Приветствую!
некоторое количество компьютеров неожиданно вываливается в BSOD.
подсобите с анализом дампа падения компьютера, вижу что причиной стал драйвер, а какой невкурю ...
Loading Dump File [C:\Temp\BSOD\SM-SAVITSKYSV\Mini111209-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.050301-1519
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
Debug session time: Thu Nov 12 10:53:11.726 2009 (GMT+3)
System Uptime: 0 days 1:50:47.072
Loading Kernel Symbols
...............................................................
................................................................
......
Loading User Symbols
Loading unloaded module list
...............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000008E, {c0000005, 805c7395, f8922d20, 0}
Probably caused by : ntkrnlpa.exe ( nt!PspTerminateThreadByPointer+17 )
Followup: MachineOwner
---------
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 805c7395, The address that the exception occurred at
Arg3: f8922d20, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
FAULTING_IP:
nt!PspTerminateThreadByPointer+17
805c7395 f60640 test byte ptr [esi],40h
TRAP_FRAME: f8922d20 -- (.trap 0xfffffffff8922d20)
ErrCode = 00000000
eax=81fb3801 ebx=9a5f4400 ecx=81fb3a21 edx=00000001 esi=00000248 edi=00000000
eip=805c7395 esp=f8922d94 ebp=f8922da8 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
nt!PspTerminateThreadByPointer+0x17:
805c7395 f60640 test byte ptr [esi],40h ds:0023:00000248=??
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: System
LAST_CONTROL_TRANSFER: from 805c4a12 to 805c7395
STACK_TEXT:
f8922da8 805c4a12 00000000 00000000 00000000 nt!PspTerminateThreadByPointer+0x17
f8922ddc 80540fa2 80533cd0 80000000 00000000 nt!PspSystemThreadStartup+0x40
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!PspTerminateThreadByPointer+17
805c7395 f60640 test byte ptr [esi],40h
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!PspTerminateThreadByPointer+17
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlpa.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 42250a1d
FAILURE_BUCKET_ID: 0x8E_nt!PspTerminateThreadByPointer+17
BUCKET_ID: 0x8E_nt!PspTerminateThreadByPointer+17
Followup: MachineOwner
---------
kd> lmtn
start end module name
804d7000 806cd280 nt ntkrnlpa.exe Wed Mar 02 03:34:37 2005 (42250A1D)
806ce000 806ee280 hal hal.dll Tue Nov 16 04:37:02 2004 (419959BE)
a8e01000 a8e2af00 kmixer kmixer.sys Wed Aug 04 10:07:46 2004 (41107D32)
a8e2b000 a8e4e000 Fastfat Fastfat.SYS Wed Aug 04 10:14:15 2004 (41107EB7)
a9008000 a9048100 HTTP HTTP.sys Sat Oct 09 03:48:20 2004 (41672744)
