96Beryl Napisano Październik 17, 2011 Zgłoś Share Napisano Październik 17, 2011 Witam. Dziś wyskoczył mi bluescreen z takim właśnie komunikaten. Mój system ta 64-bitowy Windows 7. Wklejam tu log z windbg: Microsoft ® Windows Debugger Version 6.11.0001.404 AMD64 Copyright © Microsoft Corporation. All rights reserved. Loading Dump File [C:\Windows\Minidump\101711-18062-01.dmp] Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: C:\symbols Executable search path is: Windows 7 Kernel Version 7601 (Service Pack 1) MP (6 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506 Machine Name: Kernel base = 0xfffff800`03012000 PsLoadedModuleList = 0xfffff800`03257670 Debug session time: Mon Oct 17 17:44:24.643 2011 (GMT+2) System Uptime: 0 days 0:03:42.002 Loading Kernel Symbols ............................................................... ................................................................ ................................ Loading User Symbols Loading unloaded module list .... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck C5, {8, 2, 0, fffff800031bea9b} Unable to load image \SystemRoot\system32\drivers\fltmgr.sys, Win32 error 0n2 *** WARNING: Unable to verify timestamp for fltmgr.sys *** ERROR: Module load completed but symbols could not be loaded for fltmgr.sys Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+1df ) Followup: Pool_corruption --------- 3: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* DRIVER_CORRUPTED_EXPOOL (c5) An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is caused by drivers that have corrupted the system pool. Run the driver verifier against any new (or suspect) drivers, and if that doesn't turn up the culprit, then use gflags to enable special pool. Arguments: Arg1: 0000000000000008, memory referenced Arg2: 0000000000000002, IRQL Arg3: 0000000000000000, value 0 = read operation, 1 = write operation Arg4: fffff800031bea9b, address which referenced memory Debugging Details: ------------------ BUGCHECK_STR: 0xC5_2 CURRENT_IRQL: 2 FAULTING_IP: nt!ExDeferredFreePool+1df fffff800`031bea9b 4c395808 cmp qword ptr [rax+8],r11 CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT PROCESS_NAME: System TRAP_FRAME: fffff8800314a490 -- (.trap 0xfffff8800314a490) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=0000000000000000 rbx=0000000000000000 rcx=fffff8000321a110 rdx=fffffa80073308f0 rsi=0000000000000000 rdi=0000000000000000 rip=fffff800031bea9b rsp=fffff8800314a620 rbp=0000000000000000 r8=fffffa8003bcacb0 r9=fffffa8007330890 r10=0000000000000001 r11=fffffa80073308a0 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei ng nz ac po cy nt!ExDeferredFreePool+0x1df: fffff800`031bea9b 4c395808 cmp qword ptr [rax+8],r11 ds:00000000`00000008=???????????????? Resetting default scope LAST_CONTROL_TRANSFER: from fffff8000308e1e9 to fffff8000308ec40 STACK_TEXT: fffff880`0314a348 fffff800`0308e1e9 : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx fffff880`0314a350 fffff800`0308ce60 : 00000000`00000000 fffff800`0309674f 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69 fffff880`0314a490 fffff800`031bea9b : 00000000`00002000 00000000`00000000 00000000`00000000 fffff800`03257f40 : nt!KiPageFault+0x260 fffff880`0314a620 fffff800`031be1a1 : fffffa80`c0000225 fffffa80`03bc5c90 