cesaroco
I'm cool cuz I Fold
ola
nos ultimos 2 dias o meu pc tem tido uns crashes e aparece o blue screen of death (akele ecra azul com erros)... e a minha firewall(outpost) tem criado ficheiros DMP com o suposto erro so que eu nao conseguido abrir esses ficheiros... alguem sabe como o posso fazer ou se tem outra maneira de saber o problema que tenho ???
Obrigado
EDIT: usei o windbg e apareceu-m o seguinte relatorio:
Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Programas\Agnitum\Outpost Firewall\log\FeedBack\feedback\Mini092307-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Sun Sep 23 17:41:03.468 2007 (GMT+1)
System Uptime: 0 days 4:00:54.158
Loading Kernel Symbols
.................................................. .................................................. ..............................................
Loading User Symbols
Loading unloaded module list
............
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************
Use !analyze -v to get detailed debugging information.
BugCheck 100000D1, {730044, 2, 1, 7c93573c}
Probably caused by : Unknown_Image ( INVALID_CONTEXT )
Followup: MachineOwner
---------
1: kd> !analyze -v
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00730044, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 7c93573c, address which referenced memory
Debugging Details:
------------------
CURRENT_IRQL: 2
FAULTING_IP:
+7c93573c
7c93573c 8930 mov dword ptr [eax],esi
PROCESS_NAME: svchost.exe
BUGCHECK_STR: RAISED_IRQL_FAULT
CUSTOMER_CRASH_COUNT: 2
DEFAULT_BUCKET_ID: DRIVER_FAULT
SYMBOL_NAME: INVALID_CONTEXT
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Unknown_Module
IMAGE_NAME: Unknown_Image
DEBUG_FLR_IMAGE_TIMESTAMP: 0
STACK_COMMAND: kb
FAILURE_BUCKET_ID: RAISED_IRQL_FAULT_svchost.exe_INVALID_CONTEXT
BUCKET_ID: RAISED_IRQL_FAULT_svchost.exe_INVALID_CONTEXT
Followup: MachineOwner
---------
Alguem me sabe dixer o k se passa ???
nos ultimos 2 dias o meu pc tem tido uns crashes e aparece o blue screen of death (akele ecra azul com erros)... e a minha firewall(outpost) tem criado ficheiros DMP com o suposto erro so que eu nao conseguido abrir esses ficheiros... alguem sabe como o posso fazer ou se tem outra maneira de saber o problema que tenho ???
Obrigado
EDIT: usei o windbg e apareceu-m o seguinte relatorio:
Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Programas\Agnitum\Outpost Firewall\log\FeedBack\feedback\Mini092307-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Sun Sep 23 17:41:03.468 2007 (GMT+1)
System Uptime: 0 days 4:00:54.158
Loading Kernel Symbols
.................................................. .................................................. ..............................................
Loading User Symbols
Loading unloaded module list
............
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************
Use !analyze -v to get detailed debugging information.
BugCheck 100000D1, {730044, 2, 1, 7c93573c}
Probably caused by : Unknown_Image ( INVALID_CONTEXT )
Followup: MachineOwner
---------
1: kd> !analyze -v
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00730044, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 7c93573c, address which referenced memory
Debugging Details:
------------------
CURRENT_IRQL: 2
FAULTING_IP:
+7c93573c
7c93573c 8930 mov dword ptr [eax],esi
PROCESS_NAME: svchost.exe
BUGCHECK_STR: RAISED_IRQL_FAULT
CUSTOMER_CRASH_COUNT: 2
DEFAULT_BUCKET_ID: DRIVER_FAULT
SYMBOL_NAME: INVALID_CONTEXT
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Unknown_Module
IMAGE_NAME: Unknown_Image
DEBUG_FLR_IMAGE_TIMESTAMP: 0
STACK_COMMAND: kb
FAILURE_BUCKET_ID: RAISED_IRQL_FAULT_svchost.exe_INVALID_CONTEXT
BUCKET_ID: RAISED_IRQL_FAULT_svchost.exe_INVALID_CONTEXT
Followup: MachineOwner
---------
Alguem me sabe dixer o k se passa ???