a9226000 a923a400 wdmaud wdmaud.sys Wed Aug 04 10:15:03 2004 (41107EE7)
a9433000 a9441d80 sysaudio sysaudio.sys Wed Aug 04 10:15:54 2004 (41107F1A)
a94e3000 a94e5d00 vstor2 vstor2.sys Fri Aug 04 22:28:33 2006 (44D391D1)
a96eb000 a97083e0 srvloc srvloc.sys Thu Feb 20 19:21:16 2003 (3E55007C)
a9761000 a9764d00 vmnetuserif vmnetuserif.sys Fri Aug 04 22:20:02 2006 (44D38FD2)
a9781000 a97d2400 srv srv.sys Fri Apr 21 10:12:25 2006 (444877C9)
a98db000 a98de820 nwdhcp nwdhcp.sys Fri Oct 04 23:39:51 2002 (3D9DEE87)
a99cf000 a99d1b20 NWHOST NWHOST.sys Tue Oct 23 20:13:19 2001 (3BD5971F)
a9a3c000 a9a45540 nwsipx32 nwsipx32.sys Wed May 29 21:56:16 2002 (3CF51640)
a9a8c000 a9aa3280 vmx86 vmx86.sys Fri Aug 04 21:52:41 2006 (44D38969)
a9acc000 a9af8400 mrxdav mrxdav.sys Wed Aug 04 10:00:49 2004 (41107B91)
a9b21000 a9b7aa20 nwfs nwfs.sys Mon Apr 07 19:30:30 2003 (3E919996)
a9b9b000 a9ba8a80 nwlnkspx nwlnkspx.sys Sat Aug 18 00:54:16 2001 (3B7D8478)
a9beb000 a9bf4000 cismbios cismbios.sys Thu Dec 07 17:40:57 2006 (457827F9)
a9c53000 a9c57000 ioperm ioperm.sys Mon Feb 17 22:58:15 2003 (3E513ED7)
a9cfb000 a9d44000 DeviceLockDriver0 DeviceLockDriver0.SYS Sat Jul 19 05:54:28 2008 (48814954)
a9e34000 a9e37900 ndisuio ndisuio.sys Wed Apr 20 03:54:03 2005 (42659A1B)
a9e5c000 a9e71980 nwlnkipx nwlnkipx.sys Wed Aug 04 10:03:29 2004 (41107C31)
a9ee2000 a9ee4800 VMNET VMNET.SYS Thu Dec 16 11:13:19 2004 (41C1439F)
a9f6a000 a9f74000 hcmon hcmon.sys Fri Aug 04 22:18:45 2006 (44D38F85)
aa002000 aa019480 dump_atapi dump_atapi.sys Wed Aug 04 09:59:41 2004 (41107B4D)
aa01a000 aa059000 klif klif.sys Wed Apr 01 14:46:17 2009 (49D345F9)
aa059000 aa0c7a00 mrxsmb mrxsmb.sys Fri May 05 13:41:42 2006 (445B1DD6)
aa0f0000 aa11aa00 rdbss rdbss.sys Fri May 05 13:47:55 2006 (445B1F4B)
aa11b000 aa13cd00 afd afd.sys Wed Aug 04 10:14:13 2004 (41107EB5)
aa13d000 aa164c00 netbt netbt.sys Wed Aug 04 10:14:36 2004 (41107ECC)
aa165000 aa1bd080 tcpip tcpip.sys Thu Apr 20 16:18:33 2006 (44477C19)
aa1be000 aa1d0400 ipsec ipsec.sys Wed Aug 04 10:14:27 2004 (41107EC3)
aa209000 aa20b900 Dxapi Dxapi.sys Sat Aug 18 00:53:19 2001 (3B7D843F)
aa2a9000 aa2b2000 DLDriverKbd0 DLDriverKbd0.SYS Sat Jul 19 05:55:39 2008 (4881499B)
aa2e1000 aa302700 portcls portcls.sys Tue Mar 16 21:58:17 2004 (40574E49)
aa303000 aa758000 RtkHDAud RtkHDAud.sys Thu Oct 12 05:52:00 2006 (452D9FC0)
bf000000 bf011580 dxg dxg.sys Wed Aug 04 10:00:51 2004 (41107B93)
bf012000 bf024000 igxprd32 igxprd32.dll Sat Oct 07 01:23:30 2006 (4526C952)
bf024000 bf04d000 igxpgd32 igxpgd32.dll Sat Oct 07 01:23:20 2006 (4526C948)
bf04d000 bf1ad420 igxpdv32 igxpdv32.DLL Sat Oct 07 01:22:52 2006 (4526C92C)
bf1ae000 bf3e1000 igxpdx32 igxpdx32.DLL Sat Oct 07 01:24:40 2006 (4526C998)
bf800000 bf9c1180 win32k win32k.sys Thu Oct 06 04:05:44 2005 (43446A58)
f7e81000 f7eb4200 update update.sys Wed Aug 04 09:58:32 2004 (41107B08)
f7eb5000 f7ee5100 rdpdr rdpdr.sys Wed Aug 04 10:01:10 2004 (41107BA6)
f7eee000 f7ef0280 rasacd rasacd.sys Sat Aug 18 00:55:39 2001 (3B7D84CB)
f7f0e000 f7f1ee00 psched psched.sys Wed Aug 04 10:04:16 2004 (41107C60)
f7f1f000 f7f35680 ndiswan ndiswan.sys Wed Aug 04 10:14:30 2004 (41107EC6)
f7f78000 f7f9a680 ks ks.sys Wed Aug 04 10:15:20 2004 (41107EF8)
f7f9b000 f7fc5000 b57xp32 b57xp32.sys Thu May 11 02:00:15 2006 (4462626F)
f7fc5000 f7fea000 HDAudBus HDAudBus.sys Sat Jan 08 04:07:15 2005 (41DF3243)
f7fea000 f800ce80 USBPORT USBPORT.SYS Wed Aug 04 10:08:34 2004 (41107D62)
f800d000 f8020780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 10:07:04 2004 (41107D08)
f8021000 f8141880 igxpmp32 igxpmp32.sys Sat Oct 07 01:23:59 2006 (4526C96F)
f8166000 f8169c80 mssmbios mssmbios.sys Wed Aug 04 10:07:47 2004 (41107D33)
f818a000 f81a7000 kl1 kl1.sys Wed Apr 16 14:21:59 2008 (4805D347)
f81a7000 f81c0900 Mup Mup.sys Fri Sep 09 06:24:19 2005 (4320F253)
f81c1000 f81e6000 VirBlock VirBlock.sys Tue Aug 14 11:39:40 2007 (46C15C3C)
f81e6000 f8212a80 NDIS NDIS.sys Wed Aug 04 10:14:27 2004 (41107EC3)
f8213000 f829f480 Ntfs Ntfs.sys Wed Aug 04 10:15:06 2004 (41107EEA)
f82a0000 f82b6780 KSecDD KSecDD.sys Wed Aug 04 09:59:45 2004 (41107B51)
f82b7000 f82b8000 fltMgr fltMgr.sys unavailable (00000000)
f82d6000 f82ed480 atapi atapi.sys Wed Aug 04 09:59:41 2004 (41107B4D)
f82ee000 f8313700 dmio dmio.sys Wed Aug 04 10:07:13 2004 (41107D11)
f8314000 f8332880 ftdisk ftdisk.sys Sat Aug 18 00:52:41 2001 (3B7D8419)
f8333000 f8343a80 pci pci.sys Wed Aug 04 10:07:45 2004 (41107D31)
f8344000 f8371d80 ACPI ACPI.sys Wed Aug 04 10:07:35 2004 (41107D27)
f8473000 f847bc00 isapnp isapnp.sys Sat Aug 18 00:58:01 2001 (3B7D8559)
f8483000 f848d500 MountMgr MountMgr.sys Wed Aug 04 09:58:29 2004 (41107B05)
f8493000 f849fc80 VolSnap VolSnap.sys Wed Aug 04 10:00:14 2004 (41107B6E)
f84a3000 f84abe00 disk disk.sys Wed Aug 04 09:59:53 2004 (41107B59)
f84b3000 f84bf200 CLASSPNP CLASSPNP.SYS Wed Aug 04 10:14:26 2004 (41107EC2)
f84d3000 f84dcf00 termdd termdd.sys Wed Aug 04 09:58:52 2004 (41107B1C)
f84f3000 f84fc480 NDProxy NDProxy.SYS Sat Aug 18 00:55:30 2001 (3B7D84C2)
f8543000 f8551100 usbhub usbhub.sys Wed Aug 04 10:08:40 2004 (41107D68)
f8563000 f8571b80 drmk drmk.sys Wed Aug 04 10:07:54 2004 (41107D3A)
f8583000 f858b700 netbios netbios.sys Wed Aug 04 10:03:19 2004 (41107C27)
f85b3000 f85bb880 Fips Fips.SYS Sat Aug 18 05:31:49 2001 (3B7DC585)