00000000`00000000 00000000`00000000 : nt!ExDeferredFreePool+0x1df fffff880`0314a6b0 fffff880`0114feb8 : fffffa80`03bbd070 fffff880`0114b09e fffffa80`7063494d fffffa80`0714aa00 : nt!ExFreePoolWithTag+0x411 fffff880`0314a760 fffffa80`03bbd070 : fffff880`0114b09e fffffa80`7063494d fffffa80`0714aa00 fffffa80`04519b50 : fltmgr+0xbeb8 fffff880`0314a768 fffff880`0114b09e : fffffa80`7063494d fffffa80`0714aa00 fffffa80`04519b50 fffff880`01151609 : 0xfffffa80`03bbd070 fffff880`0314a770 fffffa80`7063494d : fffffa80`0714aa00 fffffa80`04519b50 fffff880`01151609 fffffa80`03bc5ca0 : fltmgr+0x709e fffff880`0314a778 fffffa80`0714aa00 : fffffa80`04519b50 fffff880`01151609 fffffa80`03bc5ca0 fffff880`0114928d : 0xfffffa80`7063494d fffff880`0314a780 fffffa80`04519b50 : fffff880`01151609 fffffa80`03bc5ca0 fffff880`0114928d fffffa80`03bbd070 : 0xfffffa80`0714aa00 fffff880`0314a788 fffff880`01151609 : fffffa80`03bc5ca0 fffff880`0114928d fffffa80`03bbd070 00000000`00000000 : 0xfffffa80`04519b50 fffff880`0314a790 fffffa80`03bc5ca0 : fffff880`0114928d fffffa80`03bbd070 00000000`00000000 fffffa80`04519b50 : fltmgr+0xd609 fffff880`0314a798 fffff880`0114928d : fffffa80`03bbd070 00000000`00000000 fffffa80`04519b50 fffff880`011526d6 : 0xfffffa80`03bc5ca0 fffff880`0314a7a0 fffffa80`03bbd070 : 00000000`00000000 fffffa80`04519b50 fffff880`011526d6 fffffa80`03bc5ca0 : fltmgr+0x528d fffff880`0314a7a8 00000000`00000000 : fffffa80`04519b50 fffff880`011526d6 fffffa80`03bc5ca0 00000000`00000000 : 0xfffffa80`03bbd070 STACK_COMMAND: kb FOLLOWUP_IP: nt!ExDeferredFreePool+1df fffff800`031bea9b 4c395808 cmp qword ptr [rax+8],r11 SYMBOL_STACK_INDEX: 3 SYMBOL_NAME: nt!ExDeferredFreePool+1df FOLLOWUP_NAME: Pool_corruption IMAGE_NAME: Pool_Corruption DEBUG_FLR_IMAGE_TIMESTAMP: 0 MODULE_NAME: Pool_Corruption FAILURE_BUCKET_ID: X64_0xC5_2_nt!ExDeferredFreePool+1df BUCKET_ID: X64_0xC5_2_nt!ExDeferredFreePool+1df Followup: Pool_corruption --------- 3: kd> lmvm Pool_Corruption start end module name Link do komentarza Udostępnij na innych stronach More sharing options...
helmud7543 Napisano Październik 20, 2011 Zgłoś Share Napisano Październik 20, 2011 Wygląda na jakiś niedopracowany sterownik. Wystąpił tylko raz? Link do komentarza Udostępnij na innych stronach More sharing options...
lukasz765 Napisano Październik 20, 2011 Zgłoś Share Napisano Październik 20, 2011 Jeśli raz ci wyskoczył to nie masz się czym przejmować. Każdemu to się zdarza. Link do komentarza Udostępnij na innych stronach More sharing options...
Sermaciej Napisano Październik 20, 2011 Zgłoś Share Napisano Październik 20, 2011 A mi jeszcze ani razu. Dziwne... I tak jak koledzy wyżej: Jeśli był tylko raz, to nie masz się czym martwić. Link do komentarza Udostępnij na innych stronach More sharing options...
96Beryl Napisano Październik 22, 2011 Autor Zgłoś Share Napisano Październik 22, 2011 Dzięki, rzeczywiście jak narazie sytuacja się nie powtórzyła. Temat raczej do zamknięcia. Link do komentarza Udostępnij na innych stronach More sharing options...
MikaelDorren Napisano Październik 23, 2011 Zgłoś Share Napisano Październik 23, 2011 Problem rozwiązany, więc temat zamykam.W razie potrzeby otwarcia tematu, proszę o kontakt przez PW. Link do komentarza Udostępnij na innych stronach More sharing options...