Kumpel von mir hat folgendes Problem:
_____________________________________
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Noel\Desktop\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*C:\symbols*
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16792.x86fre.win7_gdr.110408-1633
Machine Name:
Kernel base = 0x82c08000 PsLoadedModuleList = 0x82d50810
Debug session time: Thu Jul 28 01:29:43.233 2011 (GMT+2)
System Uptime: 0 days 3:38:59.059
Loading Kernel Symbols
.................................................. .............
.................................................. ..............
..................
Loading User Symbols
Loading unloaded module list
......
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {80d336e0, 2, 1, 82c71ed1}
Probably caused by : ntkrpamp.exe ( nt!KiTimerExpiration+15f )
Followup: MachineOwner
---------
0: kd> !analyze -v
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 80d336e0, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82c71ed1, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: 80d336e0
CURRENT_IRQL: 2
FAULTING_IP:
nt!KiTimerExpiration+15f
82c71ed1 894a04 mov dword ptr [edx+4],ecx
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: System
TRAP_FRAME: 82d2ec0c -- (.trap 0xffffffff82d2ec0c)
ErrCode = 00000002
eax=859e7930 ebx=82d336d8 ecx=82d336dc edx=80d336dc esi=82d336dc edi=82d33680
eip=82c71ed1 esp=82d2ec80 ebp=82d2ecdc iopl=0 nv up ei ng nz na po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010283
nt!KiTimerExpiration+0x15f:
82c71ed1 894a04 mov dword ptr [edx+4],ecx ds:0023:80d336e0=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 82c71ed1 to 82c4e7fb
STACK_TEXT:
82d2ec0c 82c71ed1 badb0d00 80d336dc 82c786e9 nt!KiTrap0E+0x2cf
82d2ecdc 82c7034e 000cda01 8590ad48 82d3b280 nt!KiTimerExpiration+0x15f
82d2ed20 82c70178 00000000 0000000e 00000000 nt!KiRetireDpcList+0xcb
82d2ed24 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x38
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiTimerExpiration+15f
82c71ed1 894a04 mov dword ptr [edx+4],ecx
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!KiTimerExpiration+15f
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4d9fd915
FAILURE_BUCKET_ID: 0xA_nt!KiTimerExpiration+15f
BUCKET_ID: 0xA_nt!KiTimerExpiration+15f
Followup: MachineOwner
---------
0: kd> lmvm nt
start end module name
82c08000 83018000 nt (pdb symbols) c:\symbols\ntkrpamp.pdb\2EA842465FC34B57AD5FE1ED6E 0FC67C2\ntkrpamp.pdb
Loaded symbol image file: ntkrpamp.exe
Image path: ntkrpamp.exe
Image name: ntkrpamp.exe
Timestamp: Sat Apr 09 05:57:09 2011 (4D9FD915)
CheckSum: 003D635D
ImageSize: 00410000
File version: 6.1.7600.16792
Product version: 6.1.7600.16792
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntkrpamp.exe
OriginalFilename: ntkrpamp.exe
ProductVersion: 6.1.7600.16792
FileVersion: 6.1.7600.16792 (win7_gdr.110408-1633)
FileDescription: NT Kernel & System
LegalCopyright: © Microsoft Corporation. All rights reserved.
Ich hab KEINE ahnung was des sein soll und keine Ahnung wie das zu lösen ist.
Screenshot geht auch net weil er immer n BlueScreen kriegt,
Danke Für eure Hilfe
Greetz
#push: Wir haben den PC neu aufgesetzt -> Nach wie vor selbes Problem