f85e3000 f85f2900 Cdfs Cdfs.SYS Wed Aug 04 10:14:09 2004 (41107EB1)
f8613000 f8622700 nwlnknb nwlnknb.sys Sat Aug 18 00:54:16 2001 (3B7D8478)
f8633000 f863fe00 i8042prt i8042prt.sys Wed Aug 04 10:14:36 2004 (41107ECC)
f8643000 f864f180 cdrom cdrom.sys Wed Aug 04 09:59:52 2004 (41107B58)
f8653000 f8661080 redbook redbook.sys Wed Aug 04 09:59:34 2004 (41107B46)
f8663000 f866bd00 intelppm intelppm.sys Wed Aug 04 09:59:19 2004 (41107B37)
f8673000 f867f880 rasl2tp rasl2tp.sys Wed Aug 04 10:14:21 2004 (41107EBD)
f8683000 f868d200 raspppoe raspppoe.sys Wed Aug 04 10:05:06 2004 (41107C92)
f8693000 f869ed00 raspptp raspptp.sys Wed Aug 04 10:14:26 2004 (41107EC2)
f86a3000 f86ab900 msgpc msgpc.sys Wed Aug 04 10:04:11 2004 (41107C5B)
f86b3000 f86bb700 wanarp wanarp.sys Wed Aug 04 10:04:57 2004 (41107C89)
f86f3000 f86f9200 PCIIDEX PCIIDEX.SYS Wed Aug 04 09:59:40 2004 (41107B4C)
f86fb000 f86ff900 PartMgr PartMgr.sys Sat Aug 18 05:32:23 2001 (3B7DC5A7)
f8703000 f8707880 TDI TDI.SYS Wed Aug 04 10:07:47 2004 (41107D33)
f8743000 f874a000 DeviceLockDriverHlpExtG3 DeviceLockDriverHlpExtG3.SYS Sat Jul 19 05:55:37 2008 (48814999)
f875b000 f875f7c0 nwslp nwslp.sys Thu Feb 13 19:21:10 2003 (3E4BC5F6)
f8763000 f876a040 asyncr asyncr.SYS Thu Jun 26 15:56:17 2003 (3EFADF61)
f8783000 f878ad60 nwdns nwdns.sys Mon Apr 07 19:28:13 2003 (3E91990D)
f879b000 f87a1a60 resmgr resmgr.sys Tue Oct 23 20:04:58 2001 (3BD5952A)
f87ab000 f87b0000 usbuhci usbuhci.sys Wed Aug 04 10:08:34 2004 (41107D62)
f87b3000 f87b9800 usbehci usbehci.sys Wed Aug 04 10:08:34 2004 (41107D62)
f87bb000 f87c0a00 mouclass mouclass.sys Wed Aug 04 09:58:32 2004 (41107B08)
f87c3000 f87c9000 kbdclass kbdclass.sys Wed Aug 04 09:58:32 2004 (41107B08)
f87cb000 f87cc000 fdc fdc.sys unavailable (00000000)
f87d3000 f87db000 klim5 klim5.sys Wed May 30 18:48:20 2007 (465D8EB4)
f87e3000 f87e7580 ptilink ptilink.sys Sat Aug 18 00:49:53 2001 (3B7D8371)
f87eb000 f87ef080 raspti raspti.sys Sat Aug 18 00:55:32 2001 (3B7D84C4)
f87f3000 f87f8000 flpydisk flpydisk.sys Wed Aug 04 09:59:24 2004 (41107B3C)
f882b000 f8830200 vga vga.sys Wed Aug 04 10:07:06 2004 (41107D0A)
f8833000 f8837a80 Msfs Msfs.SYS Wed Aug 04 10:00:37 2004 (41107B85)
f883b000 f8842880 Npfs Npfs.SYS Wed Aug 04 10:00:38 2004 (41107B86)
f8853000 f8857500 watchdog watchdog.sys Wed Aug 04 10:07:32 2004 (41107D24)
f886b000 f88704a0 NWSAP NWSAP.sys Sat Jan 18 01:26:46 2003 (3E288326)
f887b000 f8880b00 vmnetbridge vmnetbridge.sys Fri Aug 04 22:20:06 2006 (44D38FD6)
f8883000 f8886000 BOOTVID BOOTVID.dll Sat Aug 18 00:49:09 2001 (3B7D8345)
f8887000 f8889b60 nicm nicm.sys Thu Feb 07 03:34:10 2002 (3C61CB82)
