku oraz czym i wedle potrzeb pokasuj to co jest zbędne. Tutków z optymalizacją XP'ka (przede wszystkim temat czyszczenia dysku z klamotów) masz multum.
Przy pierwszym bsodzie doczytałem iż może mieć związek ze zbyt małą ilością miejsca na dysku. Być może tworzony jest jakiś duży plik tmp i wywala bsod o tym kodzie.
Gdyby nie zdało rezultatu usuń Sunbelta i testuj inne darmowe firewalle -> safegroup.pl
Nie znalazłem żadnego bsoda odnoszącego się do problemów ze sterownikiem video.
Post: #2![[Obrazek: 2089620800_1406976151.png]](http://obrazki.elektroda.pl/2089620800_1406976151.png)
Podziękowania od:
