Kod: Zaznacz cały
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini071210-03.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp3_gdr.100216-1514
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805634c0
Debug session time: Mon Jul 12 20:00:19.546 2010 (GMT+2)
System Uptime: 0 days 1:37:16.240
Loading Kernel Symbols
...............................................................
...........................................................
Loading User Symbols
Loading unloaded module list
............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 100000C5, {1c070b, 2, 1, 805515a1}
*** WARNING: Unable to verify timestamp for eamon.sys
*** ERROR: Module load completed but symbols could not be loaded for eamon.sys
Probably caused by : eamon.sys ( eamon+21af )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 001c070b, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 805515a1, address which referenced memory
Debugging Details:
------------------
BUGCHECK_STR: 0xC5_2
CURRENT_IRQL: 2
FAULTING_IP:
nt!ExAllocatePoolWithTag+66a
805515a1 894804 mov dword ptr [eax+4],ecx
CUSTOMER_CRASH_COUNT: 3
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: SupServ.exe
LAST_CONTROL_TRANSFER: from 8057997f to 805515a1
STACK_TEXT:
b8c89768 8057997f 00000000 00000001 704f6f49 nt!ExAllocatePoolWithTag+0x66a
b8c897d4 80579be1 b8c899c8 00100080 b8c89998 nt!IopCreateFile+0x37
b8c89830 80573e2b b8c899c8 00100080 b8c89998 nt!IoCreateFile+0x8e
b8c89870 804dd99f b8c899c8 00100080 b8c89998 nt!NtCreateFile+0x30
b8c89870 804e3597 b8c899c8 00100080 b8c89998 nt!KiFastCallEntry+0xfc
b8c89914 ba42e1af b8c899c8 00100080 b8c89998 nt!ZwCreateFile+0x11
WARNING: Stack unwind information not available. Following frames may be wrong.
b8c8995c ba43086c b8c899c8 00100080 b8c89998 eamon+0x21af
b8c899c0 ba42eca9 81fa51f8 028cc071 00000000 eamon+0x486c
b8c89a18 ba431350 81fa51f8 81f1d3a8 00000001 eamon+0x2ca9
b8c89a5c 804e13eb 81f1d2f0 821d1e28 821d1e28 eamon+0x5350
b8c89a6c 805794b6 823468e8 8228cca4 b8c89c04 nt!IopfCallDriver+0x31
b8c89b4c 8056d03b 82346900 00000000 8228cc00 nt!IopParseDevice+0xa12
b8c89bc4 805701e7 00000000 b8c89c04 00000040 nt!ObpLookupObjectName+0x53c
b8c89c18 80579b12 00000000 00000000 00000001 nt!ObOpenObjectByName+0xea
b8c89c94 80579be1 00bffb4c 80100080 00bffaec nt!IopCreateFile+0x407
b8c89cf0 80573e2b 00bffb4c 80100080 00bffaec nt!IoCreateFile+0x8e
b8c89d30 804dd99f 00bffb4c 80100080 00bffaec nt!NtCreateFile+0x30
b8c89d30 7c90e514 00bffb4c 80100080 00bffaec nt!KiFastCallEntry+0xfc
00bffb44 00000000 00000000 00000000 00000000 0x7c90e514
STACK_COMMAND: kb
FOLLOWUP_IP:
eamon+21af
ba42e1af ?? ???
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: eamon+21af
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: eamon
IMAGE_NAME: eamon.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a0c1d04
FAILURE_BUCKET_ID: 0xC5_2_eamon+21af
BUCKET_ID: 0xC5_2_eamon+21af
Followup: MachineOwner
---------
Pytanie teraz - CO MAM ZROBIĆ ? Proszę o pomoc.