f8943000 f8945e80 ldblank ldblank.sys Tue Jun 21 20:32:04 2005 (42B84104)
f8953000 f8955280 wmiacpi wmiacpi.sys Wed Aug 04 10:07:39 2004 (41107D2B)
f8957000 f8959580 ndistapi ndistapi.sys Sat Aug 18 00:55:29 2001 (3B7D84C1)
f8973000 f8974b80 kdcom kdcom.dll Sat Aug 18 00:49:10 2001 (3B7D8346)
f8975000 f8976100 WMILIB WMILIB.SYS Sat Aug 18 01:07:23 2001 (3B7D878B)
f8977000 f8978000 dmload dmload.sys unavailable (00000000)
f8993000 f8994100 swenum swenum.sys Wed Aug 04 09:58:41 2004 (41107B11)
f8997000 f8998280 USBD USBD.SYS Sat Aug 18 01:02:58 2001 (3B7D8682)
f89bd000 f89bef00 Fs_Rec Fs_Rec.SYS Sat Aug 18 00:49:37 2001 (3B7D8361)
f89bf000 f89c0080 Beep Beep.SYS Sat Aug 18 00:47:33 2001 (3B7D82E5)
f89c1000 f89c2080 mnmdd mnmdd.SYS Sat Aug 18 00:57:28 2001 (3B7D8538)
f89c3000 f89c4080 RDPCDD RDPCDD.sys Sat Aug 18 00:46:56 2001 (3B7D82C0)
f89d3000 f89d4100 dump_WMILIB dump_WMILIB.SYS Sat Aug 18 01:07:23 2001 (3B7D878B)
f8a0b000 f8a0c460 NWSNS NWSNS.sys Thu Feb 13 19:20:46 2003 (3E4BC5DE)
f8a3b000 f8a3bd00 pciide pciide.sys Sat Aug 18 00:51:49 2001 (3B7D83E5)
f8b26000 f8b27000 Null Null.SYS unavailable (00000000)
f8b72000 f8b72d00 ldmirror ldmirror.sys Tue Jun 21 20:32:10 2005 (42B8410A)
f8b73000 f8b73e80 mirrorflt mirrorflt.sys Tue Jun 21 20:32:28 2005 (42B8411C)
f8b74000 f8b74c00 audstub audstub.sys Sat Aug 18 00:59:40 2001 (3B7D85BC)
f8ba9000 f8ba9d00 dxgthk dxgthk.sys Sat Aug 18 00:53:12 2001 (3B7D8438)
Unloaded modules:
a8e01000 a8e2b000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a8eee000 a8f18000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a8eee000 a8f18000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a9139000 a9163000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8bb6000 f8bb7000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a987b000 a9888000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a9413000 a9421000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a9163000 a9186000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f89df000 f89e1000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f877b000 f8782000 VMparport.sy
Timestamp: unavailable (00000000)
Checksum: 00000000
a9ab8000 a9acc000 parport.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f85a3000 f85ae000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8593000 f85a3000 serial.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8823000 f8828000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7ef2000 f7ef5000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
минидамп прилагаю
http://files.rsdn.ru/90507/Mini111209-01.rar
18.12.09 05:51: Перенесено из 'Архитектура программного обеспечения'
