0x24,0x7e,oxa,oxc1f5 i do niego załączam crash dump po szczegółowej analizie:
Kod: Zaznacz cały
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\Minidump\Mini061609-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6002.18005.x86fre.lh_sp2rtm.090410-1830
Machine Name:
Kernel base = 0x81846000 PsLoadedModuleList = 0x81953930
Debug session time: Tue Jun 16 10:26:07.545 2009 (GMT+2)
System Uptime: 0 days 0:27:37.242
Loading Kernel Symbols
...............................................................
................................................................
..............
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C1F5, {0, 2, 851e0198, 851e9008}
Probably caused by : CLFS.SYS ( CLFS!CClfsLogFcbVirtual::Release+58 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Unknown bugcheck code (c1f5)
Unknown bugcheck description
Arguments:
Arg1: 00000000
Arg2: 00000002
Arg3: 851e0198
Arg4: 851e9008
Debugging Details:
------------------
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xC1F5
PROCESS_NAME: System
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 884a3fde to 81901899
STACK_TEXT:
8073cc84 884a3fde 0000c1f5 00000000 00000002 nt!KeBugCheckEx+0x1e
8073ccb8 884d6852 00000000 8521fc38 00000000 CLFS!CClfsLogFcbVirtual::Release+0x58
8073cccc 81a8a81f 851f88f8 81949300 8521fc38 CLFS!ClfsMgmtDeregisterManagedClient+0x24
8073ccec 8191e644 0121fc38 8073cd14 819d2078 nt!TmpTmOffline+0x17c
8073ccf8 819d2078 8521fc38 00000000 81949300 nt!TmpShutdownTransactionManager+0xd
8073cd14 8191e17b 00000000 8191e637 00000000 nt!TmpNamespaceForEach+0x45
8073cd30 81b102e0 8377a718 8194a390 00000000 nt!TmShutdownSystem+0x48
8073cd44 818a16f6 00000000 00000000 8377a718 nt!PopGracefulShutdown+0x12a
8073cd7c 819ee5bd 00000000 02af451d 00000000 nt!ExpWorkerThread+0xfd
8073cdc0 818d566e 818a15f9 00000000 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
CLFS!CClfsLogFcbVirtual::Release+58
884a3fde 8b06 mov eax,dword ptr [esi]
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: CLFS!CClfsLogFcbVirtual::Release+58
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: CLFS
IMAGE_NAME: CLFS.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 49e018ff
FAILURE_BUCKET_ID: 0xC1F5_CLFS!CClfsLogFcbVirtual::Release+58
BUCKET_ID: 0xC1F5_CLFS!CClfsLogFcbVirtual::Release+58
Followup: MachineOwner
---------
1: kd> lmvm CLFS
start end module name
8849f000 884e0000 CLFS (pdb symbols) c:\symbols\clfs.pdb\55C3EE0E11F04561ABEE606AB612A0941\clfs.pdb
Loaded symbol image file: CLFS.SYS
Mapped memory image file: c:\symbols\CLFS.SYS\49E018FF41000\CLFS.SYS
Image path: CLFS.SYS
Image name: CLFS.SYS
Timestamp: Sat Apr 11 06:13:51 2009 (49E018FF)
CheckSum: 0003EFB6
ImageSize: 00041000
File version: 6.0.6002.18005
Product version: 6.0.6002.18005
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft? Windows? Operating System
InternalName: clfs.sys
OriginalFilename: Clfs.Sys
ProductVersion: 6.0.6002.18005
FileVersion: 6.0.6002.18005 (lh_sp2rtm.090410-1830)
FileDescription: Common Log File System Driver
LegalCopyright: ? Microsoft Corporation. All rights reserved.
Do pozostałych crash dumpów nie miałem, ponieważ miałem za mały plik pagefile.sys
Czy ktoś wie co może być przyczyną? Dysk twardy był już sprawdzany pod kątem błędów i niby jest ok. Przypomniało mi się jeszcze, że bsod 0x24 cały czas wywołuje plik fltmgr.sys
